last executing test programs: 20.56896772s ago: executing program 1 (id=679): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000006000000045000000700000001"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x612000, 0x14a) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) r2 = syz_io_uring_setup(0x10d6, &(0x7f0000000340)={0x0, 0x8aec, 0x1000, 0x3, 0x34f, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 20.441794302s ago: executing program 1 (id=683): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x14e}) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 18.802164352s ago: executing program 2 (id=686): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xf, &(0x7f0000000100)=@ringbuf, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x14, 0x0, 0x700, 0x10, &(0x7f0000000300), 0x10}, 0x90) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000340)='./file2\x00', 0xa10812, &(0x7f00000009c0)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRES64, @ANYRES32, @ANYRESOCT=0x0, @ANYRES16, @ANYRES64, @ANYRES64, @ANYRES8=0x0, @ANYBLOB="bdc3431c9da13b91fe44b13626dc250440d97b1d7b38fbd8a2aaaa3eb9629d0d9360c03c38c083c1c6716e836772a33640a6a075db845dea3b0d7f2f96bc9f9f4a2bb54c58d5c376a3799a230c7469c1f819f58a378b914f2676904a776b09c138307a4afd9c5ea327a9bd0766812ce42e7c51e72698a2da24bb4b118bbf23f5bfe72852a834ba083ebba4da259bd186b6936176a008073b6ae9fcf2bac230665f3aaf", @ANYRESHEX, @ANYRESOCT, @ANYRESDEC=0x0], 0x21, 0x1516, &(0x7f0000001f80)="$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") syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x25418, 0x0, 0x1, 0x0, &(0x7f0000006380)) listen(0xffffffffffffffff, 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) sched_setscheduler(0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%\\/:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="00000000976670dfe4cee7cb43a4273af7a34880ae099c1ef21dec214cb8741368db24573e9606a59b238e8caf15b49ba320cc5bd7117f3f3d311583ab33c09f6ba00f9cc0ff7856", 0x48, 0xffffffffffffffff) open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 18.048145586s ago: executing program 1 (id=687): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) syz_open_pts(0xffffffffffffffff, 0x2800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e25, 0x0, @loopback, 0x18}, 0x1c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000340)=0xff) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000eaff000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x7, 0xc4f, 0x1, 0x1}, 0x50) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x9) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 14.346131028s ago: executing program 4 (id=694): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) unshare(0x2060600) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x2b00, 0x12) 13.362379474s ago: executing program 1 (id=697): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xf, &(0x7f0000000100)=@ringbuf, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x14, 0x0, 0x700, 0x10, &(0x7f0000000300), 0x10}, 0x90) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000340)='./file2\x00', 0xa10812, &(0x7f00000009c0)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRES64, @ANYRES32, @ANYRESOCT=0x0, @ANYRES16, @ANYRES64, @ANYRES64, @ANYRES8=0x0, @ANYBLOB="bdc3431c9da13b91fe44b13626dc250440d97b1d7b38fbd8a2aaaa3eb9629d0d9360c03c38c083c1c6716e836772a33640a6a075db845dea3b0d7f2f96bc9f9f4a2bb54c58d5c376a3799a230c7469c1f819f58a378b914f2676904a776b09c138307a4afd9c5ea327a9bd0766812ce42e7c51e72698a2da24bb4b118bbf23f5bfe72852a834ba083ebba4da259bd186b6936176a008073b6ae9fcf2bac230665f3aaf", @ANYRESHEX, @ANYRESOCT, @ANYRESDEC=0x0], 0x21, 0x1516, &(0x7f0000001f80)="$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") syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x25418, 0x0, 0x1, 0x0, &(0x7f0000006380)) listen(0xffffffffffffffff, 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) sched_setscheduler(0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) close(0x3) mount(0x0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)='ceph\x00', 0x0, &(0x7f0000000500)='acl') r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%\\/:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="00000000976670dfe4cee7cb43a4273af7a34880ae099c1ef21dec214cb8741368db24573e9606a59b238e8caf15b49ba320cc5bd7117f3f3d311583ab33c09f6ba00f9cc0ff7856", 0x48, 0xffffffffffffffff) open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 13.00134485s ago: executing program 2 (id=699): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x141842, 0x8) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="3b1c1b2098f0bc154c9778a922", 0xd) sched_setaffinity(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fanotify_init(0x200, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 12.936942946s ago: executing program 4 (id=701): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) 11.837301743s ago: executing program 0 (id=702): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r1, 0x8b21, &(0x7f0000000040)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000004000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000001e008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_collapse_huge_page_isolate\x00', r6}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000140)=ANY=[@ANYRES16=r6], 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r10, 0x5412, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r11}) r12 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r12, 0xc0285700, &(0x7f0000000000)={0xf, "c51fca0a5550cf9652a3f0b942747b193fd10d95793a0c159f6dca495afb8114"}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 11.125985973s ago: executing program 1 (id=703): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r2) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r3, 0x25, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) 9.231923538s ago: executing program 2 (id=704): socket$pptp(0x18, 0x1, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x140, 0x178, 0xc, 0x140, 0x178, 0x210, 0x258, 0x258, 0x210, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @remote, [0x0, 0x0, 0x0, 0xff], [], 'syzkaller0\x00', 'netpci0\x00', {}, {}, 0x3a}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@mcast1, @private1, [], [0x0, 0xffffff00], 'wg2\x00', 'hsr0\x00', {}, {}, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) io_uring_enter(0xffffffffffffffff, 0x0, 0x464f, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @loopback}, 0x10) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 8.784538402s ago: executing program 0 (id=706): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 8.783835962s ago: executing program 4 (id=707): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) syz_open_pts(0xffffffffffffffff, 0x2800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e25, 0x0, @loopback, 0x18}, 0x1c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000340)=0xff) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000eaff000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x7, 0xc4f, 0x1, 0x1}, 0x50) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x9) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 6.132336891s ago: executing program 2 (id=709): sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) getrusage(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.826986931s ago: executing program 1 (id=710): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xf, &(0x7f0000000100)=@ringbuf, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x14, 0x0, 0x700, 0x10, &(0x7f0000000300), 0x10}, 0x90) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000340)='./file2\x00', 0xa10812, &(0x7f00000009c0)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRES64, @ANYRES32, @ANYRESOCT=0x0, @ANYRES16, @ANYRES64, @ANYRES64, @ANYRES8=0x0, @ANYBLOB="bdc3431c9da13b91fe44b13626dc250440d97b1d7b38fbd8a2aaaa3eb9629d0d9360c03c38c083c1c6716e836772a33640a6a075db845dea3b0d7f2f96bc9f9f4a2bb54c58d5c376a3799a230c7469c1f819f58a378b914f2676904a776b09c138307a4afd9c5ea327a9bd0766812ce42e7c51e72698a2da24bb4b118bbf23f5bfe72852a834ba083ebba4da259bd186b6936176a008073b6ae9fcf2bac230665f3aaf", @ANYRESHEX, @ANYRESOCT, @ANYRESDEC=0x0], 0x21, 0x1516, &(0x7f0000001f80)="$eJzs3AnYjtXWOPC19t43L0lPknmvvW6e9NImSTIkyZAkyZEkU0KSJElSmackU0LmJHNIppDM85Q5SZIkSUimZP8vfc5f5/Sdf+d83zl/5/ve9buu+3r3eu5n7Xvdz3re9x7e63m+a9u/Yu1K5WoyM/y34H/86AQAKQDQCwCuAYAIAIplKZbl4voMGjv99zYi/rkemnylKxBXkvQ/bZP+p23S/7RN+p+2Sf/TNul/2ib9T9uk/0KkZZun5LxWlrS7/H+6/w9y///fkRz//xc5WGjkV2sLXd/uH0h5qP6/sB7xb09+/9M26X/aJv1P26T/aZv0P22T/qdt0n8h0rL/+r3j/xH/O4j+DWr4t16u9PtPCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIUTacCZcZgDgz+MrXZcQQgghhBBCCCH+eUL6K12BEEIIIYQQQggh/vUQFGgwEEE6SA8pkAEywlWQCa6GzHANJOBayALXQVa4HrJBdsgBOSEX5IY8YIHAAUMMeSEfJOEGyA83QioUgIJwE3goBIXhZigCt0BRuBWKwW1QHG6HElASSkFpuAPKwJ1QFu6CcnA3lIcKUBEqwT1QGe6FKnAfVIX7oRo8ANXhQagBf4Ka8BDUgoehNjwCdeBRqAv1oD40gIb/pfyX4GV4BTpAR+gEnaELdIVu0B16QE/oBa9Cb0i59Nr0g/4wAAbCGzAI3oTBMASGwlswDIbDCBgJo2A0jIG3YSy8A+PgXRgPE2AiTILJMAWmwnswDabDDHgfZsIHMAtmwxyYC/PgQ5gPC2AhfASL9J97sAyWwwpYCatgNayBtbAO1sMG2AibYDN8AltgK2yD7bADdsIu+BR2w2ewBz6HvfAFLIYlsPTvzj/9V/ntEBBQoUKDBtNhOkzBFMyIGTETZsLMmBkTmMAsmAWzYlbMhtluzIE5MBfmwjyYBwkJABnzYl5MYhLzY35MxVQsiAXRo8fCWBiL4C1YFItiMSyGxbE4lsCSWBJLY2ksg2WwLJbFclgOy2N5rIgV8R68B+/FKlgFq2JVrIbVsDpWx4O5a2BNrIm1sBbWxtpYB+tgXayL9bE+NsSG2AgbYWNsjE2xKTbDZtgcm2MLbIEtsSW2wlbYGltjG2yDbbEttsMX8UV8CV/CV/AV7IjlVWfsgl2wG3bDHtgTe+Kr2Btfw9fwdeyL/bA/DsAB+AYOwlM4GIfgUByKZdRwHIEjkdVoHINjcCyOxXE4DsfjBJyAk3AyTsGpOBWn4XScju/jTPwAP8DZOBvn4jych/NxwYBL7zBcjEtwKS7D5bgCl+MqXI2rcC2uw7W4ATfgJtyEn+AnuBW34nbcjjvRAOCn+Bl+hn1xL+7FfbgP9+N+PIAH8CAexEN4CA/jYTyCR/AoHsVjeBxP4HE8iSfxFJ7GM3gGz+E5PI/P5/qm1s4Ca/qCusgoo9KpdCpFpaiMKqPKpDKpzCqzSqiEyqKyqKwqq8qmsqkcKofKpXKpPOqsIkWKVazyqrwqqZIqv8qvUlWqKqgKKq+8KqwKqyKqiCqqiqpi6jZVXN2uSqiSqokvrUqrMqqpL6vuUuVUOVVeVVAVVSVVSVVWlVUVVUVVVVVVNVVNVVcPqhqqM/bAh9TFztRW/bCO6o91VT1VXzVQb+BjqpEahI1VE9VUPaGG4GBsrhr5Fupp1VKNwFbqWTUSn1Nt1Ghsq15Q7dSLqr2K1Muqse+gOqrx2Fl1UZOwm+queqieahpWUBc7VlG9rvqqfqq/GqDm4htqkHpTDVZD1FD1lhqmhqsRaqQapUarMeptNVa9o8apd9V4NUFNVJPUZDVFTVXvqWlqupqh3lcz1Qdqlpqt5qi5ap76UM1XC9RC9ZFapD5Wi9UStVQtU8vVCrVSrVKr1Rq1Vq1T69UGtVFtUpvVJ2qL2qq2qe1qh9qpdqlP1W71mdqjPld71Rdqn/pS7VdfqQPqa3VQfaMOqW/VYfWdOqK+V0fVD+qYOq5OqB/VSfWTOqVOqzPqrDqnflbn1S/qggoKNGqltTY60ul0ep2iM+iM+iqdSV+tM+trdEJfq7Po63RWfb3OprPrHDqnzqVz6zzaatJOs451Xp1PJ/UNOr++UafqArqgvkl7XUgX1jfrIvoWXVTfqovp23RxfbsuoUvqUrq0vkOX0XfqsvouXU7frcvrCrqirqTv0ZX1vbqKvk9X1ffravoBXV0/qGvoP+ma+iFdSz+sa+tHdB39qK6r6+n6uoFuqB/TjfTjurFuopvqJ3Qz/aRurp/SLfTTuqV+RrfSz+rW+jndRj+v2+oXdDv9om6vf9EXdNAddEfdSXfWXXRX3U131z10T91Lv6p769d0H/267qv76f56gB6o39CD9Jt6sB6ih+q39DA9XI/QI/UoPVqP0W/rsfodPU6/q8frCXqinqQn6ym6x6WZZvwd+e/8J/l9ft36Jr1Zf6K36K16m96ud+idepfepXfr3XqP3qP36r16n96n9+v9+oA+oA/qg/qQPqQP68P6iD6ij+qj+pg+rs/qH/VJ/ZM+pU/r0/qsPqfP6fOXXgMwaJTRxpjIpDPpTYrJYDKaq0wmc7XJbK4xCXOtyWKuM1nN9SabyW5ymJwml8lt8hhryDjDJjZ5TT6TNDfgpYOZKWhuMt4UMoXNzf9IvslvbjSppsBf5P9RfQ1NQ9PINDKNTWPT1DQ1zUwz09w0v+ViHS1NS9PKtDKtTWvTxrQxbU1b0860M+1Ne/Oyedl0MB1MJ9PJdDFdTTfT3fQwPU0v86rpbXqbPqaP6Wv6mv6mvxloBppBZpAZbAaboWaoGWaGmRFmhBllRpkxZowZa8aacWacGW/Gm4lmoplsJpupZqqZZqaZGWaGmWlmmllmlplj5ph5Zp6Zb+abhWahWWQWmcVmiVlilpllZoVZYVaZVWaNWWPWmXVmg9lgFqffbDabLWaL2Wa2mR1mh9lldpndZrfZY/aYvWav2Wf2mf1mvzlgDpiD5qA5ZA6Zw+awOWKOmKPmqDlmjpkT5oQ5aU6aU+aUOWPOmHPmnDlvzpsL5sLF075IRSoykYnSRemilCglyhhljDJFmaLMUeYoESWiLFGWKGt0fZQtyh7liHJGuaLcUZ7IRhS5iKM4yhvli5LRDVH+6MYoNSoQFYxuinxUKCoc3RwViW6Jika3RsWi26Li0e1RiahkVCoqHd0RlYnujMpGd0Xloruj8lGFqGJUKbonqhzdG1WJ7ouqRvdH1aIHourRg1GN6E9RzeihqFb0cFQ7eiSqEz0a1Y3qRfWjBlHDf+r8IZzK/rjvYDvaTraz7WK72m62u+1he9pe9lXb275m+9jXbV/bz/a3A+xA+4YdZN+0g+0QO9S+ZYfZ4XaEHWlH2dF2jH3bjrXv2HH2XTveTrAT7SQ72U6xU+17dpqdbmfY9+1M+4GdZWfbOXaunWc/tPPtArvQfmQX2Y/tYrvELrXL7HK7wq60q+xqu8autevservBbrSb7Gb7id1it9ptdrvdYXfaXfZTu9t+ZvfYz+1e+4XdZ7+0++1X9oD92h6036Qcst/aw/Y7e8R+b4/aH+wxe9yesD/ak/Yne8qetmfsWXvO/mzP21/sBRsuntxfPLyTIUPpKB2lUAplpIyUiTJRZspMCUpQFspCWSkrZaNslINyUC7KRXkoD13ExJSX8lKSkpSf8lMqpVJBKkiePBWmwlSEilBRKkrFqBgVp+JUgkpQKSpFd9AddCfdSXfRXXQ33U0VqAJVokpUmSpTFapCVakqVaNqVJ2qUw2qQTWpJtWiWlSbalMdqkN1qS7Vp/rUkBpSI2pEjakxNaWm1IyaUXNqTi2oBbWkltSKWlFrak1tqA21pbbUjtpRe2pPL9PL1IE6UCfqRF2oC3WjbtSDelAv6kW9qTf1oT7Ul/pSf+pPA2kgDaJBNJiG0FB6i4bRcBpBI2kUjaYxNIbG0lgaR+NoPI2niTSRJtNkmkpTaRpNoxk0g2bSTJpFs2gOzaF5NI/m03xaSAtpES2ixbSYltJSWk7LaSWtpNW0mtbSWlpP62kjbaTNtJm20BbaRttoB+2gXbSLdtNu2kN7aC/tpX20j/bTfjpAB+ggHaRDdIgO02E6QkfoKB2lY3SMTtAJOkkn6RSdojN0hs7Rz3SefqELFCjFZXAZ3VUuk7vaZXbXuL+Oc7icLpfL7fI467K57H8Rk3Mu1RVwBd1NzrtCrrC72aVePOH9TVzClXSlXGl3hyvj7nRlfxdXdve6Ku4+V9Xd7yq5e/4iruYecNXdI66Ge9TVdPVcLdfA1XaPuDruUVfX1XP1XQPXzD3pmrunXAv3tGvpnvldPN8tcKvdGrfWrXO73WfujDvrDrvv3Dn3s+vgOrpe7lXX273m+rjXXV/X73fxUPeWG+aGuxFupBvlRv8unugmucluipvq3nPT3PTfxfPch26mW+hmudlujpv7a3yxpoXuI7fIfewWuyVuqVvmlrsVbqVb9X9rXeY2uI1uk9vlPnVb3Fa3zW13O9zOX+OL+7HHfe72ui/cIfet2+++cgfcEXfQffNrfHH/jrjv3VH3gzvmjrsT7kd30v3kTrnTv+7/xX3/0f3iLrjggJEVazYccTpOzymcgTPyVZyJr+bMfA0n+FrOwtdxVr6es3F2zsE5ORfn5jxsmdgxc8x5OR8n+QbOzzdyKhfggnwTey7EhflmLsK3cFG+lYvxbVycb+cSXJJLcWm+g8vwnVyW7+JyfDeX5wpckSvxPVyZ7+UqfB9X5fu5Gj/A1flBrsF/4pr8ENfih7k2P8J1+FGuy/W4PjfghvwYN+LHuTE34ab8BDfjJ7k5P8Ut+Gluyc9wK36WW/Nz3Iaf57b8ArfjF7k9v8Qv8yvcgTtyJ+7MXbgrd+Pu3IN7ci9+lXvza9yHX+e+3I/78wAeyG/wIH6TB/MQHspv8TAeziN4JI/i0TyG3+ax/A6P43d5PE/giTyJJ/MUnsrv8TSezjP4fZ7JH/Asns1zeC7P4w95Pi/ghfwRL+KPeTEv4aW8jJfzCl7Jq3g1r+G1vI7X8wbeyJt4M3/CW3grb+PtvIN38i7+lHfzZ7yHP+e9/AXv4y95P3/FB/hrPsjf8CH+lg/zd3yEv+ej/AMf4+N8gn/kk/wTn+LTfIbP8jn+mc/zL3yBA0OMsYp1bOIoThenj1PiDHHG+Ko4U3x1nDm+Jk7E18ZZ4uvirPH1cbY4e5wjzhnninPHeWIbU+xijuM4b5wvTsY3xPnjG+PUuEBcML4p9nGhuHB8c1wkviUuGt8aF4tvi4vHt8cl4pLxI/eXju+Iy8R3xmXju+Jy8d1x+bhCXDGuFN8TV47vjavE98VV4/vjovEDcfX4wRgufV6lVvxwXDt+JK4TPxrXjevF9eMGccP4sbhR/HjcOG4SN42fiJvFT8bN46fiFvHTccv4mT9c3ynuHHeJu8Zd4xDu03OSc5Pzkh8m5ycXJBcmP0ouSn6cXJxcklyaXJZcnlyRXJlclVydXJNcm1yXXJ/ckNyY3JQMoVJ68OiV1974yKfz6e+7dIbsM/mrfWZ/jU/4a30Wf53P6q/32Xx2n8Pn9Ll8bp/HW0/eefaxz+vz+aS/wef3N/pUX8AX9Dd57wv5wr6Bb+gb+kb+cd/YN/FN/RP+Cf+kf9I/5Z/yT/uW/hnfyj/rW/vnfBv/vH/ev+Db+Rd9e/+Sf9m/4jv4jr6T7+S7+C6+m+/me/gevpfv5Xv73r6P7+P7+r6+v+/vB/qBfpAf5Af7wX6oH+qH+WF+hB/hR/lRfowf48f6sX6cH+fH+/F+op/oJ/vJfqqf6qf5aX6Gn+Fnps70s/wsP8fP8fP8PD/fz/cL/UK/yC/yi/1iv9Qv9cv9cr/Sr/Sr/Wq/1q/16/16v9Fv9Jv9Zr/Fb/Hb/Da/w+/wu/wuv9vv9nv8Hr/X7/X7/D6/3+/3B/zX/qD/xh/y3/rD/jt/xH/vj/of/DF/3J/wP/qT/id/yp/2Z/xZf87/7M/7X/wFH/yYxNuJsYl3EuMS7ybGJyYkJiYmJSYnpiSmJt5LTEtMT8xIvJ+YmfggMSsxOzEnMTcxL/FhYn5iQWJh4qPEosTHicWJJYmliWWJ5YkViRByb4lD3pAvJMMNIX+4MaSGAqFguCn4UCgUDjeHIuGWUDTcGoqF20LxcHsoEUqGUuHRUDfUC/VDg9AwPBYahcdD49AkNA1PhGbhydA8PBVahKdDy/BMaBWeDa3Dc6FNeD60DS+Edn++4gqvhA6hY+gUOocuoWvoFrqHHqFn6BVeDb3Da6FPeD30Df1C/zAgDAxvhEHhzTA4DAlDw1thWBgeRoSRYVQYHcaEt8PY8E4YF94N48OEMDFMCpPDlDA1vBemhelhRng/zAwfhFlhdpgT5oZ54cMwPywIC8NHYVH4OCwOS8LSsCwsDyvCyrAqrA5rwtqwLqwPG8LGsClsDp+ELWFr2Ba2hx1hZ9gVPg27w2dhT/g87A1fhH3hy7A/fBUOhK/DwfBNOBS+DYfDd+FI+D4cDT+EY+F4OBF+DCfDT+FUOB3OhLPhXPg5nA+/hAvymTUhhBBCiL9L1z9Y3/k/ecwAgLo07gIAV2/NefC36zUArM/2H+PuKlezBAA83bHtQ39eypfv1KnTpecu1hDlmw0Aib/awKV4CTSFJ6EFNIEi/2l93dWL5/gP5k/eBpDxNzkpcDm+PP+Xf2P+x54YOr94fCbL/2P+2QCp+S7nZIDL8RJo+sUrANAEiv6N+bM3+oP6M3w1BqDxb3IyweX4cv2F4XF4Blr8xTP/yv1X/e11QgghhBBCCCH+V+uuSrX+o+vni9fnuczlnPRwOf6j63MhhBBCCCGEEEJcec+92P6px1q0aNL67x+k/0eeLAMZyOB/4uBK/2USQgghhBBC/LNdPum//FiGK1mQEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRBv3mS78yAMC/5OvErvQ+CiGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEFfa/wkAAP//WeUs/g==") syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x25418, 0x0, 0x1, 0x0, &(0x7f0000006380)) listen(0xffffffffffffffff, 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) sched_setscheduler(0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%\\/:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="00000000976670dfe4cee7cb43a4273af7a34880ae099c1ef21dec214cb8741368db24573e9606a59b238e8caf15b49ba320cc5bd7117f3f3d311583ab33c09f6ba00f9cc0ff7856", 0x48, 0xffffffffffffffff) open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 5.660348287s ago: executing program 3 (id=711): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) unshare(0x2060600) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x2b00, 0x12) 5.142022027s ago: executing program 2 (id=712): socket$netlink(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x90}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_adjtime(0x0, 0x0) r1 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x11, 0x0) r3 = syz_io_uring_setup(0xce, &(0x7f0000000200)={0x0, 0x1b69, 0x800, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x3, 0x0}) io_uring_enter(r3, 0x47ba, 0x98f1, 0x20, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) 5.126638139s ago: executing program 4 (id=713): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xf, &(0x7f0000000100)=@ringbuf, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x14, 0x0, 0x700, 0x10, &(0x7f0000000300), 0x10}, 0x90) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000340)='./file2\x00', 0xa10812, &(0x7f00000009c0)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRES64, @ANYRES32, @ANYRESOCT=0x0, @ANYRES16, @ANYRES64, @ANYRES64, @ANYRES8=0x0, @ANYBLOB="bdc3431c9da13b91fe44b13626dc250440d97b1d7b38fbd8a2aaaa3eb9629d0d9360c03c38c083c1c6716e836772a33640a6a075db845dea3b0d7f2f96bc9f9f4a2bb54c58d5c376a3799a230c7469c1f819f58a378b914f2676904a776b09c138307a4afd9c5ea327a9bd0766812ce42e7c51e72698a2da24bb4b118bbf23f5bfe72852a834ba083ebba4da259bd186b6936176a008073b6ae9fcf2bac230665f3aaf", @ANYRESHEX, @ANYRESOCT, @ANYRESDEC=0x0], 0x21, 0x1516, &(0x7f0000001f80)="$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") syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x25418, 0x0, 0x1, 0x0, &(0x7f0000006380)) listen(0xffffffffffffffff, 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) sched_setscheduler(0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) close(0x3) mount(0x0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)='ceph\x00', 0x0, &(0x7f0000000500)='acl') r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%\\/:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="00000000976670dfe4cee7cb43a4273af7a34880ae099c1ef21dec214cb8741368db24573e9606a59b238e8caf15b49ba320cc5bd7117f3f3d311583ab33c09f6ba00f9cc0ff7856", 0x48, 0xffffffffffffffff) open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 4.661885205s ago: executing program 0 (id=714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 4.660826554s ago: executing program 3 (id=715): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x14e}) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 3.532826454s ago: executing program 4 (id=716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@loopback, 0x4e20, 0x3, 0x4e20, 0x900, 0x2, 0x30, 0x80, 0x6}, {0xe, 0x8, 0x8, 0x1000, 0x1ff, 0x8ac, 0xa, 0x8}, {0x4, 0x8, 0xffffffffffffffff, 0x3}, 0x6, 0x6e6bb0, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x4d5, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x4, 0x0, 0x81, 0x9, 0x101, 0x3}}, 0xe8) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002a00)="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", 0x2000, &(0x7f0000008bc0)={&(0x7f0000000180)={0x50, 0x0, 0x1000, {0x7, 0x2b, 0x79, 0x10100001, 0x9, 0x400, 0x10, 0x8, 0x0, 0x0, 0x40, 0x3}}, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, 0x4}, &(0x7f0000000280)={0x18, 0xfffffffffffffffe, 0x5, {0x8}}, &(0x7f00000002c0)={0x18, 0xffffffffffffffda, 0x3, {0x31}}, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x7, {0x80000000}}, 0x0, &(0x7f0000001740)={0x60, 0x0, 0x0, {{0x6, 0x156, 0xfffffffffffffffb, 0x1, 0x1, 0xd, 0x0, 0x5fb}}}, &(0x7f00000017c0)={0x18, 0x0, 0x400, {0x9}}, &(0x7f0000001800)={0x13, 0x0, 0x3, {'lc\x00'}}, &(0x7f0000001840)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000001880)={0x78, 0x0, 0x401, {0x9, 0x80, 0x0, {0x0, 0x8, 0x97b, 0x5, 0x8, 0x17f3, 0x1, 0x80000000, 0xdca, 0x1000, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0xfffffff1}}}, &(0x7f00000019c0)={0x90, 0x0, 0xeee, {0x1, 0x1, 0x80000000, 0x6, 0x7, 0x8, {0x5, 0x7, 0x0, 0x4, 0x6, 0xfffffffffffffc01, 0x9, 0xe32, 0x21, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, &(0x7f0000002140)={0x5a0, 0x0, 0x803, [{{0x5, 0x3, 0x6, 0x0, 0x800, 0x5, {0x1, 0x8000, 0x2, 0x9, 0x1550bcf3, 0x4, 0x9d9d, 0x0, 0x1, 0x2000, 0xfff, 0x0, 0xee00, 0xb, 0x40d}}, {0x0, 0x80, 0x4, 0x9, '&\'(*'}}, {{0x3, 0x0, 0xa3b, 0x7, 0x6, 0x4ac, {0x2, 0x4b7, 0x8, 0x6, 0x8001, 0x8000000000000000, 0x0, 0x7, 0x5, 0xa000, 0x2, 0x0, 0x0, 0xce7, 0x993a}}, {0x5, 0x0, 0x4, 0x3, 'wrr\x00'}}, {{0x2, 0x2, 0x8, 0x7, 0x7, 0xa, {0x3, 0xffffffffffffffff, 0x81, 0x1, 0xe, 0x4, 0x23000, 0xfffffffb, 0x28, 0x2000, 0x9, 0x0, 0x0, 0xfffffffe, 0xb4}}, {0x6, 0x100000001}}, {{0x0, 0x2, 0x8, 0x8000, 0x2, 0x8, {0x0, 0x80000000, 0x2, 0x9, 0x2, 0x9, 0xfffffff4, 0x9000, 0x1, 0x2000, 0x2, 0x0, 0x0, 0xf6c, 0x9}}, {0x3, 0xc99e, 0x4, 0x6, 'wrr\x00'}}, {{0x4, 0x2, 0x6, 0x6, 0x1, 0x8, {0x3, 0x4, 0x9, 0x0, 0x40, 0x6, 0x4, 0x81, 0x919, 0xa000, 0x8000, 0x0, 0xee00, 0x7, 0x800}}, {0x5, 0x5, 0x3, 0x400, 'lc\x00'}}, {{0x4, 0x3, 0xff00, 0x8, 0x6, 0x9, {0x1, 0x8000000000000000, 0x4, 0xc, 0x1000, 0x1ff, 0xe8, 0x5, 0xd7, 0x2000, 0x9728, 0x0, 0x0, 0xd, 0x1}}, {0x1, 0x5, 0x1, 0x0, '\x00'}}, {{0x4, 0x3, 0x1, 0x0, 0x2b, 0x4, {0x2, 0x0, 0x8000000000000000, 0x101, 0x67e, 0x7, 0x0, 0x4, 0x7ff, 0xc000, 0x0, 0x0, 0x0, 0x70c3fd9e}}, {0x4, 0x67, 0x4, 0xffff8552, 'wrr\x00'}}, {{0x3, 0x0, 0x6, 0x1, 0x8, 0x9, {0x5, 0x1, 0x5, 0x1, 0x7fff, 0x80000000, 0x6, 0x0, 0x3, 0x8000, 0xd8e, 0x0, 0x0, 0x8000, 0x80}}, {0x3, 0x6, 0x2, 0x80, '&+'}}, {{0x0, 0x1, 0x9, 0x6, 0x0, 0x2, {0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0x3, 0x3, 0x8d5a, 0xa000, 0x9, 0x0, 0x0, 0x200, 0x9}}, {0x3, 0x3, 0x0, 0x5}}]}, &(0x7f00000028c0)={0xa0, 0x873a68b2dced10ac, 0x98, {{0x6, 0x0, 0x892, 0x2, 0x7, 0x0, {0x4, 0x582, 0xb, 0x1, 0x3, 0x5, 0x3, 0x8, 0x2, 0x8000, 0x6, 0x0, 0x0, 0x5}}, {0x0, 0x10}}}, &(0x7f0000002980)={0x20, 0x0, 0x2, {0x6, 0x0, 0xffffff91, 0x1}}, &(0x7f0000008a80)={0x130, 0x0, 0x7, {0x6a7, 0xe, 0x0, '\x00', {0x8000, 0x3, 0x7, 0x1, 0x0, 0x0, 0x1000, '\x00', 0x9602, 0x7, 0x20400000, 0xfffffffffffffffa, {0x7c89dce0, 0x200}, {0x7, 0x9}, {0x5}, {0x80000000, 0xfffffff9}, 0x526b, 0x200, 0x1, 0xfffff800}}}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000340)={{0x84, @loopback, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x4e23, 0x2, 0x3, 0x12d61, 0xe}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) 3.429302285s ago: executing program 0 (id=717): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r1, 0x8b21, &(0x7f0000000040)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000004000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000001e008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_collapse_huge_page_isolate\x00', r6}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000140)=ANY=[@ANYRES16=r6], 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x2, 0x63, 0xfffffffc, 0xc4cf, 0x7, "04010000000000780000000008f8ff00", 0x4, 0x200}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r10}) r11 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r11, 0xc0285700, &(0x7f0000000000)={0xf, "c51fca0a5550cf9652a3f0b942747b193fd10d95793a0c159f6dca495afb8114"}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 3.423266615s ago: executing program 3 (id=718): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x12, 0x1b, 0xb, 0x63, 0x4, 0xf5, 0x1}) 2.327085892s ago: executing program 4 (id=719): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000000000)={[{@dax_inode}]}, 0x4, 0x982a, &(0x7f0000009b80)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r0, 0x1, 0x0, 0x1001f0) socket$kcm(0x11, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) syz_io_uring_setup(0x22f, &(0x7f0000000140)={0x0, 