last executing test programs: 1m17.531931711s ago: executing program 1 (id=175): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000010300)={r1, @in={{0x2, 0x4e24, @loopback}}}, 0x0) 1m17.107689242s ago: executing program 1 (id=177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='on\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000200), 0x0, 0x1a0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='0', 0x1) pwrite64(r4, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x60}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 1m13.962315792s ago: executing program 1 (id=183): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x89}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000040)={{0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x4, 'wlc\x00', 0x20, 0x0, 0x4a}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x4e21, 0x10000, 0x81, 0xee05, 0x8000}}, 0x44) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) gettid() r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r3, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}}, 0x0) 1m12.163333948s ago: executing program 1 (id=189): epoll_create1(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$inet(0x2b, 0x801, 0x0) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000000) 1m8.813949393s ago: executing program 1 (id=191): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x61, '\x00', 0x0, @sock_ops}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func_proto, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x30, 0x2e, 0x2e]}}, 0x0, 0x36, 0x0, 0x1}, 0x28) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x2d80, 0x82) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/platform/vhci_hcd.0/detach\x00', 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)=""/26, 0x1a}], 0x119) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0xffffffffffffffff, 0x1, 0x3, 0x3, 0x4}, 0x5}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8}]}, 0x20}}, 0x0) 1m6.363605535s ago: executing program 1 (id=193): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080)={0x0, 0xffffffff}, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 50.629747024s ago: executing program 32 (id=193): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080)={0x0, 0xffffffff}, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 14.377470185s ago: executing program 5 (id=210): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$video(0x0, 0xfffffffd, 0x10bd00) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r1) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x161483) ioctl$NBD_CLEAR_SOCK(r2, 0x125f) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) recvmsg(r3, &(0x7f0000003140)={&(0x7f0000000240)=@hci, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000600)=""/243, 0xf3}, {&(0x7f0000000700)=""/135, 0x87}, {&(0x7f0000000880)=""/176, 0xb0}, {&(0x7f0000000940)=""/156, 0x9c}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/146, 0x92}, {&(0x7f0000001f40)=""/62, 0x3e}, {&(0x7f0000001f80)=""/72, 0x48}, {&(0x7f0000002000)=""/107, 0x6b}, {&(0x7f0000002080)=""/21, 0x15}], 0xa, &(0x7f0000002140)=""/4096, 0x1000}, 0x2000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000000180)=""/4, 0x1) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5407000044000701fefffffffcdbdf25037c0000040045803c0701"], 0x754}}, 0xc000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5338, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x2, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x400001ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x400, 0x5], [0x391, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x104, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x8000, 0x4, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x7, 0x7, 0x100, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x6, 0xa, 0xffffffff, 0x40004, 0x3, 0x6, 0x100fffe, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3a, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0xf, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x0, 0x135, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 10.513790623s ago: executing program 3 (id=285): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r0, 0xd9b2794f6a139537, 0x3e7, 0xe7030000, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 8.65602769s ago: executing program 4 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x2d80, 0x82) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)=""/26, 0x1a}], 0x119) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0xffffffffffffffff, 0x1, 0x3, 0x3, 0x4}, 0x5}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8}]}, 0x20}}, 0x0) 7.685978065s ago: executing program 0 (id=290): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x20, 0x80, 0x4, 0x8, 0x0, 0x0, 0x3, 0x6}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.685625155s ago: executing program 2 (id=291): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) io_setup(0x68000, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) unshare(0x6020400) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x2}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, 0x0, 0x20000884) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x3) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) mkdir(0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x800400, 0x0) 6.67311374s ago: executing program 0 (id=292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='on\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000200), 0x0, 0x1a0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x60}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 6.636167862s ago: executing program 2 (id=293): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_robust_list(&(0x7f0000000400), 0x18) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount(&(0x7f0000000140)=@sr0, 0x0, &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x82) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$rxrpc(0x21, 0x2, 0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000400)=""/92, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x4) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000080) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000180), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x1, 0x4, 0x1000, &(0x7f000015d000/0x1000)=nil}) socket$inet6_mptcp(0xa, 0x1, 0x106) 6.635955012s ago: executing program 3 (id=294): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000fbffffffff65000000", @ANYRES32=r4], 0x38}}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0x0) close(0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x800, 0x2, 0x7f, 0x4, 0xffffffffffffffff, 0xcf6b, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x5, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7020000020000008500000086000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 6.633855372s ago: executing program 4 (id=295): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x800, 0x4) read$char_usb(r1, &(0x7f0000000040)=""/236, 0xec) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 5.556966709s ago: executing program 0 (id=296): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000008850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffc0000, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x24040050) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r8, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20008080) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f00000007c0)={&(0x7f0000000140), 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1e0, r9, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x506e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d46608c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3dd5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x729a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb432}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a2b1e4b}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7317}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x9c, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b833dce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d16ad6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76bbef28}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb1b8f31}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d28c321}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x645e9045}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bbee6fd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f679116}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3374f56f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2725aa93}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65c3250b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x559425af}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7934dc75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x343157ea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b449733}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c8a2d24}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1636e16f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40000ac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc1b6374}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc461983}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r11 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000300), 0x214200, 0x0) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r12, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r12, &(0x7f0000004300)={0x50, 0x0, r13, {0x7, 0x29, 0x0, 0x11812410, 0x800, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) write$FUSE_INIT(r11, &(0x7f00000003c0)={0x50, 0x0, r13, {0x7, 0x2d, 0xfff, 0x140, 0xd9db, 0x5f9, 0xb77, 0x4, 0x0, 0x0, 0x4, 0x3}}, 0x50) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r10, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r10, &(0x7f0000000040)={0x50, 0x0, r14, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0x3ff, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r10, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.556495219s ago: executing program 3 (id=297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) 5.556326999s ago: executing program 4 (id=298): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 4.3242016s ago: executing program 0 (id=299): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000007910480000000000710033"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 4.32405024s ago: executing program 2 (id=300): r0 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) close(r0) 4.3239491s ago: executing program 3 (id=301): r0 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xffd8) 4.243851902s ago: executing program 4 (id=302): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1}], 0x1, 0x0) 2.967501675s ago: executing program 0 (id=303): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x20, 0x80, 0x4, 0x8, 0x0, 0x0, 0x3, 0x6}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.967372285s ago: executing program 2 (id=304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='on\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000200), 0x0, 0x1a0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='0', 0x1) pwrite64(r4, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) 2.967121935s ago: executing program 3 (id=305): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)="030000001b0000000800000001000000000b000000010004000000", 0x1b) 2.966483855s ago: executing program 4 (id=306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='on\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000200), 0x0, 0x1a0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='0', 0x1) pwrite64(r4, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x60}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 1.512047121s ago: executing program 0 (id=307): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.511663081s ago: executing program 2 (id=308): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 1.454960773s ago: executing program 3 (id=309): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) getpid() 1.454786733s ago: executing program 4 (id=310): socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x12) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008002000800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4040800}, 0x40090) 0s ago: executing program 2 (id=311): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x4a600, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): dge0: port 1(bridge_slave_0) entered forwarding state [ 63.685353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.704810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.715619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.724857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.733892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.742634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.751639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.780650][ T4190] device veth0_vlan entered promiscuous mode [ 63.794045][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.810704][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.827112][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.838567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.846999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.854940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.863353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.872247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.881325][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.888434][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.896870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.906363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.915186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.924006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.932653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.941527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.951667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.960267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.968914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.977388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.997706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.005753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.013619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.023039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.031840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.040928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.061472][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.099363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.120315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.131974][ T4190] device veth1_vlan entered promiscuous mode [ 64.149787][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.162147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.171181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.180832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.191950][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.199080][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.210516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.214960][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 64.219469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.233514][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.240641][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.244581][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 64.260040][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 64.266480][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 64.273079][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.290463][ T4190] device veth0_macvtap entered promiscuous mode [ 64.297535][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 64.314728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.323412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.332121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.341424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.349582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.357216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.367139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.376874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.385766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.411884][ T4190] device veth1_macvtap entered promiscuous mode [ 64.419463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.433985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.446994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.461716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.471197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.480351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.488105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.496271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.504819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.513032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.529505][ T4199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.541115][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.552162][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.566223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.575558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.600092][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.610702][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.656983][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.667436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.676934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.686208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.696220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.705711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.714231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.729088][ T4185] device veth0_vlan entered promiscuous mode [ 64.741877][ T4191] device veth0_vlan entered promiscuous mode [ 64.752196][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.781981][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.790002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.805534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.813884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.822467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.830967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.839814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.850244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.858450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.868449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.876671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.899010][ T4185] device veth1_vlan entered promiscuous mode [ 64.921258][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.931188][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.940024][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.949596][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.988181][ T4191] device veth1_vlan entered promiscuous mode [ 65.009670][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.029363][ T4185] device veth0_macvtap entered promiscuous mode [ 65.037773][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.047766][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.056649][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.070963][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.080937][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.093053][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.100649][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.108342][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.117464][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.126891][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.142182][ T4185] device veth1_macvtap entered promiscuous mode [ 65.188751][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.207331][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.222876][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.239146][ T4188] device veth0_vlan entered promiscuous mode [ 65.255213][ T4191] device veth0_macvtap entered promiscuous mode [ 65.266296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.274909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.282920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.292066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.301492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.309947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.319160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.328055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.337036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.345581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.353287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.364975][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.380394][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.392483][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.429644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.439435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.451289][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.460391][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.469584][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.478862][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.491904][ T4191] device veth1_macvtap entered promiscuous mode [ 65.502822][ T4188] device veth1_vlan entered promiscuous mode [ 65.525524][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.534047][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.549666][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.559223][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.570948][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.580162][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.589839][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.612997][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.621990][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.628695][ T4199] device veth0_vlan entered promiscuous mode [ 65.642572][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.652879][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.660704][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.671394][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.680111][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.688974][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.709372][ T4199] device veth1_vlan entered promiscuous mode [ 65.727247][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.738692][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.749621][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.760576][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.772713][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.803214][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.822749][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.831566][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.841471][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.859110][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.871822][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.881921][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.892654][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.904153][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.915177][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.923915][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.938828][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.948954][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.966526][ T4188] device veth0_macvtap entered promiscuous mode [ 65.977712][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.999104][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.016345][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.050436][ T4261] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.062520][ T4188] device veth1_macvtap entered promiscuous mode [ 66.077927][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.087224][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.099002][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.111584][ T4199] device veth0_macvtap entered promiscuous mode [ 66.144205][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.162894][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.173844][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.184870][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.194837][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.208422][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.220909][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.250794][ T4199] device veth1_macvtap entered promiscuous mode [ 66.266179][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.281931][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.290100][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 66.300489][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.304599][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 66.311260][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.314091][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 66.324158][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.338169][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.345182][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 66.349104][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.365098][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.375519][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 66.382847][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.396370][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.407780][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.417995][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.430528][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.451921][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.482959][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.492598][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.547089][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.557737][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.569282][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.581619][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.607180][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.616765][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.627731][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.629048][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.643014][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.666209][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.677230][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.689257][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.699986][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.711050][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.721469][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.732708][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.750089][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.771391][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.784639][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.803442][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.814051][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.829137][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.840275][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.857545][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.876661][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.896492][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.908064][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.921021][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.933029][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.950772][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.968569][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.982769][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.029976][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.040030][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.052883][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.074178][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.116955][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.148158][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.163656][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.484461][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 67.504447][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 67.514445][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 67.524448][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 67.534449][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 67.544445][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 67.554446][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 67.574453][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 67.584448][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 67.594450][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 68.409442][ T4229] Bluetooth: hci0: command 0x0419 tx timeout [ 68.419269][ T4229] Bluetooth: hci2: command 0x0419 tx timeout [ 68.425796][ T4229] Bluetooth: hci1: command 0x0419 tx timeout [ 68.431964][ T4229] Bluetooth: hci3: command 0x0419 tx timeout [ 68.457498][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 68.526385][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.578171][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.600658][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.648584][ T4208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.673766][ T4208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.695713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.718821][ T4290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.728827][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.745613][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.753142][ T4290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.822214][ T4288] device wlan0 entered promiscuous mode [ 68.852814][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.896379][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.945321][ T4288] syz.0.7 (4288) used greatest stack depth: 20336 bytes left [ 70.516880][ T4309] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5'. [ 70.704779][ T4229] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.005640][ T4229] usb 4-1: Using ep0 maxpacket: 16 [ 71.037606][ T4319] file system registered [ 71.124802][ T4229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.217867][ T4229] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.249735][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.256681][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.404942][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.425975][ T4229] usb 4-1: config 0 interface 0 has no altsetting 0 [ 71.543444][ T4229] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 71.662648][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.711247][ T4323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 71.955377][ T13] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 72.003479][ T4229] usb 4-1: config 0 descriptor?? [ 72.032311][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.152079][ T13] usb 5-1: Product: syz [ 72.217759][ T13] usb 5-1: Manufacturer: syz [ 72.279977][ T13] usb 5-1: SerialNumber: syz [ 72.434148][ T13] usb 5-1: config 0 descriptor?? [ 72.484918][ T4229] usb 4-1: can't set config #0, error -71 [ 72.635126][ T13] usb 5-1: can't set config #0, error -71 [ 72.678795][ T4229] usb 4-1: USB disconnect, device number 2 [ 75.493488][ T4332] process 'syz.3.14' launched './file0' with NULL argv: empty string added [ 75.518881][ T4332] nfs4: Unknown parameter '/dev/snd/midiC#D#' [ 77.672344][ T4284] usb 5-1: USB disconnect, device number 2 [ 79.063054][ T4340] overlayfs: failed to resolve './file1': -2 [ 79.954729][ T4345] device wlan0 entered promiscuous mode [ 84.187170][ T4377] netlink: 76 bytes leftover after parsing attributes in process `syz.1.25'. [ 84.273596][ T4379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 84.589109][ T4388] overlayfs: failed to resolve './file1': -2 [ 