0x5325, 0x10000, 0x3, 0x100002cf}, &(0x7f0000000100), &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000c80)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101002, 0xa) socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r4, 0x0, 0xe3aa6ea) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file1\x00', 0x808010, &(0x7f0000000dc0)={[{@umask={'umask', 0x3d, 0xffff}}, {@rootdir={'rootdir', 0x3d, 0x3ff}}, {@umask={'umask', 0x3d, 0x7f}}, {@nostrict}, {@volume={'volume', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0xf}}, {@gid_forget}, {@nostrict}, {@rootdir={'rootdir', 0x3d, 0x5}}, {@volume={'volume', 0x3d, 0xfffffffffffffffe}}]}, 0x1, 0xc29, &(0x7f0000001940)="$eJzs3U9sHOd5B+D32yEtUm6ateMof5TDAg4QV44NUpQtFnIAKmKIGBBkwRRzMFCAK5FSFyaXFEkVclCkKpCgCNIWKnLIsQKcAL1VpxYIGkA9uUUQgOip6KFQW0dwb5sAaYsezGJ2vyWXtCSylkRS1vMI0m929p3db9Z8uTPrmZ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+/o2TQ8Npr0cBAOymM5NvDo14/weAJ8o5+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwvRRHfjRTv/qCVptu3OwZON5pXrk6NT9x9scEUKSpRtOvLvwPDR0eOvfLq8dFu3n/5h+0L8cbkuZO1Uwvzi0uzy8uzM7WpZuPCwszsjh/hQZff6kj7BajNv31l5uLF5drRl0c23X21eufA04eqJ0YPj7zVrZ0an5iY7Knp6//Yz/4R6eE9FJ8gT0UR34wU7730QapHRCUevBe2+d3xqA1GX9l/7ZWYGp9or8hco95cKe9MlVzVF1HtWWis2yO70IsPZCziWvnfqRzwkXL1JhfrS/Xzc7O1s/WllcZKY6GZKp3RlutTjUqMpojFiGgVez149pv+KOJYpLjz61Y6HxFFtw9ePDP55tDI9g/QtwuDvMfTVouI1XgMehb2qQNRxF9Eih9OD8WF3Ffttnk/4itlvhZxucxbKa7n26n8BTEa8SvvJ/BY64sifhEpFlIrzXR7v71defpbtdebFxd6arvblY/9/sFusm3CPjYQRZxvb/G30sf/sAsAAAAAAAAAAAAA2B1F/DRS3Jx/IS1G7zmljeal2rn6+bnOUcHdY/9ream1tbW1aupkLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5o5KfP2ct51DOsZxnc07nXMx5Lef1nDdy3sx5K+dqzts5WznDeU8AAAAAAAAAAAAAAAAAAAA8ZINRxESkuPHuH7SvKx3t69J/+sTomfHneq8Z/7ltHqesfTkifho7uyZvf77WeKqUfx7+egHbG4givpOv//fHez0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX6hEEd+NFD/6TStFioixiOno5O1ir0cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQGUhGnIsV/fmOgfXs1Ir4YER+ulX8i/mdtq70eMQAAAAAAAAAAAAAAAAAAAHwCpSIuR4ofv9dK1Yi4Wr1z4OlD1ROjh0feKqKIVJb01r8xee5k7dTC/OLS7PLy7Extqtm4sDAzu9OnGzjdaF65OjU+8UhWZluDj3j8gwOnFhbfWWpc+v2Vu95/cODk+eWVpfqFu98dg9EXMdQ750h7wFPjE+1BzzXqzfaiqXKPAfZF1Ha6MgAAAAAAAAAAAAAAAAAAAOwbB1MR45Hi+Z8dS93zxvs65/x/qnOrWK/9yR9ufBfA3Jbs6v3+gJ1Mp50O9Ej7xPva1PjExGTP7L7+j5aWY0qpiM9GisN/9/n2+fApDt713Piy7k8jxej/Hst11cNl3dimqoEjU+MTtTMLzZdOzs0tXKiv1M/PzdYmF+sXdvzFAQAAAAAAAAAAAAAAAAAAAHAfB1MRfxYpjr2+mrrXnc/n//d1bvWc//9aRPey8wNpc65rn9v/2+1z+zvTnz4x+vrR5+81/1Gc/1+OKaUiPowUz/zl59vX0++e/z+0pbas+3Gk+MX3vpTrKk+VdcPd1ek84sXG3OxQWftipPj+2W5ttGtfzbWf2agdLmv/PlI8+3uba4/n2uc2ao+WtXcixcSZu9d+dqN2pKwdjBRf/ZNat/ZgWfv1XHtoo/blCwtzMzt9eXkylf3/r5Hiy8PfTN2f+Xv2f8/3f1zbkus+0vP3n35Y/V/tmXct9/Va7v/hbfr/cqT48+tfynWd3jua73+m/e9G/38/UvzOpzbXvpJrn92oHd7pasFeKvv/HyPF6u1/Xv+Zz/2fO2ujQ3v7/4t9m7O7XbBX/f9Mz7xqHtfI//O1gCfN8jvffrs+Nze7ZMKECRPrE3v9mwl41Mrt//+KFF+7XKTufmze/v+tzq2N/f///s7G9v+JLbluj7b/n+2ZdyLvtfT3RQyszC/2fy5iYPmdb7/UmK9fmr002xwZGT3+u8eGjx4f7n+qu3O/MbXj1w4ed2X/vx0pfvLX/7T+Ofbm/f+7f/53cEuu26P+/0zvOm3ar9nxSwFPnLL//ypS/MuND9b/f9P9Pv/rfs73wvObc7BbtEf9/1zPvFr+Z7Rn3gtFxMmdPhcAAAAAAAAAADwmDqYifhYp/qb1D+vXvN98/E98uVvbe/zfveyH6/8DAPdXvv9PRoqfH/xq6n6HzE6O/5/Zkuv26PjfQz3zZnbpvOYdv8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAxpSjiQKR49wetdLsob3cMnG40r1ydGp+4+2KDKVJUomjXl38Hho+OHHvl1eOj3bz/8g/bF+KNyXMna6cW5heXZpeXZ2dqU83GhYWZ2R0/woMuv9WR9gtQm3/7yszFi8u1oy+PbLr7avXOgacPVU+MHh55q1s7NT4xMdlT09f/sZ/9I9LDeyg+QZ6KIn4eKd576YP0b0VEJR68F7b53fGoDUZf2X/tlZgan2ivyFyj3lwp70yVXNUXUe1ZaKzbI7vQiw9kLOJaRFTKAR8pV29ysb5UPz83WztbX1pprDQWmqnSGW25PtWoxGiKWIyIVrHXg2e/6Y8i/jZS3Pl1K/17EVF0++DFM5NvDo1s/wB9uzDIezxttYhYjcegZ2GfOhBFPBcpfjg9FP9RdPqq3TbvR3ylzNciLpd5K8X1fDuVvyBGI37l/QQea31RxNlIsZBa6f0i9357u/L0t2qvNy8udMr+KNrbzvkd9XHfP9hNtk3YxwaiiF+2t/hb6ZfezwEAAAAAAAAAAABgnyvia5Hi5vwLqX1+6Po5pY3mpdq5+vm5zmH93WP/a3mptbW1tWrqZC3nUM6xnGdzTudczHkt5/WcN3LezHkr52rO2zlbOaOSnz9nLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5w3HSAAAAAAAAAAAAAAAAAAA8IpUo4nuR4ke/aaW1onN92eno5G3nucIn2v8FAAD//+X2R4U=") pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 1.848173229s ago: executing program 0 (id=720): socket$pptp(0x18, 0x1, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x140, 0x178, 0xc, 0x140, 0x178, 0x210, 0x258, 0x258, 0x210, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @remote, [0x0, 0x0, 0x0, 0xff], [], 'syzkaller0\x00', 'netpci0\x00', {}, {}, 0x3a}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@mcast1, @private1, [], [0x0, 0xffffff00], 'wg2\x00', 'hsr0\x00', {}, {}, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) io_uring_enter(0xffffffffffffffff, 0x0, 0x464f, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @loopback}, 0x10) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 1.651131499s ago: executing program 3 (id=721): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r2) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r3, 0x25, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) 345.320496ms ago: executing program 3 (id=722): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f00000002c0)={[{0xb, 0x0, 0x0, 0x0, 0xff, 0xfd, 0x0, 0xff, 0x80, 0x0, 0x0, 0x0, 0x100000000000000}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x10}, {0x10000, 0x4, 0x4, 0x0, 0x0, 0x0, 0x4, 0x10, 0x0, 0xff, 0xfe, 0x82, 0x800}], 0xffff8000}) 337.585877ms ago: executing program 2 (id=723): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) syz_open_pts(0xffffffffffffffff, 0x2800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e25, 0x0, @loopback, 0x18}, 0x1c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000340)=0xff) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000eaff000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x7, 0xc4f, 0x1, 0x1}, 0x50) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 229.010837ms ago: executing program 0 (id=724): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 0s ago: executing program 3 (id=725): creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts. [ 66.822277][ T4172] cgroup: Unknown subsys name 'net' [ 66.958840][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.497116][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.575299][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 70.604869][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 70.637775][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 70.676029][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 70.756798][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 70.816482][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.824324][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.832824][ T4190] device bridge_slave_0 entered promiscuous mode [ 70.854076][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.865692][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.873955][ T4194] device bridge_slave_0 entered promiscuous mode [ 70.882945][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.890104][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.898274][ T4194] device bridge_slave_1 entered promiscuous mode [ 70.918228][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.925453][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.934259][ T4190] device bridge_slave_1 entered promiscuous mode [ 70.996952][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.004376][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.012818][ T4184] device bridge_slave_0 entered promiscuous mode [ 71.032656][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.039764][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.047758][ T4185] device bridge_slave_0 entered promiscuous mode [ 71.057566][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.070658][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.080073][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.087874][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.096172][ T4184] device bridge_slave_1 entered promiscuous mode [ 71.105329][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.119586][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.129384][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.136783][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.145153][ T4185] device bridge_slave_1 entered promiscuous mode [ 71.200422][ T4194] team0: Port device team_slave_0 added [ 71.238341][ T4194] team0: Port device team_slave_1 added [ 71.246423][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.255957][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.263928][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.271769][ T4183] device bridge_slave_0 entered promiscuous mode [ 71.281773][ T4190] team0: Port device team_slave_0 added [ 71.290011][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.311361][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.330528][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.337840][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.346458][ T4183] device bridge_slave_1 entered promiscuous mode [ 71.355494][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.366191][ T4190] team0: Port device team_slave_1 added [ 71.410210][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.417489][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.445800][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.461288][ T4184] team0: Port device team_slave_0 added [ 71.496365][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.503564][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.530492][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.548073][ T4184] team0: Port device team_slave_1 added [ 71.555688][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.567425][ T4185] team0: Port device team_slave_0 added [ 71.574073][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.581065][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.607535][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.616823][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.624882][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.642911][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.654427][ T4185] team0: Port device team_slave_1 added [ 71.660714][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.668521][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.694751][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.766841][ T4194] device hsr_slave_0 entered promiscuous mode [ 71.774138][ T4194] device hsr_slave_1 entered promiscuous mode [ 71.781479][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.789098][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.815302][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.829250][ T4183] team0: Port device team_slave_0 added [ 71.846009][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.853355][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.879967][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.892074][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.899054][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.925064][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.937433][ T4183] team0: Port device team_slave_1 added [ 71.960058][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.967355][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.993923][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.026682][ T4190] device hsr_slave_0 entered promiscuous mode [ 72.033731][ T4190] device hsr_slave_1 entered promiscuous mode [ 72.040767][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.049036][ T4190] Cannot create hsr debugfs directory [ 72.060053][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.067897][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.094426][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.109989][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.117649][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.143867][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.222780][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 