84.614563][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.664488][ T4193] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.985063][ T21] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 86.584620][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.605689][ T1108] cfg80211: failed to load regulatory.db [ 86.664125][ T21] usb 2-1: Product: syz [ 86.684371][ T21] usb 2-1: Manufacturer: syz [ 86.689458][ T21] usb 2-1: SerialNumber: syz [ 86.746089][ T21] usb 2-1: config 0 descriptor?? [ 86.807143][ T21] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 87.243278][ T4377] Zero length message leads to an empty skb [ 87.555536][ T21] sonixb 2-1:0.0: Error writing register 01: -110 [ 87.750694][ T21] sonixb: probe of 2-1:0.0 failed with error -110 [ 87.861300][ T4381] netdevsim netdevsim1: Firmware load for '../file0/file0' refused, path contains '..' component [ 89.168483][ T21] usb 2-1: USB disconnect, device number 2 [ 89.210561][ T4416] fuse: Bad value for 'fd' [ 89.219640][ T4416] nfs4: Unknown parameter '/dev/snd/midiC#D#' [ 90.024645][ T1108] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.577906][ T4311] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 91.687895][ T4311] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 91.754551][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 91.765835][ T4311] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 91.804587][ T4311] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 91.843261][ T4311] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 91.898291][ T4311] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 91.908271][ T4433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 91.931734][ T4311] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 91.954833][ T1108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.979560][ T4311] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 91.990060][ T1108] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 92.008762][ T4311] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 92.031759][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 92.044390][ T4311] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 92.066114][ T1108] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 92.081753][ T4311] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 92.099284][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.107893][ T4311] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 92.125804][ T4311] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 92.134311][ T1108] usb 2-1: config 0 descriptor?? [ 92.148372][ T4311] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 92.178311][ T4311] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 92.189897][ T4311] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 92.199845][ T1108] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 92.221917][ T4311] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 92.252466][ T4311] hid-generic 0002:0004:0009.0001: hidraw0: HID v0.04 Device [syz0] on syz0 [ 94.395375][ T4455] fido_id[4455]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.510232][ T1324] usb 2-1: USB disconnect, device number 3 [ 94.902334][ T4466] netlink: 76 bytes leftover after parsing attributes in process `syz.1.51'. [ 95.474500][ T4311] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.614684][ T4311] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 97.022607][ T4311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.031002][ T4311] usb 2-1: Product: syz [ 97.035352][ T4311] usb 2-1: Manufacturer: syz [ 97.039981][ T4311] usb 2-1: SerialNumber: syz [ 97.054018][ T4311] usb 2-1: config 0 descriptor?? [ 97.096479][ T4311] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 97.277014][ T4480] fuse: Bad value for 'fd' [ 97.285121][ T4480] nfs4: Unknown parameter '/dev/snd/midiC#D#' [ 97.303763][ T4466] netdevsim netdevsim1: Firmware load for '../file0/file0' refused, path contains '..' component [ 97.614664][ T4311] sonixb 2-1:0.0: Error reading register 00: -110 [ 98.174104][ T4284] usb 2-1: USB disconnect, device number 4 [ 98.285369][ T4484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 98.641611][ T4496] fuse: Bad value for 'fd' [ 99.024550][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.824530][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 99.976057][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.994284][ T21] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.027292][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 100.069419][ T21] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 100.100723][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.124174][ T26] audit: type=1400 audit(1785822196.713:2): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4505 comm="syz.1.64" [ 100.175634][ T1324] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 100.193756][ T21] usb 5-1: config 0 descriptor?? [ 100.229970][ T1324] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 100.303407][ T1324] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 100.313799][ T21] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 100.349932][ T1324] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 100.365915][ T1324] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 101.236445][ T1324] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 101.268653][ T1324] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 101.299643][ T1324] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 101.348295][ T1324] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 101.384535][ T1324] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 101.409286][ T1324] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 101.440696][ T1324] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 101.470108][ T1324] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 101.504620][ T1324] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 101.527548][ T1324] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 101.554504][ T1324] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 101.593279][ T1324] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 101.623355][ T4228] usb 5-1: USB disconnect, device number 3 [ 101.650798][ T1324] hid-generic 0002:0004:0009.0002: hidraw0: HID v0.04 Device [syz0] on syz0 [ 101.678085][ T4525] JFS: discard option not supported on device [ 101.734995][ T4525] Mount JFS Failure: -22 [ 101.764231][ T4526] fido_id[4526]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.784461][ T4525] jfs_mount failed w/return code = -22 [ 101.949610][ T4525] syz.0.67 uses obsolete (PF_INET,SOCK_PACKET) [ 102.806347][ T4551] netlink: 76 bytes leftover after parsing attributes in process `syz.4.74'. [ 103.094496][ T1324] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.504948][ T4284] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 103.717576][ T4562] fuse: Bad value for 'fd' [ 103.914594][ T4284] usb 3-1: config index 0 descriptor too short (expected 10276, got 36) [ 104.145168][ T1324] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 104.179006][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.246945][ T1324] usb 5-1: Product: syz [ 104.283700][ T1324] usb 5-1: Manufacturer: syz [ 104.319199][ T1324] usb 5-1: SerialNumber: syz [ 104.410236][ T1324] usb 5-1: config 0 descriptor?? [ 104.454663][ T4230] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.500251][ T1324] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 104.557736][ T4284] usb 3-1: config 109 has too many interfaces: 142, using maximum allowed: 32 [ 104.566999][ T4284] usb 3-1: config 109 has 1 interface, different from the descriptor's value: 142 [ 104.576580][ T4284] usb 3-1: too many endpoints for config 109 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 104.588018][ T4284] usb 3-1: config 109 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 104.602345][ T4284] usb 3-1: config 109 interface 0 has no altsetting 0 [ 104.610032][ T4284] usb 3-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 104.625814][ T4284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.687651][ T4551] netdevsim netdevsim4: Firmware load for '../file0/file0' refused, path contains '..' component [ 104.714596][ T1324] sonixb 5-1:0.0: Error reading register 00: -71 [ 104.727297][ T4230] usb 4-1: Using ep0 maxpacket: 16 [ 104.733621][ T1324] usb 5-1: USB disconnect, device number 4 [ 104.844637][ T4230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.855352][ T4230] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.868344][ T4230] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.875073][ T4230] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 104.884109][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.896300][ T4230] usb 4-1: config 0 descriptor?? [ 104.938219][ T4230] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 105.143890][ T1324] usb 4-1: USB disconnect, device number 3 [ 105.234703][ T4230] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 105.474515][ T4230] usb 2-1: Using ep0 maxpacket: 16 [ 105.534757][ T4230] usb 2-1: no configurations [ 105.539473][ T4230] usb 2-1: can't read configurations, error -22 [ 105.678396][ T4196] Bluetooth: hci4: link tx timeout [ 105.683807][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 105.693520][ T4196] Bluetooth: hci4: link tx timeout [ 105.698890][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 105.708380][ T4196] Bluetooth: hci4: link tx timeout [ 105.713721][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 105.722268][ T4196] Bluetooth: hci4: link tx timeout [ 105.728261][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 105.736410][ T4196] Bluetooth: hci4: link tx timeout [ 105.741703][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 105.764388][ T4196] Bluetooth: hci4: link tx timeout [ 105.770100][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 105.778047][ T4196] Bluetooth: hci4: link tx timeout [ 105.783415][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 105.791270][ T4196] Bluetooth: hci4: link tx timeout [ 105.794522][ T4230] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 105.796543][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 105.812019][ T4196] Bluetooth: hci4: link tx timeout [ 105.817242][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 105.936097][ T4196] Bluetooth: hci4: link tx timeout [ 105.941269][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 105.950090][ T4196] Bluetooth: hci4: link tx timeout [ 105.955247][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 105.969550][ T4196] Bluetooth: hci4: link tx timeout [ 105.975045][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 105.983815][ T4196] Bluetooth: hci4: link tx timeout [ 105.988992][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 105.997952][ T4196] Bluetooth: hci4: link tx timeout [ 106.003059][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.011118][ T4196] Bluetooth: hci4: link tx timeout [ 106.016264][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.024142][ T4196] Bluetooth: hci4: link tx timeout [ 106.029321][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.045221][ T4196] Bluetooth: hci4: link tx timeout [ 106.050404][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.059978][ T4196] Bluetooth: hci4: link tx timeout [ 106.065142][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.073161][ T4196] Bluetooth: hci4: link tx timeout [ 106.078757][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.130430][ T4196] Bluetooth: hci4: link tx timeout [ 106.135607][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.143379][ T4196] Bluetooth: hci4: link tx timeout [ 106.148543][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.154496][ T4230] usb 2-1: Using ep0 maxpacket: 16 [ 106.163282][ T4196] Bluetooth: hci4: link tx timeout [ 106.168772][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.176637][ T4196] Bluetooth: hci4: link tx timeout [ 106.182249][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.203289][ T4590] device wlan0 entered promiscuous mode [ 106.203393][ T4230] usb 2-1: no configurations [ 106.221429][ T4196] Bluetooth: hci4: link tx timeout [ 106.227202][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.235288][ T4196] Bluetooth: hci4: link tx timeout [ 106.240440][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.248764][ T4196] Bluetooth: hci4: link tx timeout [ 106.253883][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.261967][ T4196] Bluetooth: hci4: link tx timeout [ 106.267171][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.275186][ T4196] Bluetooth: hci4: link tx timeout [ 106.280495][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.288632][ T4196] Bluetooth: hci4: link tx timeout [ 106.293749][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.301799][ T4196] Bluetooth: hci4: link tx timeout [ 106.306958][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.314938][ T4196] Bluetooth: hci4: link tx timeout [ 106.320071][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.328129][ T4196] Bluetooth: hci4: link tx timeout [ 106.333374][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.341618][ T4196] Bluetooth: hci4: link tx timeout [ 106.346781][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.354781][ T4196] Bluetooth: hci4: link tx timeout [ 106.359944][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.374805][ T4196] Bluetooth: hci4: link tx timeout [ 106.380014][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.388135][ T4196] Bluetooth: hci4: link tx timeout [ 106.393300][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.401152][ T4196] Bluetooth: hci4: link tx timeout [ 106.406328][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.414559][ T4230] usb 2-1: can't read configurations, error -22 [ 106.420970][ T4230] usb usb2-port1: attempt power cycle [ 106.480300][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.490590][ T4597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.834598][ T4230] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 107.494856][ T4230] usb 2-1: Using ep0 maxpacket: 16 [ 107.724821][ T4311] Bluetooth: hci4: command 0x0406 tx timeout [ 108.331435][ T4230] usb 2-1: no configurations [ 108.337005][ T4230] usb 2-1: can't read configurations, error -22 [ 108.515984][ T4616] netlink: 76 bytes leftover after parsing attributes in process `syz.0.90'. [ 108.985114][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.347761][ T4629] fuse: Bad value for 'fd' [ 109.524621][ T21] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 109.533856][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.613040][ T4635] overlayfs: unrecognized mount option "/" or missing value [ 109.749326][ T21] usb 1-1: Product: syz [ 109.753689][ T21] usb 1-1: Manufacturer: syz [ 109.758418][ T21] usb 1-1: SerialNumber: syz [ 109.767446][ T21] usb 1-1: config 0 descriptor?? [ 109.807487][ T21] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 110.013520][ T4616] netdevsim netdevsim0: Firmware load for '../file0/file0' refused, path contains '..' component [ 110.083930][ T4196] Bluetooth: hci4: link tx timeout [ 110.089207][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.097320][ T4196] Bluetooth: hci4: link tx timeout [ 110.102480][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.110274][ T21] sonixb 1-1:0.0: Error reading register 00: -71 [ 110.123008][ T4196] Bluetooth: hci4: link tx timeout [ 110.128262][ T1324] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 110.144850][ T4284] usb 3-1: string descriptor 0 read error: -32 [ 110.151140][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.158966][ T4196] Bluetooth: hci4: link tx timeout [ 110.164146][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.172388][ T4196] Bluetooth: hci4: link tx timeout [ 110.177738][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.185797][ T4196] Bluetooth: hci4: link tx timeout [ 110.191209][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.199183][ T4196] Bluetooth: hci4: link tx timeout [ 110.204522][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.212902][ T4196] Bluetooth: hci4: link tx timeout [ 110.218252][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.226372][ T4196] Bluetooth: hci4: link tx timeout [ 110.231718][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.240253][ T4196] Bluetooth: hci4: link tx timeout [ 110.245611][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.254009][ T4196] Bluetooth: hci4: link tx timeout [ 110.259449][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.267826][ T4196] Bluetooth: hci4: link tx timeout [ 110.273200][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.282126][ T4196] Bluetooth: hci4: link tx timeout [ 110.288474][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.296630][ T4196] Bluetooth: hci4: link tx timeout [ 110.304832][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.313402][ T4196] Bluetooth: hci4: link tx timeout [ 110.318925][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.327593][ T4196] Bluetooth: hci4: link tx timeout [ 110.333023][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.343279][ T4196] Bluetooth: hci4: link tx timeout [ 110.348819][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.357158][ T4196] Bluetooth: hci4: link tx timeout [ 110.362608][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.826793][ T21] usb 1-1: USB disconnect, device number 3 [ 111.210537][ T4284] usbhid 3-1:109.0: can't add hid device: -32 [ 111.666370][ T1324] usb 2-1: Using ep0 maxpacket: 16 [ 111.854243][ T1324] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.883718][ T1324] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.934305][ T1324] usb 2-1: config 0 interface 0 has no altsetting 0 [ 112.088490][ T4284] usbhid: probe of 3-1:109.0 failed with error -32 [ 112.097207][ T1324] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 112.165326][ T1324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.245449][ T1324] usb 2-1: config 0 descriptor?? [ 112.286142][ T21] usb 3-1: USB disconnect, device number 2 [ 113.060811][ T1324] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 113.070327][ T1324] usb 2-1: USB disconnect, device number 9 [ 113.504004][ T4196] Bluetooth: hci4: link tx timeout [ 113.509338][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.517684][ T4196] Bluetooth: hci4: link tx timeout [ 113.523159][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.531152][ T4196] Bluetooth: hci4: link tx timeout [ 113.536789][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.545500][ T4196] Bluetooth: hci4: link tx timeout [ 113.552458][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.560776][ T4196] Bluetooth: hci4: link tx timeout [ 113.566123][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.693092][ T4689] netlink: 76 bytes leftover after parsing attributes in process `syz.3.110'. [ 113.711929][ T4686] overlayfs: unrecognized mount option "/" or missing value [ 113.727670][ T4196] Bluetooth: hci4: link tx timeout [ 113.732865][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.744230][ T4196] Bluetooth: hci4: link tx timeout [ 113.749527][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.758359][ T4196] Bluetooth: hci4: link tx timeout [ 113.763508][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.777132][ T4196] Bluetooth: hci4: link tx timeout [ 113.782286][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.808899][ T4689] netdevsim netdevsim3: Firmware load for '../file0/file0' refused, path contains '..' component [ 113.819547][ T4196] Bluetooth: hci4: link tx timeout [ 113.824838][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.855866][ T4196] Bluetooth: hci4: link tx timeout [ 113.861383][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.870224][ T4196] Bluetooth: hci4: link tx timeout [ 113.875644][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.889788][ T4196] Bluetooth: hci4: link tx timeout [ 113.895018][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.902794][ T4196] Bluetooth: hci4: link tx timeout [ 113.907998][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.915958][ T4196] Bluetooth: hci4: link tx timeout [ 113.921073][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.929133][ T4196] Bluetooth: hci4: link tx timeout [ 113.934455][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.942272][ T4196] Bluetooth: hci4: link tx timeout [ 113.947415][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.960853][ T4196] Bluetooth: hci4: link tx timeout [ 113.966108][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.973947][ T4196] Bluetooth: hci4: link tx timeout [ 113.979139][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.987358][ T4196] Bluetooth: hci4: link tx timeout [ 113.992477][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.004852][ T4196] Bluetooth: hci4: link tx timeout [ 114.009984][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.018135][ T4196] Bluetooth: hci4: link tx timeout [ 114.023247][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.031304][ T4196] Bluetooth: hci4: link tx timeout [ 114.036439][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.048626][ T4196] Bluetooth: hci4: link tx timeout [ 114.053771][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.062471][ T4196] Bluetooth: hci4: link tx timeout [ 114.067653][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.075652][ T4196] Bluetooth: hci4: link tx timeout [ 114.080771][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.088742][ T4196] Bluetooth: hci4: link tx timeout [ 114.093887][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.105830][ T4196] Bluetooth: hci4: link tx timeout [ 114.110957][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.119074][ T4196] Bluetooth: hci4: link tx timeout [ 114.124185][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.134426][ T4196] Bluetooth: hci4: link tx timeout [ 114.139556][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.147929][ T4196] Bluetooth: hci4: link tx timeout [ 114.153045][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.245105][ T4196] Bluetooth: hci4: link tx timeout [ 114.250439][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.259054][ T4196] Bluetooth: hci4: link tx timeout [ 114.264280][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.272984][ T4196] Bluetooth: hci4: link tx timeout [ 114.278362][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.287046][ T4196] Bluetooth: hci4: link tx timeout [ 114.292190][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.618693][ T4196] Bluetooth: hci4: link tx timeout [ 114.623892][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.659989][ T4196] Bluetooth: hci4: link tx timeout [ 114.665290][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.704075][ T4196] Bluetooth: hci4: link tx timeout [ 114.709429][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.754835][ T4196] Bluetooth: hci4: link tx timeout [ 114.759990][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.790071][ T4196] Bluetooth: hci4: link tx timeout [ 114.795334][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.952190][ T4196] Bluetooth: hci4: link tx timeout [ 114.957539][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.975128][ T4196] Bluetooth: hci4: link tx timeout [ 114.980282][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.997200][ T4196] Bluetooth: hci4: link tx timeout [ 115.002399][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.019418][ T4196] Bluetooth: hci4: link tx timeout [ 115.024798][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.040786][ T4196] Bluetooth: hci4: link tx timeout [ 115.046029][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.063893][ T4196] Bluetooth: hci4: link tx timeout [ 115.069294][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.096557][ T4196] Bluetooth: hci4: link tx timeout [ 115.101775][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.139059][ T4196] Bluetooth: hci4: link tx timeout [ 115.144223][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.186876][ T4196] Bluetooth: hci4: link tx timeout [ 115.192455][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.225614][ T4196] Bluetooth: hci4: link tx timeout [ 115.230785][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.261202][ T4196] Bluetooth: hci4: link tx timeout [ 115.266395][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.284760][ T4196] Bluetooth: hci4: link tx timeout [ 115.289951][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.300173][ T4196] Bluetooth: hci4: link tx timeout [ 115.305343][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.313273][ T4196] Bluetooth: hci4: link tx timeout [ 115.318515][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.329924][ T4196] Bluetooth: hci4: link tx timeout [ 115.335090][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.368414][ T4196] Bluetooth: hci4: link tx timeout [ 115.373770][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.381464][ T4196] Bluetooth: hci4: link tx timeout [ 115.386578][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.394610][ T4196] Bluetooth: hci4: link tx timeout [ 115.399731][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.408607][ T4196] Bluetooth: hci4: link tx timeout [ 115.413721][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.421742][ T4196] Bluetooth: hci4: link tx timeout [ 115.426878][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.434737][ T4196] Bluetooth: hci4: link tx timeout [ 115.439846][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.447929][ T4196] Bluetooth: hci4: link tx timeout [ 115.453038][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.461200][ T4196] Bluetooth: hci4: link tx timeout [ 115.466350][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.474127][ T4196] Bluetooth: hci4: link tx timeout [ 115.479293][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.487939][ T4196] Bluetooth: hci4: link tx timeout [ 115.493052][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.501266][ T4196] Bluetooth: hci4: link tx timeout [ 115.506505][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.514315][ T4196] Bluetooth: hci4: link tx timeout [ 115.519464][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.527359][ T4196] Bluetooth: hci4: link tx timeout [ 115.532473][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.540297][ T4196] Bluetooth: hci4: link tx timeout [ 115.545426][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.563440][ T4196] Bluetooth: hci4: link tx timeout [ 115.568629][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.576606][ T4196] Bluetooth: hci4: link tx timeout [ 115.581712][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.593083][ T4196] Bluetooth: hci4: link tx timeout [ 115.598619][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.793256][ T4711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 116.004586][ T1324] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 116.013354][ T4193] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 116.900703][ T4722] ODEBUG: Out of memory. ODEBUG disabled [ 117.025179][ T1324] usb 2-1: Using ep0 maxpacket: 32 [ 117.064965][ T4193] usb 1-1: Using ep0 maxpacket: 16 [ 117.080307][ T4729] netlink: 76 bytes leftover after parsing attributes in process `syz.2.123'. [ 117.171016][ T1324] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 117.184086][ T4731] netdevsim netdevsim2: Firmware load for '../file0/file0' refused, path contains '..' component [ 117.187522][ T1324] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 117.213000][ T1324] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 117.227506][ T4193] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.237977][ T4193] usb 1-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.263107][ T4193] usb 1-1: config 0 interface 0 has no altsetting 0 [ 117.283492][ T4193] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 117.302384][ T4193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.319713][ T4193] usb 1-1: config 0 descriptor?? [ 117.366186][ T4193] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 117.414676][ T1324] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 117.429250][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.447598][ T1324] usb 2-1: Product: syz [ 117.455133][ T1324] usb 2-1: Manufacturer: syz [ 117.480122][ T1324] usb 2-1: SerialNumber: syz [ 117.536045][ T1324] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 117.570603][ T4284] usb 1-1: USB disconnect, device number 4 [ 117.576033][ T1324] imon 2-1:155.0: unable to initialize intf0, err -19 [ 117.594003][ T1324] imon:imon_probe: failed to initialize context! [ 117.650043][ T1324] imon 2-1:155.0: unable to register, err -19 [ 117.770535][ T4737] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 118.075923][ T4739] autofs4:pid:4739:autofs_fill_super: called with bogus options [ 118.242223][ T4196] Bluetooth: hci4: link tx timeout [ 118.247811][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.256368][ T4196] Bluetooth: hci4: link tx timeout [ 118.262094][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.270299][ T4196] Bluetooth: hci4: link tx timeout [ 118.276460][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.284674][ T4196] Bluetooth: hci4: link tx timeout [ 118.290321][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.298406][ T4196] Bluetooth: hci4: link tx timeout [ 118.304303][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.418802][ T4196] Bluetooth: hci4: link tx timeout [ 118.423944][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.432114][ T4196] Bluetooth: hci4: link tx timeout [ 118.437297][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.483191][ T4196] Bluetooth: hci4: link tx timeout [ 118.488467][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.496367][ T4196] Bluetooth: hci4: link tx timeout [ 118.501515][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.509821][ T4196] Bluetooth: hci4: link tx timeout [ 118.514985][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.522833][ T4196] Bluetooth: hci4: link tx timeout [ 118.528073][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.535948][ T4196] Bluetooth: hci4: link tx timeout [ 118.541085][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.557261][ T4196] Bluetooth: hci4: link tx timeout [ 118.562405][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.570579][ T4196] Bluetooth: hci4: link tx timeout [ 118.576156][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.599427][ T4196] Bluetooth: hci4: link tx timeout [ 118.605445][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.616508][ T4196] Bluetooth: hci4: link tx timeout [ 118.621675][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.629775][ T4196] Bluetooth: hci4: link tx timeout [ 118.634991][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.660235][ T4196] Bluetooth: hci4: link tx timeout [ 118.665529][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.674869][ T4196] Bluetooth: hci4: link tx timeout [ 118.679995][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.688225][ T4196] Bluetooth: hci4: link tx timeout [ 118.693336][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.704100][ T4196] Bluetooth: hci4: link tx timeout [ 118.709305][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.747621][ T4196] Bluetooth: hci4: link tx timeout [ 118.752801][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.774701][ T4196] Bluetooth: hci4: link tx timeout [ 118.779861][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.788003][ T4196] Bluetooth: hci4: link tx timeout [ 118.793121][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.801256][ T4196] Bluetooth: hci4: link tx timeout [ 118.806418][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.818936][ T4196] Bluetooth: hci4: link tx timeout [ 118.824065][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.832115][ T4196] Bluetooth: hci4: link tx timeout [ 118.837330][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.851763][ T1324] usb 2-1: USB disconnect, device number 10 [ 118.858609][ T4196] Bluetooth: hci4: link tx timeout [ 118.863740][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.871712][ T4196] Bluetooth: hci4: link tx timeout [ 118.877063][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.885208][ T4764] syz.2.130 (4764): attempted to duplicate a private mapping with mremap. This is not supported. [ 118.934824][ T4196] Bluetooth: hci4: link tx timeout [ 118.940651][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.950853][ T4196] Bluetooth: hci4: link tx timeout [ 118.956810][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.966155][ T4196] Bluetooth: hci4: link tx timeout [ 118.971496][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 119.975768][ T4196] Bluetooth: hci4: link tx timeout [ 119.980922][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 119.998567][ T4196] Bluetooth: hci4: link tx timeout [ 120.004076][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 120.013785][ T4196] Bluetooth: hci4: link tx timeout [ 120.018967][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 120.037736][ T4196] Bluetooth: hci4: link tx timeout [ 120.042934][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 120.051876][ T4196] Bluetooth: hci4: link tx timeout [ 120.057056][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 120.071421][ T4196] Bluetooth: hci4: link tx timeout [ 120.077010][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 120.154088][ T4772] overlayfs: unrecognized mount option "/" or missing value [ 120.534207][ T4783] netlink: 76 bytes leftover after parsing attributes in process `syz.2.138'. [ 120.579913][ T4783] netdevsim netdevsim2: Firmware load for '../file0/file0' refused, path contains '..' component [ 120.620906][ T4788] ======================================================= [ 120.620906][ T4788] WARNING: The mand mount option has been deprecated and [ 120.620906][ T4788] and is ignored by this kernel. Remove the mand [ 120.620906][ T4788] option from the mount to silence this warning. [ 120.620906][ T4788] ======================================================= [ 120.655887][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.041361][ T4787] loop0: detected capacity change from 0 to 512 [ 123.310463][ T4787] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.329265][ T4787] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.621342][ T4196] Bluetooth: hci4: link tx timeout [ 124.626688][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.634523][ T4196] Bluetooth: hci4: link tx timeout [ 124.640210][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.648323][ T4196] Bluetooth: hci4: link tx timeout [ 124.653798][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.662233][ T4196] Bluetooth: hci4: link tx timeout [ 124.667791][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.676091][ T4196] Bluetooth: hci4: link tx timeout [ 124.681634][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.991005][ T4196] Bluetooth: hci4: link tx timeout [ 125.005872][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.870812][ T4834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 126.086921][ T4840] JFS: discard option not supported on device [ 126.156843][ T4840] Mount JFS Failure: -22 [ 127.331977][ T4840] jfs_mount failed w/return code = -22 [ 127.454675][ T4848] capability: warning: `syz.2.154' uses deprecated v2 capabilities in a way that may be insecure [ 127.791661][ T4196] Bluetooth: hci4: link tx timeout [ 127.796887][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.805160][ T4196] Bluetooth: hci4: link tx timeout [ 127.810352][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.818484][ T4196] Bluetooth: hci4: link tx timeout [ 127.823671][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.831834][ T4196] Bluetooth: hci4: link tx timeout [ 127.837151][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.141931][ T4196] Bluetooth: hci4: link tx timeout [ 128.147121][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.155142][ T4196] Bluetooth: hci4: link tx timeout [ 128.160322][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.617850][ T4196] Bluetooth: hci4: link tx timeout [ 128.623000][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.634849][ T4196] Bluetooth: hci4: link tx timeout [ 128.639982][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.648982][ T4196] Bluetooth: hci4: link tx timeout [ 128.654114][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.662390][ T4196] Bluetooth: hci4: link tx timeout [ 128.667556][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.676090][ T4196] Bluetooth: hci4: link tx timeout [ 128.681206][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.689743][ T4196] Bluetooth: hci4: link tx timeout [ 128.695000][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.737227][ T4196] Bluetooth: hci4: link tx timeout [ 128.742402][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.750507][ T4196] Bluetooth: hci4: link tx timeout [ 128.755693][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.763700][ T4196] Bluetooth: hci4: link tx timeout [ 128.768866][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.776895][ T4196] Bluetooth: hci4: link tx timeout [ 128.782002][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.809664][ T4856] gadgetfs: bound to dummy_udc driver [ 128.831588][ T4196] Bluetooth: hci4: link tx timeout [ 128.837244][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.878391][ T4196] Bluetooth: hci4: link tx timeout [ 128.895037][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.902717][ T4196] Bluetooth: hci4: link tx timeout [ 128.934747][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.942553][ T4196] Bluetooth: hci4: link tx timeout [ 128.948700][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.274662][ T4333] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 129.324467][ C0] gadgetfs: connected [ 129.329765][ T4333] gadgetfs: disconnected [ 129.574420][ C0] gadgetfs: connected [ 129.684668][ T4333] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 130.744685][ T4333] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 130.816426][ T4333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.826662][ T4888] input: syz1 as /devices/virtual/input/input6 [ 130.894446][ C0] gadgetfs: configuration #1 [ 131.004783][ T4850] gadgetfs: suspended from state 3 [ 131.014610][ T4333] usb 1-1: can't set config #1, error -71 [ 131.022747][ T4333] usb 1-1: USB disconnect, device number 5 [ 131.564647][ T4850] gadgetfs: disconnected [ 132.658057][ T4196] Bluetooth: hci4: link tx timeout [ 132.663206][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.671581][ T4196] Bluetooth: hci4: link tx timeout [ 132.677038][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.687743][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.688252][ T4196] Bluetooth: hci4: link tx timeout [ 132.694062][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.699599][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.934959][ T4196] Bluetooth: hci4: link tx timeout [ 132.940134][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.948563][ T4196] Bluetooth: hci4: link tx timeout [ 132.953704][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.962191][ T4196] Bluetooth: hci4: link tx timeout [ 132.967336][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.975358][ T4196] Bluetooth: hci4: link tx timeout [ 132.980464][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.988453][ T4196] Bluetooth: hci4: link tx timeout [ 132.993580][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.001629][ T4196] Bluetooth: hci4: link tx timeout [ 133.007110][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.015174][ T4196] Bluetooth: hci4: link tx timeout [ 133.020284][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.028291][ T4196] Bluetooth: hci4: link tx timeout [ 133.033401][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.056526][ T4196] Bluetooth: hci4: link tx timeout [ 133.061726][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.069797][ T4196] Bluetooth: hci4: link tx timeout [ 133.074992][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.083066][ T4196] Bluetooth: hci4: link tx timeout [ 133.088230][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.096869][ T4196] Bluetooth: hci4: link tx timeout [ 133.102008][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.122582][ T4196] Bluetooth: hci4: link tx timeout [ 133.127768][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.135827][ T4196] Bluetooth: hci4: link tx timeout [ 133.140947][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.148972][ T4196] Bluetooth: hci4: link tx timeout [ 133.154099][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.162157][ T4196] Bluetooth: hci4: link tx timeout [ 133.167344][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.187486][ T4196] Bluetooth: hci4: link tx timeout [ 133.192653][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.200904][ T4196] Bluetooth: hci4: link tx timeout [ 133.206216][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.214446][ T4196] Bluetooth: hci4: link tx timeout [ 133.219587][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.227598][ T4196] Bluetooth: hci4: link tx timeout [ 133.232712][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.240770][ T4196] Bluetooth: hci4: link tx timeout [ 133.245980][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.258315][ T4196] Bluetooth: hci4: link tx timeout [ 133.263444][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.269060][ T4917] loop4: detected capacity change from 0 to 512 [ 133.278929][ T4196] Bluetooth: hci4: link tx timeout [ 133.284085][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.292477][ T4196] Bluetooth: hci4: link tx timeout [ 133.297627][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.305486][ T4196] Bluetooth: hci4: link tx timeout [ 133.310638][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.319052][ T4196] Bluetooth: hci4: link tx timeout [ 133.324166][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.332868][ T4196] Bluetooth: hci4: link tx timeout [ 133.338029][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.354495][ T4196] Bluetooth: hci4: link tx timeout [ 133.359664][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.381094][ T4927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.481563][ T4925] smpboot: CPU 1 is now offline [ 135.910525][ T4917] EXT4-fs: failed to create workqueue [ 135.964882][ T4917] EXT4-fs (loop4): mount failed [ 136.872365][ T4949] JFS: discard option not supported on device [ 136.882831][ T4947] gadgetfs: bound to dummy_udc driver [ 136.898159][ T4949] Mount JFS Failure: -22 [ 136.923508][ T4948] device wlan0 entered promiscuous mode [ 136.932062][ T4949] jfs_mount failed w/return code = -22 [ 137.724601][ T4950] gadgetfs: suspended from state 2 [ 137.784507][ T4311] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 139.737486][ T4958] fuse: Bad value for 'fd' [ 141.244323][ T4963] netlink: 76 bytes leftover after parsing attributes in process `syz.2.190'. [ 143.676629][ T4974] loop3: detected capacity change from 0 to 512 [ 143.686950][ T4311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 143.776209][ T4974] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.787408][ T4974] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.489645][ T4984] overlayfs: unrecognized mount option "/" or missing value [ 145.954495][ T4311] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 145.963621][ T4311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.628103][ T4987] 9pnet_virtio: no channels available for device ./bus [ 147.564309][ T4311] usb 3-1: config 0 descriptor?? [ 147.594545][ T4311] usb 3-1: can't set config #0, error -71 [ 147.611700][ T4311] usb 3-1: USB disconnect, device number 3 [ 147.896108][ T5000] 9pnet_virtio: no channels available for device syz [ 148.972678][ T5007] fuse: Bad value for 'fd' [ 149.589500][ T4999] gadgetfs: bound to dummy_udc driver [ 149.638559][ T5001] nfs4: Unknown parameter '/dev/snd/midiC#D#' [ 150.144102][ T5012] netlink: 'syz.0.202': attribute type 4 has an invalid length. [ 150.152379][ T5012] netlink: 17 bytes leftover after parsing attributes in process `syz.0.202'. [ 153.984508][ T4284] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 155.725936][ T5030] netlink: 76 bytes leftover after parsing attributes in process `syz.2.206'. [ 156.334441][ T4284] usb 3-1: device descriptor read/64, error -71 [ 156.595525][ T5036] 9pnet_virtio: no channels available for device ./bus [ 157.634454][ T4284] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 158.774477][ T4284] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 158.783605][ T4284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.420621][ T4284] usb 3-1: Product: syz [ 159.427559][ T5048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.209'. [ 159.461374][ T4284] usb 3-1: Manufacturer: syz [ 159.514477][ T4284] usb 3-1: SerialNumber: syz [ 159.534877][ T5048] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 159.559646][ T4284] usb 3-1: config 0 descriptor?? [ 160.416173][ T4284] usb 3-1: can't set config #0, error -71 [ 160.754559][ T4284] usb 3-1: USB disconnect, device number 5 [ 161.505720][ T5061] gadgetfs: bound to dummy_udc driver [ 161.615897][ T5066] lo speed is unknown, defaulting to 1000 [ 161.770996][ T5066] lo speed is unknown, defaulting to 1000 [ 161.884455][ T4284] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 161.904403][ C0] gadgetfs: connected [ 161.914999][ T5059] gadgetfs: suspended from state 3 [ 161.950321][ T5059] gadgetfs: disconnected [ 162.082984][ T5060] chnl_net:caif_netlink_parms(): no params data found [ 162.143237][ T5066] lo speed is unknown, defaulting to 1000 [ 163.071903][ T5084] 9pnet_virtio: no channels available for device ./bus [ 163.602861][ T1108] Bluetooth: hci5: command 0x0409 tx timeout [ 165.185388][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.634641][ T5060] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.688445][ T5060] device bridge_slave_0 entered promiscuous mode [ 165.776706][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.783775][ T5060] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.888408][ T5060] device bridge_slave_1 entered promiscuous mode [ 166.623872][ T26] audit: type=1400 audit(1785822263.213:3): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5101 comm="syz.0.223" [ 165.900617][ T5066] infiniband syz1: set active [ 167.046583][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 167.066889][ T150] blk_update_request: I/O error, dev sda, sector 705006 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 167.078470][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88126) [ 167.090617][ T150] Buffer I/O error on device sda1, logical block 88087 [ 167.097896][ T150] blk_update_request: I/O error, dev sda, sector 705046 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 167.109913][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88131) [ 167.121521][ T150] Buffer I/O error on device sda1, logical block 88092 [ 167.128730][ T150] blk_update_request: I/O error, dev sda, sector 705182 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 167.140052][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88150) [ 167.151935][ T150] Buffer I/O error on device sda1, logical block 88109 [ 167.158918][ T150] Buffer I/O error on device sda1, logical block 88110 [ 167.166101][ T150] Buffer I/O error on device sda1, logical block 88111 [ 167.173031][ T150] blk_update_request: I/O error, dev sda, sector 705214 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 167.184708][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88152) [ 167.196341][ T150] Buffer I/O error on device sda1, logical block 88113 [ 167.203287][ T150] blk_update_request: I/O error, dev sda, sector 705486 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 167.215305][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88186) [ 167.226895][ T150] Buffer I/O error on device sda1, logical block 88147 [ 167.233823][ T150] blk_update_request: I/O error, dev sda, sector 705590 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 167.248111][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88199) [ 167.259887][ T150] Buffer I/O error on device sda1, logical block 88160 [ 167.267038][ T150] blk_update_request: I/O error, dev sda, sector 705806 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 