72.232714][ T3521] Bluetooth: hci1: command 0x0409 tx timeout [ 72.239254][ T3521] Bluetooth: hci3: command 0x0409 tx timeout [ 72.256795][ T4185] device hsr_slave_0 entered promiscuous mode [ 72.258846][ T3521] Bluetooth: hci4: command 0x0409 tx timeout [ 72.269191][ T3521] Bluetooth: hci0: command 0x0409 tx timeout [ 72.278391][ T4185] device hsr_slave_1 entered promiscuous mode [ 72.286107][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.293860][ T4185] Cannot create hsr debugfs directory [ 72.303069][ T4184] device hsr_slave_0 entered promiscuous mode [ 72.309892][ T4184] device hsr_slave_1 entered promiscuous mode [ 72.317259][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.325083][ T4184] Cannot create hsr debugfs directory [ 72.376279][ T4183] device hsr_slave_0 entered promiscuous mode [ 72.383626][ T4183] device hsr_slave_1 entered promiscuous mode [ 72.390186][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.397856][ T4183] Cannot create hsr debugfs directory [ 72.681288][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.693582][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.708978][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.719228][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.773310][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.782838][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.800373][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.810307][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.892608][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.905027][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.915923][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.930912][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.949775][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.994990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.007514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.035198][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.044111][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.064767][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.078810][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.087977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.098390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.107583][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.114955][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.132494][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.153336][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.165411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.174425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.184498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.193660][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.200874][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.211045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.267060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.277500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.288503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.298073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.316810][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.327858][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.336720][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.345703][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.356513][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.365891][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.375417][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.386688][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.400344][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.410623][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.421533][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.442484][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.452684][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.461547][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.469254][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.481321][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.493727][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.513906][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.522128][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.530754][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.540583][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.549806][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.559485][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.566858][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.584666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.635227][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.674215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.686018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.697601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.706575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.715359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.726152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.735905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.744933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.759383][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.776408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.790312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.800284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.811010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.826982][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.834780][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.847929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.903870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.913862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.923332][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.930639][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.939710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.949725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.958888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.968477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.978551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.987241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.995449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.007015][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.018757][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.031094][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.048030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.057011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.073745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.086085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.100911][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.116314][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.155349][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.164693][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.180048][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.189825][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.199239][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.208169][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.220399][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.243091][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.258054][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.267316][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.274475][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.289616][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.305448][ T1107] Bluetooth: hci0: command 0x041b tx timeout [ 74.309672][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.312597][ T1107] Bluetooth: hci4: command 0x041b tx timeout [ 74.341838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.361732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.370822][ T1107] Bluetooth: hci3: command 0x041b tx timeout [ 74.384438][ T1107] Bluetooth: hci1: command 0x041b tx timeout [ 74.401471][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.409121][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.417315][ T1107] Bluetooth: hci2: command 0x041b tx timeout [ 74.423718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.441513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.449939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.492414][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.508897][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.519891][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.537556][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.547959][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.555908][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.563605][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.573039][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.582158][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.590712][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.604259][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.613314][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.623110][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.635152][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.645665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.655279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.695548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.705952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.715200][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.722580][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.730616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.756684][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.768493][ T4190] device veth0_vlan entered promiscuous mode [ 74.777723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.786501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.794836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.806215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.816600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.825579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.834966][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.842203][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.851322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.860040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.875322][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.892922][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.913366][ T4190] device veth1_vlan entered promiscuous mode [ 74.954249][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.963646][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.975311][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.986426][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.996607][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.006946][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.016096][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.028018][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.038016][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.060114][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.070692][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.080488][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.090599][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.100452][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.116945][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.129795][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.160480][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.170377][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.179884][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.190752][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.200765][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.210150][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.228843][ T4194] device veth0_vlan entered promiscuous mode [ 75.248716][ T4185] device veth0_vlan entered promiscuous mode [ 75.270670][ T4190] device veth0_macvtap entered promiscuous mode [ 75.288765][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.298516][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.307913][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.316851][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.329007][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.337848][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.346516][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.361224][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.369126][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.385023][ T4190] device veth1_macvtap entered promiscuous mode [ 75.398425][ T4185] device veth1_vlan entered promiscuous mode [ 75.413166][ T4194] device veth1_vlan entered promiscuous mode [ 75.450350][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.470750][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.480298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.489759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.499811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.509184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.518072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.527401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.536244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.545851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.554819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.567863][ T4185] device veth0_macvtap entered promiscuous mode [ 75.579319][ T4185] device veth1_macvtap entered promiscuous mode [ 75.602701][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.617554][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.627612][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.636958][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.646028][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.664174][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.673584][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.682224][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.693171][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.703552][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.713435][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.734374][ T4194] device veth0_macvtap entered promiscuous mode [ 75.741835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.756104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.763963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.791760][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.803319][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.818570][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.840559][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.851657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.870418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.880424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.890081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.915846][ T4194] device veth1_macvtap entered promiscuous mode [ 75.927710][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.940001][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.952733][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.998773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.016829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.035030][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.046056][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.056667][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.067323][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.088512][ T4184] device veth0_vlan entered promiscuous mode [ 76.120021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.131501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.142221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.151106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.165686][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.176921][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.187523][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.198471][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.211067][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.261374][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.276325][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.299133][ T4184] device veth1_vlan entered promiscuous mode [ 76.311437][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.324755][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.335086][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.346450][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.358187][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.381130][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.383439][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.396894][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.408176][ T2302] Bluetooth: hci4: command 0x040f tx timeout [ 76.414696][ T2302] Bluetooth: hci0: command 0x040f tx timeout [ 76.415700][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.423608][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.434909][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.449093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.457842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.465600][ T2302] Bluetooth: hci2: command 0x040f tx timeout [ 76.471513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.472179][ T2302] Bluetooth: hci1: command 0x040f tx timeout [ 76.482394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.485330][ T2302] Bluetooth: hci3: command 0x040f tx timeout [ 76.500736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.556604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.568990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.579409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.590299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.607008][ T4184] device veth0_macvtap entered promiscuous mode [ 76.644410][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.657803][ T4184] device veth1_macvtap entered promiscuous mode [ 76.664527][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.691553][ T4183] device veth0_vlan entered promiscuous mode [ 76.711547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.726796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.735666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.743976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.753777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.762724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.770729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.787687][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.801149][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.819170][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.829297][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.829591][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.847754][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.858143][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.870231][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.882745][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.896500][ T4183] device veth1_vlan entered promiscuous mode [ 76.913483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.922215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.931389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.943495][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.954795][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.967406][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.978637][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.988841][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.999696][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.011365][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.020903][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.030939][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.046462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.063174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.077846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.091460][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.110084][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.119382][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.128886][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.144588][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.156502][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.167352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.231372][ T4183] device veth0_macvtap entered promiscuous mode [ 77.244372][ T4183] device veth1_macvtap entered promiscuous mode [ 77.290053][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.394519][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.429354][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.562011][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.676036][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.762127][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.913261][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.972387][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.009848][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.043166][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.053869][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.066656][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.077134][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.098142][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.129244][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.152452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.160699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.173635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.209435][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.222449][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.232841][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.243995][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.254472][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.265724][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.278063][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.289896][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.319820][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.334337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.344652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.362590][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.374136][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.387892][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.400352][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.409810][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.418962][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.452924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.462081][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 78.478076][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 78.511679][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.537216][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.543422][ T1107] Bluetooth: hci3: command 0x0419 tx timeout [ 78.562043][ T1107] Bluetooth: hci1: command 0x0419 tx timeout [ 78.585152][ T1107] Bluetooth: hci2: command 0x0419 tx timeout [ 78.601351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.835082][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.838124][ T304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.858333][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.869457][ T4313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.881826][ T304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.080960][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 79.262408][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 79.285471][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 79.741570][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.749629][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 79.790137][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.142446][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 80.151667][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 80.160652][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 80.169609][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 80.178707][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 80.188093][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 80.521179][ T4313] syz.3.4 (4313) used greatest stack depth: 21152 bytes left [ 80.628106][ T4328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 80.630920][ T4327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 80.736711][ T4328] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 81.362212][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.592709][ T4344] xt_socket: unknown flags 0x50 [ 82.972474][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 83.321735][ T4360] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.072117][ T21] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 84.080313][ T21] usb 5-1: can't read configurations, error -71 [ 84.545420][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.501995][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 85.601996][ T4356] loop3: detected capacity change from 0 to 32768 [ 85.623022][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.644924][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.656378][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 85.668151][ T21] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 85.715431][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.729300][ T4356] XFS (loop3): Mounting V5 Filesystem [ 85.802256][ T21] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 85.812404][ T21] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 85.820739][ T21] usb 5-1: Manufacturer: syz [ 85.854272][ T21] usb 5-1: config 0 descriptor?? [ 85.931307][ T4356] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 86.237100][ T4356] XFS (loop3): Starting recovery (logdev: internal) [ 86.252243][ T21] rc_core: IR keymap rc-hauppauge not found [ 86.258389][ T21] Registered IR keymap rc-empty [ 86.293501][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 86.315679][ T4356] XFS (loop3): Ending recovery (logdev: internal) [ 86.340588][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 86.381292][ T4194] XFS (loop3): Unmounting Filesystem [ 86.398307][ T21] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 86.442355][ T4391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.521938][ T4308] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.570619][ T21] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 86.643727][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 86.702164][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 86.742105][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 86.792027][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 86.792138][ T4308] usb 3-1: Using ep0 maxpacket: 32 [ 86.822386][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 86.872113][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 86.911997][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 86.956132][ T23] cfg80211: failed to load regulatory.db [ 86.962052][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 86.963396][ T4308] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 87.004532][ T4308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.012033][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 87.034498][ T4308] usb 3-1: config 0 descriptor?? [ 87.092005][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 87.139160][ T21] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 87.203378][ T21] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 87.465513][ T21] usb 5-1: USB disconnect, device number 3 [ 88.634195][ T4407] xt_socket: unknown flags 0x50 [ 89.525660][ T26] audit: type=1326 audit(1760814294.960:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4402 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d4088fc9 code=0x7ffc0000 [ 90.066369][ T26] audit: type=1326 audit(1760814294.990:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4402 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f56d4088fc9 code=0x7ffc0000 [ 90.282102][ T4308] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 90.311482][ T26] audit: type=1326 audit(1760814294.990:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4402 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d4088fc9 code=0x7ffc0000 [ 90.386678][ T4308] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 90.405860][ T4308] dib0700: firmware download failed at 7 with -22 [ 90.418880][ T26] audit: type=1326 audit(1760814294.990:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4402 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f56d4088fc9 code=0x7ffc0000 [ 90.471661][ T4308] usb 3-1: USB disconnect, device number 2 [ 90.503026][ T26] audit: type=1326 audit(1760814294.990:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4402 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d4088fc9 code=0x7ffc0000 [ 90.553486][ T26] audit: type=1326 audit(1760814295.000:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4402 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f56d4088fc9 code=0x7ffc0000 [ 91.331951][ T26] audit: type=1326 audit(1760814295.000:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4402 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d4088fc9 code=0x7ffc0000 [ 91.461984][ T26] audit: type=1326 audit(1760814295.000:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4402 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f56d4088fc9 code=0x7ffc0000 [ 91.562090][ T26] audit: type=1326 audit(1760814295.010:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4402 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d4088fc9 code=0x7ffc0000 [ 91.688989][ T26] audit: type=1326 audit(1760814295.010:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4402 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f56d4088fc9 code=0x7ffc0000 [ 92.204578][ T4427] loop2: detected capacity change from 0 to 32768 [ 92.359522][ T4427] XFS (loop2): Mounting V5 Filesystem [ 92.455607][ T4427] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 92.622037][ T4427] XFS (loop2): Starting recovery (logdev: internal) [ 92.756197][ T4427] XFS (loop2): Ending recovery (logdev: internal) [ 93.934094][ T4279] Bluetooth: hci5: Frame reassembly failed (-90) [ 94.087018][ T4190] XFS (loop2): Unmounting Filesystem [ 94.422005][ T4320] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 94.852251][ T4320] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 95.347460][ T4320] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 95.359136][ T4320] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 95.473577][ T4320] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 95.486143][ T4320] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 95.677954][ T4320] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 95.697518][ T4469] loop1: detected capacity change from 0 to 512 [ 95.802796][ T4470] xt_socket: unknown flags 0x50 [ 95.861179][ T4320] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 96.491181][ T4308] Bluetooth: hci5: command 0x1003 tx timeout [ 96.497931][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 96.616871][ T4320] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 96.661958][ T4320] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 96.819493][ T4469] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 96.844586][ T4469] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.242192][ T4320] usb 1-1: string descriptor 0 read error: -22 [ 97.242779][ T4320] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 97.242849][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.754983][ T4320] adutux 1-1:168.0: interrupt endpoints not found [ 98.182073][ T4479] Cannot find add_set index 0 as target [ 98.398384][ T4320] usb 1-1: USB disconnect, device number 2 [ 98.542235][ T4308] Bluetooth: hci5: command 0x1001 tx timeout [ 98.550342][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 101.301786][ T4308] Bluetooth: hci5: command 0x1009 tx timeout [ 101.963548][ T4517] xt_socket: unknown flags 0x50 [ 102.935455][ T4524] capability: warning: `syz.0.60' uses deprecated v2 capabilities in a way that may be insecure [ 104.266974][ T4534] loop1: detected capacity change from 0 to 512 [ 104.469739][ T4534] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 104.492219][ T4534] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.668244][ T4547] Cannot find add_set index 0 as target [ 105.229979][ T4558] xt_socket: unknown flags 0x50 [ 105.351721][ T4559] netlink: 'syz.1.68': attribute type 29 has an invalid length. [ 105.359841][ T4559] netlink: 'syz.1.68': attribute type 3 has an invalid length. [ 105.367703][ T4559] netlink: 76 bytes leftover after parsing attributes in process `syz.1.68'. [ 105.945348][ T150] block nbd0: Attempted send on invalid socket [ 105.952900][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 106.170887][ T4564] tipc: Started in network mode [ 106.186408][ T4564] tipc: Node identity 1634609d7123, cluster identity 4711 [ 106.222234][ T4564] tipc: Enabled bearer , priority 0 [ 106.278887][ T4565] device syzkaller0 entered promiscuous mode [ 106.305128][ T4568] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 106.489499][ T4564] tipc: Resetting bearer [ 106.582125][ T4565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70'. [ 106.612546][ T4568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70'. [ 106.627962][ T4568] Zero length message leads to an empty skb [ 106.687711][ T4562] tipc: Resetting bearer [ 106.726643][ T4562] tipc: Disabling bearer [ 106.842003][ T4308] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 107.240150][ T4200] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 107.252069][ T4200] CPU: 0 PID: 4200 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 107.259669][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.269854][ T4200] Workqueue: hci1 hci_rx_work [ 107.274947][ T4200] Call Trace: [ 107.278248][ T4200] [ 107.281207][ T4200] dump_stack_lvl+0x168/0x230 [ 107.285926][ T4200] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 107.292207][ T4200] ? show_regs_print_info+0x20/0x20 [ 107.297580][ T4200] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 107.303284][ T4200] sysfs_create_dir_ns+0x252/0x280 [ 107.308606][ T4200] ? __lock_acquire+0x7c60/0x7c60 [ 107.313672][ T4200] ? sysfs_warn_dup+0xa0/0xa0 [ 107.318416][ T4200] kobject_add_internal+0x662/0xd00 [ 107.323933][ T4200] kobject_add+0x152/0x210 [ 107.328394][ T4200] ? kobject_init+0x1d0/0x1d0 [ 107.333110][ T4200] ? klist_children_get+0x50/0x50 [ 