167.278339][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88227) [ 167.293100][ T4209] blk_update_request: I/O error, dev sda, sector 707838 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 167.304682][ T4209] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88480) [ 167.316575][ T4209] Buffer I/O error on device sda1, logical block 88441 [ 167.323853][ T4209] blk_update_request: I/O error, dev sda, sector 708862 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 167.335146][ T4209] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88608) [ 167.346681][ T4209] Buffer I/O error on device sda1, logical block 88569 [ 167.353612][ T4209] blk_update_request: I/O error, dev sda, sector 721206 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 167.364910][ T4209] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2028 starting block 90151) [ 167.405627][ T5066] infiniband syz1: added lo [ 167.907076][ T4311] lo speed is unknown, defaulting to 1000 [ 167.922463][ T5060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.948595][ T5066] infiniband syz1: Couldn't open port 1 [ 167.994298][ T5060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.030087][ T5114] fuse: Bad value for 'fd' [ 168.056567][ T5066] RDS/IB: syz1: added [ 168.079430][ T5113] nfs4: Unknown parameter '/dev/snd/midiC#D#' [ 168.410500][ T5066] smc: adding ib device syz1 with port count 1 [ 168.442820][ T5066] smc: ib device syz1 port 1 has pnetid [ 168.495115][ T4284] lo speed is unknown, defaulting to 1000 [ 168.532914][ T5066] lo speed is unknown, defaulting to 1000 [ 168.543653][ T5060] team0: Port device team_slave_0 added [ 168.581564][ T5060] team0: Port device team_slave_1 added [ 168.650969][ T5100] Buffer I/O error on dev sda1, logical block 129, lost async page write [ 168.659825][ T5100] Buffer I/O error on dev sda1, logical block 131, lost async page write [ 168.668350][ T5100] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 168.676865][ T5100] Buffer I/O error on dev sda1, logical block 224, lost async page write [ 168.685641][ T5100] Buffer I/O error on dev sda1, logical block 8210, lost async page write [ 168.694162][ T5100] Buffer I/O error on dev sda1, logical block 23725, lost async page write [ 168.709483][ T3519] Aborting journal on device sda1-8. [ 168.724261][ T5060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.752880][ T150] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 168.769391][ T3519] JBD2: Error -5 detected when updating journal superblock for sda1-8. [ 168.810141][ T5060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.900664][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 168.924492][ T5060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.946724][ T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 168.964653][ T4172] EXT4-fs (sda1): I/O error while writing superblock [ 168.985789][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 169.019600][ T4318] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.090595][ T5066] lo speed is unknown, defaulting to 1000 [ 169.109188][ T5060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.142446][ T5060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.310567][ T5060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.327979][ T5100] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 169.379704][ T4318] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.401648][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 169.413050][ T4284] Bluetooth: hci5: command 0x040f tx timeout [ 169.464278][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 169.480231][ T5066] lo speed is unknown, defaulting to 1000 [ 169.514531][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 169.541899][ T4318] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.594484][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 169.621703][ T5060] device hsr_slave_0 entered promiscuous mode [ 169.638168][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 169.695892][ T5060] device hsr_slave_1 entered promiscuous mode [ 169.722309][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 169.742985][ T5060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.762791][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 169.791926][ T5060] Cannot create hsr debugfs directory [ 169.808303][ T4318] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.838631][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 169.861844][ T5120] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.227: Detected aborted journal [ 169.878955][ T5066] lo speed is unknown, defaulting to 1000 [ 169.942831][ T5120] EXT4-fs (sda1): Remounting filesystem read-only [ 169.990862][ T5120] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.227: Detected aborted journal [ 170.087930][ T5120] EXT4-fs (sda1): Remounting filesystem read-only [ 170.099022][ T3850] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0 [ 170.176315][ T5120] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.227: Detected aborted journal [ 170.236493][ T5124] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0 [ 170.280374][ T5120] EXT4-fs (sda1): Remounting filesystem read-only [ 170.316638][ T5066] lo speed is unknown, defaulting to 1000 [ 170.325903][ T5060] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 170.351517][ T5120] EXT4-fs (sda1): Remounting filesystem read-only [ 170.524800][ T4196] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 172.156376][ T4311] Bluetooth: hci5: command 0x0419 tx timeout [ 172.252689][ T5060] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 172.298844][ T5060] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 172.354313][ T5060] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 172.401500][ T5066] lo speed is unknown, defaulting to 1000 [ 172.575224][ T5142] overlayfs: unrecognized mount option "/" or missing value [ 172.668678][ T5060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.788390][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.819470][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.612000][ T5150] 9pnet_virtio: no channels available for device ./bus [ 173.995331][ T4172] EXT4-fs error: 60 callbacks suppressed [ 173.995345][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 174.526185][ T5151] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.233: Detected aborted journal [ 174.539399][ T5060] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.583481][ T3850] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 174.624155][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.632775][ T4172] EXT4-fs: 32 callbacks suppressed [ 174.632783][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 174.655105][ T5151] EXT4-fs (sda1): Remounting filesystem read-only [ 174.663210][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.721957][ T5154] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.234: Detected aborted journal [ 174.733387][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 174.751952][ T5155] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.235: Detected aborted journal [ 174.763547][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.770624][ T4292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.780311][ T5151] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.233: Detected aborted journal [ 174.797253][ T5154] EXT4-fs (sda1): Remounting filesystem read-only [ 174.806811][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 174.813312][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 174.828134][ T5155] EXT4-fs (sda1): Remounting filesystem read-only [ 174.835022][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.843163][ T5151] EXT4-fs (sda1): Remounting filesystem read-only [ 174.855158][ T5154] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.234: Detected aborted journal [ 174.871313][ T5155] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.235: Detected aborted journal [ 174.883990][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.903467][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 174.913876][ T5154] EXT4-fs (sda1): Remounting filesystem read-only [ 174.922774][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.929856][ T4292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.941886][ T5155] EXT4-fs (sda1): Remounting filesystem read-only [ 174.949869][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 175.033077][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.065076][ T26] audit: type=1400 audit(1785822271.663:4): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5154 comm="syz.4.234" [ 175.095290][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.156943][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.239261][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.292024][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.338284][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.371314][ T5175] kvm: pic: non byte read [ 175.381187][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.396997][ T5175] kvm: pic: non byte read [ 175.407395][ T5175] kvm: pic: non byte read [ 175.430867][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.438368][ T4174] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 175.458792][ T5175] kvm: pic: non byte read [ 175.475196][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.487619][ T5175] kvm: pic: non byte read [ 175.504252][ T5175] kvm: pic: non byte read [ 175.518411][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.534198][ T5175] kvm: pic: non byte read [ 175.550863][ T5175] kvm: pic: non byte read [ 175.559271][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.581955][ T5175] kvm: pic: non byte read [ 175.598239][ T5175] kvm: pic: non byte read [ 175.603164][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.651416][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.704585][ T4174] usb 4-1: Using ep0 maxpacket: 8 [ 175.756756][ T4318] device hsr_slave_0 left promiscuous mode [ 175.773698][ T4318] device hsr_slave_1 left promiscuous mode [ 175.783953][ T4318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.801749][ T4318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.835702][ T4174] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 175.849171][ T4318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.867706][ T4174] usb 4-1: config 0 has no interface number 0 [ 175.880604][ T26] audit: type=1326 audit(1785822272.473:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5178 comm="syz.0.241" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d924c019 code=0x7ffc0000 [ 175.909235][ T4318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.923248][ T4174] usb 4-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 175.948781][ T4174] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 175.971018][ T26] audit: type=1326 audit(1785822272.513:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5178 comm="syz.0.241" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f80d924c019 code=0x7ffc0000 [ 176.005904][ T4174] usb 4-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 176.047137][ T4174] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.088706][ T26] audit: type=1326 audit(1785822272.533:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5178 comm="syz.0.241" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d924c019 code=0x7ffc0000 [ 176.126281][ T4318] device bridge_slave_1 left promiscuous mode [ 176.144634][ T4318] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.198256][ T4318] device bridge_slave_0 left promiscuous mode [ 176.212159][ T26] audit: type=1326 audit(1785822272.563:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5178 comm="syz.0.241" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f80d924c019 code=0x7ffc0000 [ 176.246586][ T4318] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.297140][ T4174] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 176.332495][ T4174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.348212][ T26] audit: type=1326 audit(1785822272.563:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5178 comm="syz.0.241" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d924c019 code=0x7ffc0000 [ 176.389601][ T4174] usb 4-1: Product: syz [ 176.403983][ T4174] usb 4-1: Manufacturer: syz [ 176.420958][ T4174] usb 4-1: SerialNumber: syz [ 176.446918][ T4174] usb 4-1: config 0 descriptor?? [ 176.469990][ T4318] device veth1_macvtap left promiscuous mode [ 176.484744][ T5160] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 176.500036][ T4318] device veth0_macvtap left promiscuous mode [ 176.521823][ T4318] device veth1_vlan left promiscuous mode [ 176.530449][ T4174] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 176.563265][ T4318] device veth0_vlan left promiscuous mode [ 177.007306][ T4318] team0 (unregistering): Port device team_slave_1 removed [ 177.053894][ T4318] team0 (unregistering): Port device team_slave_0 removed [ 177.112004][ T4318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.142722][ T5168] read descriptors [ 177.201997][ T4318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.223630][ T5189] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 178.865300][ T4333] usb 4-1: USB disconnect, device number 4 [ 178.902001][ T4190] ffs_data_put(): freeing [ 178.928272][ T4318] bond0 (unregistering): Released all slaves [ 179.022293][ T5195] EXT4-fs error: 53 callbacks suppressed [ 179.022303][ T5195] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.245: Detected aborted journal [ 179.078508][ T5196] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:7: reading directory lblock 0 [ 179.096310][ T5197] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0 [ 179.125639][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 179.211130][ T5198] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.247: Detected aborted journal [ 179.226406][ T5195] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.245: Detected aborted journal [ 179.244989][ T5200] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0 [ 179.257131][ T5201] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:7: reading directory lblock 0 [ 179.299052][ T5198] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.247: Detected aborted journal [ 179.333498][ T3850] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0 [ 179.379032][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.418248][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.146481][ T5205] EXT4-fs: 42 callbacks suppressed [ 180.146493][ T5205] EXT4-fs (sda1): Remounting filesystem read-only [ 180.415588][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 180.708077][ T5060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.101660][ T5205] EXT4-fs (sda1): Remounting filesystem read-only [ 181.192185][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.286097][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.300227][ T5222] EXT4-fs (sda1): Remounting filesystem read-only [ 181.308161][ T5221] EXT4-fs (sda1): Remounting filesystem read-only [ 181.373760][ T5221] EXT4-fs (sda1): Remounting filesystem read-only [ 181.401493][ T5222] EXT4-fs (sda1): Remounting filesystem read-only [ 181.415563][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.423544][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 181.434548][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 181.449234][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.508375][ T5205] EXT4-fs (sda1): Remounting filesystem read-only [ 183.152136][ T5060] device veth0_vlan entered promiscuous mode [ 183.174869][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.220321][ T26] audit: type=1400 audit(1785822279.813:10): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5222 comm="syz.2.249" [ 183.246365][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.307352][ T5060] device veth1_vlan entered promiscuous mode [ 183.449102][ T5060] device veth0_macvtap entered promiscuous mode [ 183.550668][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.616410][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.692802][ T5060] device veth1_macvtap entered promiscuous mode [ 183.734757][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.797501][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 183.868892][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.921280][ T4172] EXT4-fs error: 56 callbacks suppressed [ 184.921296][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 185.600815][ T4311] kernel write not supported for file /sequencer2 (pid: 4311 comm: kworker/0:8) [ 185.611636][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.654483][ T4172] EXT4-fs: 13 callbacks suppressed [ 185.654493][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 185.669100][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.767149][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.777274][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 185.816205][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.847556][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 185.854063][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 185.894413][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.904267][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.944448][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 185.964455][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 185.970564][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 185.996793][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 186.002842][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.025063][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 186.036866][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 186.052424][ T5060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.078921][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 186.111073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.120573][ T3850] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 186.145165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.156516][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 186.162997][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 186.212795][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.235267][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.247907][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 186.273043][ T5253] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.256: Detected aborted journal [ 186.290859][ T5254] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.257: Detected aborted journal [ 186.305914][ T5255] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.258: Detected aborted journal [ 186.320308][ T5256] EXT4-fs (sda1): Remounting filesystem read-only [ 186.334430][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.356959][ T5256] EXT4-fs (sda1): Remounting filesystem read-only [ 186.363509][ T5253] EXT4-fs (sda1): Remounting filesystem read-only [ 186.373022][ T5255] EXT4-fs (sda1): Remounting filesystem read-only [ 186.387193][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.094458][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.186713][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.240443][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.919029][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.943236][ T5279] EXT4-fs error: 19 callbacks suppressed [ 189.943247][ T5279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.263: Detected aborted journal [ 189.978184][ T5060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.014891][ T3850] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 190.026350][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.070488][ T5279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.263: Detected aborted journal [ 190.084917][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.132986][ T5283] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.265: Detected aborted journal [ 190.158895][ T5284] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.264: Detected aborted journal [ 190.185676][ T5060] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.218889][ T5286] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.266: Detected aborted journal [ 190.245821][ T5279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.263: Detected aborted journal [ 190.264404][ T5060] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.273123][ T5060] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.287111][ T5283] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.265: Detected aborted journal [ 190.306591][ T5284] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.264: Detected aborted journal [ 190.327090][ T5286] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.266: Detected aborted journal [ 190.455746][ T5060] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.027244][ T5284] EXT4-fs: 19 callbacks suppressed [ 191.027257][ T5284] EXT4-fs (sda1): Remounting filesystem read-only [ 191.039239][ T5286] EXT4-fs (sda1): Remounting filesystem read-only [ 191.048358][ T5291] EXT4-fs (sda1): Remounting filesystem read-only [ 191.055047][ T5283] EXT4-fs (sda1): Remounting filesystem read-only [ 192.431646][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 192.801441][ T5291] EXT4-fs (sda1): Remounting filesystem read-only [ 192.819194][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 193.003782][ T5304] EXT4-fs (sda1): Remounting filesystem read-only [ 193.044160][ T4292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.083154][ T5305] EXT4-fs (sda1): Remounting filesystem read-only [ 193.092684][ T4292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.100465][ T5304] EXT4-fs (sda1): Remounting filesystem read-only [ 193.155882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.131872][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.138343][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.922002][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.970733][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.011340][ T4172] EXT4-fs error: 25 callbacks suppressed [ 195.011354][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 195.055738][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 195.112575][ T5060] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 195.167469][ T5318] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.272: Detected aborted journal [ 195.207930][ T5060] EXT4-fs error (device sda1) in __ext4_new_inode:1095: Journal has aborted [ 195.230149][ T5319] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.273: Detected aborted journal [ 195.248935][ T5318] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.272: Detected aborted journal [ 195.341494][ T5319] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.273: Detected aborted journal [ 195.420232][ T5322] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.274: Detected aborted journal [ 195.453482][ T5319] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.273: Detected aborted journal [ 195.496422][ T5322] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.274: Detected aborted journal [ 195.844619][ T4174] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 196.611681][ T4172] EXT4-fs: 29 callbacks suppressed [ 196.611693][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 196.631828][ T5339] EXT4-fs (sda1): Remounting filesystem read-only [ 196.694555][ T5330] EXT4-fs (sda1): Remounting filesystem read-only [ 196.708779][ T5335] EXT4-fs (sda1): Remounting filesystem read-only [ 196.727374][ T4174] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 196.735977][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 196.763315][ T4174] usb 1-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 196.789170][ T5342] EXT4-fs (sda1): Remounting filesystem read-only [ 196.818932][ T5342] EXT4-fs (sda1): Remounting filesystem read-only [ 196.836086][ T4174] usb 1-1: config 150 has no interface number 0 [ 196.868846][ T4174] usb 1-1: config 150 interface 204 has no altsetting 0 [ 197.153636][ T4318] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.180589][ T5342] EXT4-fs (sda1): Remounting filesystem read-only [ 197.189075][ T5342] EXT4-fs (sda1): Remounting filesystem read-only [ 197.239621][ T5345] EXT4-fs (sda1): Remounting filesystem read-only [ 197.253936][ T4318] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.307464][ T4174] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 197.334666][ T4174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.352980][ T4174] usb 1-1: Product: syz [ 197.363086][ T4174] usb 1-1: Manufacturer: syz [ 197.373209][ T4174] usb 1-1: SerialNumber: syz [ 197.420510][ T4318] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.480132][ T4318] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.745385][ T4174] xr_serial 1-1:150.204: skipping garbage [ 197.765989][ T4174] xr_serial 1-1:150.204: xr_serial converter detected [ 197.844127][ T4174] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 197.892878][ T4174] xr_serial: probe of ttyUSB0 failed with error -71 [ 198.701717][ T4174] usb 1-1: USB disconnect, device number 8 [ 198.792894][ T4174] xr_serial 1-1:150.204: device disconnected [ 199.188488][ T5385] netlink: 36 bytes leftover after parsing attributes in process `syz.0.282'. [ 199.338887][ T4318] device hsr_slave_0 left promiscuous mode [ 199.371840][ T4318] device hsr_slave_1 left promiscuous mode [ 199.378661][ T4318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.390878][ T4318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.401037][ T4318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.417150][ T4318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.428505][ T4318] device bridge_slave_1 left promiscuous mode [ 199.434787][ T4318] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.442747][ T4318] device bridge_slave_0 left promiscuous mode [ 199.452222][ T4318] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.463237][ T4318] device veth1_macvtap left promiscuous mode [ 199.473749][ T4318] device veth0_macvtap left promiscuous mode [ 200.416507][ T4318] device veth1_vlan left promiscuous mode [ 200.422329][ T4318] device veth0_vlan left promiscuous mode [ 200.541657][ T5388] EXT4-fs error: 120 callbacks suppressed [ 200.541668][ T5388] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 200.651621][ T3850] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 201.303261][ T5403] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.287: Detected aborted journal [ 201.341262][ T3850] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 201.386202][ T5406] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.289: Detected aborted journal [ 201.408495][ T5388] EXT4-fs error (device sda1) in __ext4_new_inode:1095: Journal has aborted [ 201.429873][ T5405] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.288: Detected aborted journal [ 201.454285][ T5403] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.287: Detected aborted journal [ 201.471019][ T3850] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 201.491775][ T5406] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.289: Detected aborted journal [ 202.246131][ T5406] EXT4-fs: 31 callbacks suppressed [ 202.246143][ T5406] EXT4-fs (sda1): Remounting filesystem read-only [ 202.320768][ T5417] EXT4-fs (sda1): Remounting filesystem read-only [ 202.327835][ T5416] EXT4-fs (sda1): Remounting filesystem read-only [ 202.350740][ T5415] EXT4-fs (sda1): Remounting filesystem read-only [ 202.365765][ T5416] EXT4-fs (sda1): Remounting filesystem read-only [ 202.379695][ T5417] EXT4-fs (sda1): Remounting filesystem read-only [ 202.485771][ T4318] team0 (unregistering): Port device team_slave_1 removed [ 202.494051][ T5416] EXT4-fs (sda1): Remounting filesystem read-only [ 202.512516][ T4318] team0 (unregistering): Port device team_slave_0 removed [ 202.527798][ T4318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.543891][ T4318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.607704][ T4318] bond0 (unregistering): Released all slaves [ 203.315837][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 203.329965][ T5427] EXT4-fs (sda1): Remounting filesystem read-only [ 203.343700][ T5426] EXT4-fs (sda1): Remounting filesystem read-only [ 203.776855][ T5436] netlink: 36 bytes leftover after parsing attributes in process `syz.3.294'. [ 204.528027][ T5447] qfq: no options [ 205.628388][ T4172] EXT4-fs error: 50 callbacks suppressed [ 205.628400][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 205.657865][ T5458] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.301: Detected aborted journal [ 205.672862][ T5456] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.299: Detected aborted journal [ 205.693770][ T5455] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 205.706872][ T5457] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.300: Detected aborted journal [ 205.722197][ T5456] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.299: Detected aborted journal [ 205.738134][ T5458] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.301: Detected aborted journal [ 205.753873][ T5461] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.302: Detected aborted journal [ 205.769563][ T5455] EXT4-fs error (device sda1) in __ext4_new_inode:1095: Journal has aborted [ 205.781040][ T5457] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.300: Detected aborted journal [ 208.427470][ T4172] EXT4-fs: 41 callbacks suppressed [ 208.427483][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 208.452390][ T5484] EXT4-fs (sda1): Remounting filesystem read-only [ 208.461187][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 208.474127][ T5485] EXT4-fs (sda1): Remounting filesystem read-only [ 208.487524][ T5486] EXT4-fs (sda1): Remounting filesystem read-only [ 208.500686][ T5487] EXT4-fs (sda1): Remounting filesystem read-only [ 208.510820][ T5488] EXT4-fs (sda1): Remounting filesystem read-only [ 208.522460][ T5485] EXT4-fs (sda1): Remounting filesystem read-only [ 208.533728][ T5487] EXT4-fs (sda1): Remounting filesystem read-only [ 208.545313][ T5488] EXT4-fs (sda1): Remounting filesystem read-only [ 209.649627][ T4192] Bluetooth: hci4: link tx timeout [ 209.654795][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 209.662498][ T4192] Bluetooth: hci4: link tx timeout [ 209.667634][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 209.796592][ T4192] Bluetooth: hci4: link tx timeout [ 209.801730][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 209.809922][ T4192] Bluetooth: hci4: link tx timeout [ 209.815089][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.021290][ T4192] Bluetooth: hci4: link tx timeout [ 210.026988][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.035407][ T4192] Bluetooth: hci4: link tx timeout [ 210.040506][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.048729][ T4192] Bluetooth: hci4: link tx timeout [ 210.053831][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.061785][ T4192] Bluetooth: hci4: link tx timeout [ 210.066945][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.075019][ T4192] Bluetooth: hci4: link tx timeout [ 210.080162][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.088118][ T4192] Bluetooth: hci4: link tx timeout [ 210.093211][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.101368][ T4192] Bluetooth: hci4: link tx timeout [ 210.106541][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.114753][ T4192] Bluetooth: hci4: link tx timeout [ 210.119858][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.127983][ T4192] Bluetooth: hci4: link tx timeout [ 210.133100][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.141285][ T4192] Bluetooth: hci4: link tx timeout [ 210.146625][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.154803][ T4192] Bluetooth: hci4: link tx timeout [ 210.159907][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.167860][ T4192] Bluetooth: hci4: link tx timeout [ 210.172955][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.181047][ T4192] Bluetooth: hci4: link tx timeout [ 210.186253][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.194017][ T4192] Bluetooth: hci4: link tx timeout [ 210.199222][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.207524][ T4192] Bluetooth: hci4: link tx timeout [ 210.212751][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.220944][ T4192] Bluetooth: hci4: link tx timeout [ 