107.338167][ T4200] ? get_device_parent+0x121/0x3f0 [ 107.343324][ T4200] device_add+0x483/0xfb0 [ 107.347709][ T4200] hci_conn_add_sysfs+0xd1/0x1e0 [ 107.352688][ T4200] le_conn_complete_evt+0xcbc/0x1590 [ 107.358024][ T4200] ? cs_le_create_conn+0x5e0/0x5e0 [ 107.363284][ T4200] ? __schedule+0x11c3/0x4390 [ 107.368000][ T4200] ? __mutex_trylock_common+0x14f/0x250 [ 107.373651][ T4200] hci_le_meta_evt+0x289/0x3b80 [ 107.378543][ T4200] ? hci_event_packet+0x36d/0x12f0 [ 107.383691][ T4200] ? hci_event_packet+0x2e2/0x12f0 [ 107.388837][ T4200] ? __lock_acquire+0x7c60/0x7c60 [ 107.393903][ T4200] ? release_firmware_map_entry+0x190/0x190 [ 107.399838][ T4200] ? hci_remote_host_features_evt+0x280/0x280 [ 107.405940][ T4200] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 107.411604][ T4200] ? mark_lock+0x94/0x320 [ 107.415973][ T4200] ? mutex_unlock+0x10/0x10 [ 107.420509][ T4200] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 107.426620][ T4200] ? lock_chain_count+0x20/0x20 [ 107.431511][ T4200] ? __rwlock_init+0x140/0x140 [ 107.436313][ T4200] hci_event_packet+0xe05/0x12f0 [ 107.441292][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 107.446534][ T4200] ? rcu_lock_release+0x20/0x20 [ 107.451424][ T4200] ? lock_acquire+0x1f2/0x3f0 [ 107.456390][ T4200] ? hci_send_to_monitor+0x9c/0x4a0 [ 107.461741][ T4200] hci_rx_work+0x255/0xa10 [ 107.466282][ T4200] process_one_work+0x863/0x1000 [ 107.471248][ T4200] ? worker_detach_from_pool+0x240/0x240 [ 107.476973][ T4200] ? lockdep_hardirqs_off+0x70/0x100 [ 107.482276][ T4200] ? _raw_spin_lock_irq+0xab/0xe0 [ 107.487394][ T4200] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 107.492778][ T4200] ? wq_worker_running+0x97/0x170 [ 107.498076][ T4200] worker_thread+0xaa8/0x12a0 [ 107.502769][ T4200] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 107.509279][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 107.514538][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 107.520293][ T4200] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 107.526208][ T4200] kthread+0x436/0x520 [ 107.530328][ T4200] ? rcu_lock_release+0x20/0x20 [ 107.535295][ T4200] ? kthread_blkcg+0xd0/0xd0 [ 107.540450][ T4200] ret_from_fork+0x1f/0x30 [ 107.544920][ T4200] [ 107.562471][ T4200] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 107.576632][ T4200] Bluetooth: hci1: failed to register connection device [ 107.655783][ T4308] usb 2-1: unable to get BOS descriptor or descriptor too short [ 108.252768][ T4308] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 108.286833][ T4308] usb 2-1: can't read configurations, error -71 [ 108.668504][ T4592] loop2: detected capacity change from 0 to 512 [ 108.774043][ T4592] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 108.802558][ T4592] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.590888][ T4602] Cannot find add_set index 0 as target [ 116.346231][ T4639] xt_socket: unknown flags 0x50 [ 117.882616][ T4642] crypto_alloc_aead failed rc=-4 [ 122.757561][ T4254] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.264362][ T4254] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.354832][ T4704] xt_socket: unknown flags 0x50 [ 125.062240][ T4297] Bluetooth: hci0: command 0x0406 tx timeout [ 125.341799][ T4254] usb 3-1: Using ep0 maxpacket: 16 [ 125.662406][ T4254] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.773548][ T4254] usb 3-1: config 9 has an invalid interface number: 92 but max is 0 [ 125.814895][ T4254] usb 3-1: config 9 has no interface number 0 [ 125.850075][ T4254] usb 3-1: config 9 interface 92 has no altsetting 0 [ 126.112342][ T4254] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=a5.f9 [ 126.170030][ T4254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.248333][ T4254] usb 3-1: Product: syz [ 126.342292][ T4254] usb 3-1: Manufacturer: syz [ 126.346982][ T4254] usb 3-1: SerialNumber: syz [ 126.436508][ T4719] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 127.142481][ T4254] hub 3-1:9.92: bad descriptor, ignoring hub [ 127.158476][ T4254] hub: probe of 3-1:9.92 failed with error -5 [ 127.215194][ T23] Process accounting resumed [ 127.251987][ T4174] Process accounting resumed [ 127.349428][ T4254] usb 3-1: USB disconnect, device number 3 [ 128.038856][ T4737] xt_socket: unknown flags 0x50 [ 128.958663][ T4748] loop2: detected capacity change from 0 to 256 [ 129.072760][ T4748] exfat: Deprecated parameter 'utf8' [ 129.078322][ T4748] exfat: Deprecated parameter 'namecase' [ 129.103999][ T4748] exfat: Deprecated parameter 'namecase' [ 129.118415][ T4748] exfat: Deprecated parameter 'utf8' [ 129.196525][ T4748] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 129.365902][ T4254] libceph: connect (1)[c::]:6789 error -101 [ 129.381276][ T4254] libceph: mon0 (1)[c::]:6789 connect error [ 129.643592][ T4254] libceph: connect (1)[c::]:6789 error -101 [ 129.649862][ T4254] libceph: mon0 (1)[c::]:6789 connect error [ 129.888128][ T4753] ceph: No mds server is up or the cluster is laggy [ 130.085046][ T4763] kAFS: unable to lookup cell '\/' [ 130.247351][ T4768] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.519538][ T4781] xt_socket: unknown flags 0x50 [ 133.028967][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.042724][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.678681][ T4793] loop2: detected capacity change from 0 to 512 [ 133.865486][ T4793] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 133.883945][ T4793] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.061483][ T4798] Cannot find add_set index 0 as target [ 135.271351][ T4806] device syzkaller1 entered promiscuous mode [ 135.296562][ T4308] libceph: connect (1)[c::]:6789 error -101 [ 135.315823][ T4308] libceph: mon0 (1)[c::]:6789 connect error [ 135.355161][ T4806] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 135.603302][ T4308] libceph: connect (1)[c::]:6789 error -101 [ 135.625483][ T4308] libceph: mon0 (1)[c::]:6789 connect error [ 135.812229][ T4808] ceph: No mds server is up or the cluster is laggy [ 137.108535][ T4827] loop2: detected capacity change from 0 to 256 [ 137.194093][ T4827] exfat: Deprecated parameter 'utf8' [ 137.232079][ T4827] exfat: Deprecated parameter 'namecase' [ 137.248456][ T4830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 137.284975][ T4827] exfat: Deprecated parameter 'namecase' [ 137.310059][ T4827] exfat: Deprecated parameter 'utf8' [ 137.415419][ T4827] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 139.142845][ T4850] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.200973][ T23] libceph: connect (1)[c::]:6789 error -101 [ 139.208288][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 139.524255][ T4863] kAFS: unable to lookup cell '\/' [ 139.529768][ T23] libceph: connect (1)[c::]:6789 error -101 [ 139.554418][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 139.814260][ T4852] ceph: No mds server is up or the cluster is laggy [ 140.371429][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 140.371447][ T26] audit: type=1800 audit(1760814345.870:17): pid=4863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.144" name="file1" dev="loop2" ino=1048590 res=0 errno=0 [ 141.430811][ T4883] loop1: detected capacity change from 0 to 256 [ 141.982723][ T4883] exfat: Deprecated parameter 'utf8' [ 141.988243][ T4883] exfat: Deprecated parameter 'namecase' [ 141.997319][ T4883] exfat: Deprecated parameter 'namecase' [ 142.003753][ T4883] exfat: Deprecated parameter 'utf8' [ 142.079174][ T4883] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 142.429047][ T4887] kAFS: unable to lookup cell '\/' [ 142.457834][ T26] audit: type=1800 audit(1760814347.960:18): pid=4887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.162" name="file1" dev="loop1" ino=1048591 res=0 errno=0 [ 143.943467][ T4897] tipc: Started in network mode [ 143.948461][ T4897] tipc: Node identity fe0c448c2f9, cluster identity 4711 [ 143.982072][ T4897] tipc: Enabled bearer , priority 0 [ 144.033536][ T4898] device syzkaller0 entered promiscuous mode [ 144.074937][ T4897] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 144.163837][ T4897] tipc: Resetting bearer [ 144.247066][ T4897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.166'. [ 144.311297][ T4896] tipc: Resetting bearer [ 144.381749][ T4896] tipc: Disabling bearer [ 145.582190][ T4633] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 145.670483][ T4920] loop1: detected capacity change from 0 to 256 [ 145.697436][ T4920] exfat: Deprecated parameter 'utf8' [ 145.729749][ T4920] exfat: Deprecated parameter 'namecase' [ 145.772103][ T4920] exfat: Deprecated parameter 'namecase' [ 145.787414][ T4920] exfat: Deprecated parameter 'utf8' [ 145.843368][ T4920] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 145.972043][ T4633] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.073141][ T4633] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 146.152237][ T4922] kAFS: unable to lookup cell '\/' [ 146.332713][ T26] audit: type=1800 audit(1760814351.680:19): pid=4922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.174" name="file1" dev="loop1" ino=1048592 res=0 errno=0 [ 146.412850][ T4633] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.681426][ T4633] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.713051][ T4633] usb 5-1: Product: syz [ 146.717465][ T4633] usb 5-1: Manufacturer: syz [ 146.749248][ T4633] usb 5-1: SerialNumber: syz [ 148.061764][ T4910] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 148.319637][ T4934] xt_CT: You must specify a L4 protocol and not use inversions on it [ 148.419204][ T4938] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 148.973648][ T4910] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 149.198264][ T4940] loop1: detected capacity change from 0 to 256 [ 149.256581][ T4633] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 149.312450][ T4633] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 149.323194][ T4940] exfat: Deprecated parameter 'utf8' [ 149.339738][ T4940] exfat: Deprecated parameter 'namecase' [ 149.382056][ T4940] exfat: Deprecated parameter 'namecase' [ 149.387942][ T4940] exfat: Deprecated parameter 'utf8' [ 149.440729][ T4940] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 149.462166][ T4633] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 149.542408][ T4633] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 149.589449][ T4633] usb 5-1: USB disconnect, device number 4 [ 149.618567][ T4633] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 155.149428][ T1107] Bluetooth: hci4: command 0x0405 tx timeout [ 155.521969][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 156.921954][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 157.612442][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 157.639616][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 157.691306][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.830946][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.844597][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.854101][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.227658][ T5023] netlink: 'syz.1.203': attribute type 2 has an invalid length. [ 159.472106][ T23] usb 5-1: usb_control_msg returned -71 [ 159.481089][ T23] usbtmc 5-1:16.0: can't read capabilities [ 159.666323][ T23] usb 5-1: USB disconnect, device number 5 [ 162.267523][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.278629][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.287023][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.420741][ T5067] netlink: 'syz.4.217': attribute type 2 has an invalid length. [ 167.220174][ T5105] binder_alloc: 5100: binder_alloc_buf, no vma [ 167.920419][ T5115] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 