210.226115][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.234199][ T4192] Bluetooth: hci4: link tx timeout [ 210.239383][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.247514][ T4192] Bluetooth: hci4: link tx timeout [ 210.252619][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.260722][ T4192] Bluetooth: hci4: link tx timeout [ 210.265889][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.273640][ T4192] Bluetooth: hci4: link tx timeout [ 210.279184][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.287455][ T4192] Bluetooth: hci4: link tx timeout [ 210.292556][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.300576][ T4192] Bluetooth: hci4: link tx timeout [ 210.305755][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.313801][ T4192] Bluetooth: hci4: link tx timeout [ 210.319187][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.327544][ T4192] Bluetooth: hci4: link tx timeout [ 210.332686][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.341041][ T4192] Bluetooth: hci4: link tx timeout [ 210.346268][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.354049][ T4192] Bluetooth: hci4: link tx timeout [ 210.359249][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.367569][ T4192] Bluetooth: hci4: link tx timeout [ 210.372730][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.380823][ T4192] Bluetooth: hci4: link tx timeout [ 210.386000][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.394091][ T4192] Bluetooth: hci4: link tx timeout [ 210.402123][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.410928][ T4192] Bluetooth: hci4: link tx timeout [ 210.416173][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.424136][ T4192] Bluetooth: hci4: link tx timeout [ 210.429300][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.437510][ T4192] Bluetooth: hci4: link tx timeout [ 210.442613][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.626444][ T4192] Bluetooth: hci4: link tx timeout [ 210.631602][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.639574][ T4192] Bluetooth: hci4: link tx timeout [ 210.644737][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.656692][ T4192] Bluetooth: hci4: link tx timeout [ 210.661832][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.669759][ T4192] Bluetooth: hci4: link tx timeout [ 210.674926][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.685193][ T4192] Bluetooth: hci4: link tx timeout [ 210.690311][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.698635][ T4192] Bluetooth: hci4: link tx timeout [ 210.703736][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.711772][ T4192] Bluetooth: hci4: link tx timeout [ 210.717003][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.724916][ T4192] Bluetooth: hci4: link tx timeout [ 210.730235][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.738443][ T4192] Bluetooth: hci4: link tx timeout [ 210.743545][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.751444][ T4192] Bluetooth: hci4: link tx timeout [ 210.756577][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.764585][ T4192] Bluetooth: hci4: link tx timeout [ 210.769682][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.777601][ T4192] Bluetooth: hci4: link tx timeout [ 210.782695][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.790700][ T4192] Bluetooth: hci4: link tx timeout [ 210.795860][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 210.803507][ T4192] Bluetooth: hci4: link tx timeout [ 210.808888][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.817078][ T5505] EXT4-fs error: 44 callbacks suppressed [ 210.817087][ T5505] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0 [ 210.840696][ T4192] ================================================================== [ 210.848988][ T4192] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12cf/0x3ca0 [ 210.856802][ T4192] Read of size 1 at addr ffff88805cd3ac09 by task kworker/u5:3/4192 [ 210.864759][ T4192] [ 210.867065][ T4192] CPU: 0 PID: 4192 Comm: kworker/u5:3 Tainted: G S syzkaller #0 [ 210.875987][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.886028][ T4192] Workqueue: hci2 hci_rx_work [ 210.890719][ T4192] Call Trace: [ 210.894001][ T4192] [ 210.896913][ T4192] dump_stack_lvl+0x188/0x250 [ 210.901598][ T4192] ? show_regs_print_info+0x20/0x20 [ 210.906797][ T4192] ? load_image+0x410/0x410 [ 210.911303][ T4192] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 210.916756][ T4192] print_address_description+0x60/0x2d0 [ 210.922296][ T4192] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 210.927409][ T4192] kasan_report+0xdf/0x130 [ 210.931813][ T4192] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 210.936907][ T4192] hci_le_meta_evt+0x12cf/0x3ca0 [ 210.941830][ T4192] ? hci_event_packet+0x363/0x1310 [ 210.946949][ T4192] ? __lock_acquire+0x7b50/0x7b50 [ 210.951984][ T4192] ? hci_remote_host_features_evt+0x240/0x240 [ 210.958051][ T4192] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 210.963683][ T4192] ? mark_lock+0x94/0x320 [ 210.968002][ T4192] ? mutex_unlock+0x10/0x10 [ 210.972516][ T4192] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 210.978485][ T4192] ? lock_chain_count+0x20/0x20 [ 210.983315][ T4192] ? __rwlock_init+0x140/0x140 [ 210.988064][ T4192] hci_event_packet+0xe0b/0x1310 [ 210.993004][ T4192] ? _raw_spin_unlock+0x40/0x40 [ 210.997837][ T4192] ? rcu_lock_release+0x20/0x20 [ 211.002671][ T4192] ? hci_send_to_monitor+0x9c/0x4a0 [ 211.007850][ T4192] hci_rx_work+0x255/0xa10 [ 211.012258][ T4192] process_one_work+0x867/0xff0 [ 211.017100][ T4192] ? worker_detach_from_pool+0x240/0x240 [ 211.022708][ T4192] ? lockdep_hardirqs_off+0x70/0x100 [ 211.027975][ T4192] ? _raw_spin_lock_irq+0xb7/0xf0 [ 211.032976][ T4192] ? _raw_spin_lock_irqsave+0x100/0x100 [ 211.038600][ T4192] ? wq_worker_running+0x97/0x170 [ 211.043611][ T4192] worker_thread+0xad7/0x12a0 [ 211.048285][ T4192] kthread+0x42e/0x520 [ 211.052333][ T4192] ? rcu_lock_release+0x20/0x20 [ 211.057185][ T4192] ? kthread_blkcg+0xd0/0xd0 [ 211.061755][ T4192] ret_from_fork+0x1f/0x30 [ 211.066178][ T4192] [ 211.069195][ T4192] [ 211.071506][ T4192] Allocated by task 5504: [ 211.075814][ T4192] __kasan_kmalloc+0xaf/0xe0 [ 211.080394][ T4192] __alloc_skb+0x22c/0x750 [ 211.084795][ T4192] vhci_write+0xbd/0x440 [ 211.089029][ T4192] vfs_write+0x748/0xd70 [ 211.093246][ T4192] ksys_write+0x153/0x260 [ 211.097616][ T4192] do_syscall_64+0x4c/0xa0 [ 211.102041][ T4192] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 211.107923][ T4192] [ 211.110256][ T4192] The buggy address belongs to the object at ffff88805cd3a800 [ 211.110256][ T4192] which belongs to the cache kmalloc-1k of size 1024 [ 211.124285][ T4192] The buggy address is located 9 bytes to the right of [ 211.124285][ T4192] 1024-byte region [ffff88805cd3a800, ffff88805cd3ac00) [ 211.137972][ T4192] The buggy address belongs to the page: [ 211.143589][ T4192] page:ffffea0001734e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5cd38 [ 211.153722][ T4192] head:ffffea0001734e00 order:3 compound_mapcount:0 compound_pincount:0 [ 211.162024][ T4192] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 211.169997][ T4192] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0 [ 211.178560][ T4192] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 211.187118][ T4192] page dumped because: kasan: bad access detected [ 211.193516][ T4192] page_owner tracks the page as allocated [ 211.199221][ T4192] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4208, ts 69314203746, free_ts 20703874285 [ 211.217606][ T4192] get_page_from_freelist+0x24f6/0x2670 [ 211.223149][ T4192] __alloc_pages+0x1ee/0x480 [ 211.227749][ T4192] new_slab+0xc0/0x4b0 [ 211.231801][ T4192] ___slab_alloc+0x807/0xdd0 [ 211.236372][ T4192] __kmalloc+0x11d/0x340 [ 211.240592][ T4192] ieee802_11_parse_elems_crc+0xb3/0x1090 [ 211.246290][ T4192] ieee80211_bss_info_update+0x74d/0xa80 [ 211.251906][ T4192] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 211.258078][ T4192] ieee80211_iface_work+0x714/0xc50 [ 211.263270][ T4192] cfg80211_wiphy_work+0x224/0x260 [ 211.268365][ T4192] process_one_work+0x867/0xff0 [ 211.273205][ T4192] worker_thread+0xad7/0x12a0 [ 211.277874][ T4192] kthread+0x42e/0x520 [ 211.281939][ T4192] ret_from_fork+0x1f/0x30 [ 211.286335][ T4192] page last free stack trace: [ 211.291007][ T4192] free_unref_page_prepare+0x637/0x6c0 [ 211.296454][ T4192] free_unref_page+0x8f/0x2a0 [ 211.301111][ T4192] free_contig_range+0x96/0xf0 [ 211.305855][ T4192] destroy_args+0xef/0xa00 [ 211.310250][ T4192] debug_vm_pgtable+0x321/0x380 [ 211.315105][ T4192] do_one_initcall+0x272/0x730 [ 211.319863][ T4192] do_initcall_level+0x13d/0x1f0 [ 211.324797][ T4192] do_initcalls+0x4b/0x90 [ 211.329121][ T4192] kernel_init_freeable+0x3d5/0x560 [ 211.334297][ T4192] kernel_init+0x19/0x1b0 [ 211.338608][ T4192] ret_from_fork+0x1f/0x30 [ 211.343010][ T4192] [ 211.345311][ T4192] Memory state around the buggy address: [ 211.350923][ T4192] ffff88805cd3ab00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 211.358961][ T4192] ffff88805cd3ab80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 211.367005][ T4192] >ffff88805cd3ac00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 211.375042][ T4192] ^ [ 211.379347][ T4192] ffff88805cd3ac80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 211.387383][ T4192] ffff88805cd3ad00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 211.395419][ T4192] ================================================================== [ 211.403454][ T4192] Disabling lock debugging due to kernel taint [ 211.409588][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.418572][ T3539] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm syslogd: reading directory lblock 0 [ 211.430336][ T4196] Bluetooth: hci4: link tx timeout [ 211.435487][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.443109][ T4196] Bluetooth: hci4: link tx timeout [ 211.448419][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.456364][ T4196] Bluetooth: hci4: link tx timeout [ 211.461487][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.469136][ T4196] Bluetooth: hci4: link tx timeout [ 211.474222][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.482012][ T4196] Bluetooth: hci4: link tx timeout [ 211.487166][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.494817][ T4196] Bluetooth: hci4: link tx timeout [ 211.499915][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.507994][ T4196] Bluetooth: hci4: link tx timeout [ 211.513121][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.520801][ T4196] Bluetooth: hci4: link tx timeout [ 211.525918][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.534504][ T4196] Bluetooth: hci4: link tx timeout [ 211.539796][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.547647][ T4196] Bluetooth: hci4: link tx timeout [ 211.552737][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.560493][ T4196] Bluetooth: hci4: link tx timeout [ 211.565635][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.573258][ T4196] Bluetooth: hci4: link tx timeout [ 211.578384][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.586132][ T4196] Bluetooth: hci4: link tx timeout [ 211.591234][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.598870][ T4196] Bluetooth: hci4: link tx timeout [ 211.603958][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.614490][ T4196] Bluetooth: hci4: link tx timeout [ 211.619620][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.627293][ T4196] Bluetooth: hci4: link tx timeout [ 211.632394][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.640310][ T4196] Bluetooth: hci4: link tx timeout [ 211.645445][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.653197][ T4196] Bluetooth: hci4: link tx timeout [ 211.658325][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.667181][ T4196] Bluetooth: hci4: link tx timeout [ 211.672302][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.679997][ T4196] Bluetooth: hci4: link tx timeout [ 211.685134][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.692848][ T4196] Bluetooth: hci4: link tx timeout [ 211.698009][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.705650][ T4196] Bluetooth: hci4: link tx timeout [ 211.710742][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.718502][ T4196] Bluetooth: hci4: link tx timeout [ 211.723607][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.731277][ T4196] Bluetooth: hci4: link tx timeout [ 211.736386][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.744111][ T4196] Bluetooth: hci4: link tx timeout [ 211.749249][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.757080][ T4196] Bluetooth: hci4: link tx timeout [ 211.762184][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.770001][ T4196] Bluetooth: hci4: link tx timeout [ 211.775144][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.782864][ T4196] Bluetooth: hci4: link tx timeout [ 211.787986][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.795768][ T4196] Bluetooth: hci4: link tx timeout [ 211.800881][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.808570][ T4196] Bluetooth: hci4: link tx timeout [ 211.813845][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.824477][ T4196] Bluetooth: hci4: link tx timeout [ 211.829626][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.838390][ T4196] Bluetooth: hci4: link tx timeout [ 211.843517][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.854476][ T4196] Bluetooth: hci4: link tx timeout [ 211.859610][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.870765][ T4196] Bluetooth: hci4: link tx timeout [ 211.876068][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.886411][ T4192] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 211.893632][ T4192] CPU: 0 PID: 4192 Comm: kworker/u5:3 Tainted: G S B syzkaller #0 [ 211.902567][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.912605][ T4192] Workqueue: hci2 hci_rx_work [ 211.917269][ T4192] Call Trace: [ 211.920528][ T4192] [ 211.923444][ T4192] dump_stack_lvl+0x188/0x250 [ 211.928103][ T4192] ? show_regs_print_info+0x20/0x20 [ 211.933284][ T4192] ? load_image+0x410/0x410 [ 211.937771][ T4192] panic+0x2f8/0x850 [ 211.941665][ T4192] ? bpf_jit_dump+0xd0/0xd0 [ 211.946150][ T4192] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 211.952111][ T4192] ? _raw_spin_unlock+0x40/0x40 [ 211.956948][ T4192] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 211.962040][ T4192] check_panic_on_warn+0x80/0xa0 [ 211.966955][ T4192] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 211.972046][ T4192] end_report+0x6d/0xf0 [ 211.976204][ T4192] kasan_report+0x102/0x130 [ 211.980697][ T4192] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 211.985811][ T4192] hci_le_meta_evt+0x12cf/0x3ca0 [ 211.990775][ T4192] ? hci_event_packet+0x363/0x1310 [ 211.995887][ T4192] ? __lock_acquire+0x7b50/0x7b50 [ 212.000896][ T4192] ? hci_remote_host_features_evt+0x240/0x240 [ 212.006955][ T4192] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 212.012581][ T4192] ? mark_lock+0x94/0x320 [ 212.016907][ T4192] ? mutex_unlock+0x10/0x10 [ 212.021393][ T4192] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 212.027353][ T4192] ? lock_chain_count+0x20/0x20 [ 212.032180][ T4192] ? __rwlock_init+0x140/0x140 [ 212.036924][ T4192] hci_event_packet+0xe0b/0x1310 [ 212.041848][ T4192] ? _raw_spin_unlock+0x40/0x40 [ 212.046674][ T4192] ? rcu_lock_release+0x20/0x20 [ 212.051507][ T4192] ? hci_send_to_monitor+0x9c/0x4a0 [ 212.056686][ T4192] hci_rx_work+0x255/0xa10 [ 212.061082][ T4192] process_one_work+0x867/0xff0 [ 212.065942][ T4192] ? worker_detach_from_pool+0x240/0x240 [ 212.071550][ T4192] ? lockdep_hardirqs_off+0x70/0x100 [ 212.076833][ T4192] ? _raw_spin_lock_irq+0xb7/0xf0 [ 212.081942][ T4192] ? _raw_spin_lock_irqsave+0x100/0x100 [ 212.087469][ T4192] ? wq_worker_running+0x97/0x170 [ 212.092471][ T4192] worker_thread+0xad7/0x12a0 [ 212.097134][ T4192] kthread+0x42e/0x520 [ 212.101193][ T4192] ? rcu_lock_release+0x20/0x20 [ 212.106020][ T4192] ? kthread_blkcg+0xd0/0xd0 [ 212.110589][ T4192] ret_from_fork+0x1f/0x30 [ 212.115001][ T4192] [ 212.118074][ T4192] Kernel Offset: disabled [ 212.122394][ T4192] Rebooting in 86400 seconds..