167.962310][ T5115] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 167.994115][ T5126] xt_CT: You must specify a L4 protocol and not use inversions on it [ 168.927565][ T5135] netlink: 9 bytes leftover after parsing attributes in process `syz.2.242'. [ 168.938470][ T5135] device gretap0 entered promiscuous mode [ 169.002857][ T3521] libceph: connect (1)[c::]:6789 error -101 [ 169.029177][ T3521] libceph: mon0 (1)[c::]:6789 connect error [ 169.068133][ T5145] netlink: 5 bytes leftover after parsing attributes in process `syz.2.242'. [ 169.113775][ T5141] ceph: No mds server is up or the cluster is laggy [ 169.225757][ T5145] 0{X功: renamed from gretap0 [ 170.185983][ T5145] device 30{X功 left promiscuous mode [ 170.295782][ T5145] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 173.222185][ T4254] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 173.332026][ T3521] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 173.612013][ T4254] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.640172][ T4254] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 173.674344][ T4254] usb 3-1: config 0 interface 0 has no altsetting 0 [ 173.699968][ T4254] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 173.723086][ T4254] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.784797][ T4254] usb 3-1: config 0 descriptor?? [ 174.306056][ T3521] usb 2-1: config 0 has no interfaces? [ 174.311749][ T3521] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 175.254785][ T3521] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.289070][ T5214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.264'. [ 175.330338][ T3521] usb 2-1: config 0 descriptor?? [ 175.442125][ T4254] hid-led: probe of 0003:0FC5:B080.0001 failed with error -71 [ 175.483102][ T4254] usb 3-1: USB disconnect, device number 4 [ 176.532642][ T5192] udc-core: couldn't find an available UDC or it's busy [ 176.541620][ T5192] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 176.627421][ T4297] usb 2-1: USB disconnect, device number 4 [ 176.944359][ T4254] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 176.991673][ T4254] Bluetooth: hci1: Injecting HCI hardware error event [ 177.012286][ T4200] Bluetooth: hci1: hardware error 0x00 [ 177.556233][ T5250] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.618719][ T5251] kAFS: unable to lookup cell '\/' [ 180.442167][ T5279] loop3: detected capacity change from 0 to 512 [ 180.561051][ T5279] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 180.651289][ T5279] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.671946][ T4174] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 180.983691][ T5290] Cannot find add_set index 0 as target [ 181.121921][ T4174] usb 1-1: Using ep0 maxpacket: 8 [ 182.161267][ T5297] genirq: Flags mismatch irq 4. 00000000 (das16m1) vs. 00000000 (ttyS0) [ 182.286416][ T5296] overlayfs: failed to clone upperpath [ 182.302061][ T4174] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 182.321955][ T4174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.353036][ T4174] usb 1-1: Product: syz [ 182.363013][ T4174] usb 1-1: Manufacturer: syz [ 182.393457][ T4174] usb 1-1: SerialNumber: syz [ 182.441673][ T4174] usb 1-1: config 0 descriptor?? [ 182.516725][ T4174] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 182.542628][ T4174] dvb-usb: bulk message failed: -22 (2/0) [ 182.587129][ T4174] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 182.642284][ T4174] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 182.651450][ T4174] usb 1-1: media controller created [ 182.704323][ T4174] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.812349][ T4174] cxusb: set interface failed [ 182.817181][ T4174] dvb-usb: bulk message failed: -22 (1/0) [ 182.999642][ T4307] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 183.028244][ T4174] DVB: Unable to find symbol mt352_attach() [ 183.040427][ T4174] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 183.362362][ T4307] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.390370][ T4307] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 183.411995][ T4174] rc_core: IR keymap rc-dvico-portable not found [ 183.420818][ T4174] Registered IR keymap rc-empty [ 183.442781][ T4174] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 183.482326][ T4174] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input6 [ 183.510057][ T4174] dvb-usb: schedule remote query interval to 100 msecs. [ 183.517792][ T4174] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 183.551604][ T4174] usb 1-1: USB disconnect, device number 3 [ 183.622146][ T4307] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 183.656363][ T4307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.685290][ T4307] usb 2-1: Product: syz [ 183.694786][ T4174] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 183.721982][ T4307] usb 2-1: Manufacturer: syz [ 183.731955][ T4307] usb 2-1: SerialNumber: syz [ 183.758449][ T4307] usb 2-1: config 0 descriptor?? [ 184.941309][ T23] usb 2-1: USB disconnect, device number 5 [ 190.315284][ T21] libceph: connect (1)[c::]:6789 error -101 [ 190.322966][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 190.597562][ T21] libceph: connect (1)[c::]:6789 error -101 [ 190.623581][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 190.720057][ T5351] ceph: No mds server is up or the cluster is laggy [ 192.132110][ T4307] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 192.151850][ C1] raw-gadget.0 gadget: ignoring, device is not running [ 192.302080][ T4307] usb 1-1: device descriptor read/64, error -32 [ 192.497740][ T5385] loop4: detected capacity change from 0 to 512 [ 192.571969][ T4307] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 192.610382][ T5385] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 192.639998][ T5385] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.599690][ T5396] Cannot find add_set index 0 as target [ 193.834799][ T5394] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.064955][ T5400] loop1: detected capacity change from 0 to 256 [ 194.078994][ T5400] exfat: Deprecated parameter 'utf8' [ 194.085070][ T5400] exfat: Deprecated parameter 'namecase' [ 194.091061][ T5400] exfat: Deprecated parameter 'namecase' [ 194.097559][ T5400] exfat: Deprecated parameter 'utf8' [ 194.129767][ T5400] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 194.297139][ T4307] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 194.316600][ T4307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.340213][ T4307] usb 1-1: Product: syz [ 194.368865][ T4307] usb 1-1: Manufacturer: syz [ 194.379050][ T4307] usb 1-1: SerialNumber: syz [ 194.477560][ T5404] kAFS: unable to lookup cell '\/' [ 194.565220][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.571752][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.583367][ T26] audit: type=1800 audit(1760814400.090:20): pid=5404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.319" name="file1" dev="loop1" ino=1048593 res=0 errno=0 [ 194.622871][ T4307] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 194.947159][ T4254] usb 1-1: USB disconnect, device number 5 [ 195.140902][ T4307] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 195.735344][ T4254] usb 1-1: ath9k_htc: USB layer deinitialized [ 195.938745][ T1107] libceph: connect (1)[c::]:6789 error -101 [ 195.956356][ T1107] libceph: mon0 (1)[c::]:6789 connect error [ 196.040917][ T5422] kAFS: unable to lookup cell '\/' [ 196.242573][ T1107] libceph: connect (1)[c::]:6789 error -101 [ 196.250196][ T1107] libceph: mon0 (1)[c::]:6789 connect error [ 196.381933][ T4254] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 196.500754][ T5413] ceph: No mds server is up or the cluster is laggy [ 196.621985][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 196.637238][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 196.693676][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 197.018193][ T4254] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 197.057901][ T4254] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.074292][ T4254] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.921153][ T4254] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.931779][ T4254] usb 1-1: config 0 descriptor?? [ 197.974945][ T4254] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 197.988122][ T5439] loop2: detected capacity change from 0 to 512 [ 198.167572][ T5439] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 198.194305][ T5439] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.324255][ T5448] Cannot find add_set index 0 as target [ 200.017794][ T4247] usb 1-1: USB disconnect, device number 6 [ 200.313583][ T5461] netlink: 'syz.2.333': attribute type 2 has an invalid length. [ 200.321706][ T5461] netlink: 'syz.2.333': attribute type 1 has an invalid length. [ 202.441037][ T5482] loop4: detected capacity change from 0 to 256 [ 202.472868][ T5482] exfat: Deprecated parameter 'utf8' [ 202.478362][ T5482] exfat: Deprecated parameter 'namecase' [ 202.504506][ T5482] exfat: Deprecated parameter 'namecase' [ 202.553820][ T5482] exfat: Deprecated parameter 'utf8' [ 202.609806][ T5482] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 207.712320][ T4254] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 208.135709][ T4254] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 209.703622][ T4254] usb 3-1: config 0 has no interface number 0 [ 209.841197][ T4254] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 210.544296][ T4254] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.588156][ T5525] process 'syz.0.355' launched '/dev/fd/5' with NULL argv: empty string added [ 210.778073][ T4254] usb 3-1: config 0 descriptor?? [ 211.012535][ T4254] usb 3-1: can't set config #0, error -71 [ 211.053106][ T4254] usb 3-1: USB disconnect, device number 5 [ 212.126628][ T5550] ceph: No mds server is up or the cluster is laggy [ 212.232404][ T13] libceph: connect (1)[c::]:6789 error -101 [ 212.266832][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 212.528043][ T5560] loop1: detected capacity change from 0 to 512 [ 213.444133][ T5560] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 213.480357][ T5560] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.862314][ T5578] Cannot find add_set index 0 as target [ 214.401902][ T3521] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 215.152067][ T3521] usb 4-1: Using ep0 maxpacket: 8 [ 215.509049][ T5597] netlink: 56 bytes leftover after parsing attributes in process `syz.4.372'. [ 216.372176][ T3521] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 216.422774][ T3521] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.430974][ T3521] usb 4-1: Product: syz [ 216.461362][ T3521] usb 4-1: Manufacturer: syz [ 216.715218][ T3521] usb 4-1: SerialNumber: syz [ 216.893041][ T4254] libceph: connect (1)[c::]:6789 error -101 [ 216.899392][ T4254] libceph: mon0 (1)[c::]:6789 connect error [ 217.034529][ T3521] usb 4-1: config 0 descriptor?? [ 217.084539][ T3521] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 217.208837][ T5612] ceph: No mds server is up or the cluster is laggy [ 217.266104][ T3521] gspca_sonixj: reg_w1 err -71 [ 217.271089][ T3521] sonixj: probe of 4-1:0.0 failed with error -71 [ 217.303664][ T13] libceph: connect (1)[c::]:6789 error -101 [ 217.309744][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 217.317170][ T3521] usb 4-1: USB disconnect, device number 2 [ 219.730306][ T5640] loop2: detected capacity change from 0 to 512 [ 220.734765][ T5640] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 220.807296][ T5640] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.967554][ T5654] Cannot find add_set index 0 as target [ 223.489168][ T5669] tipc: Started in network mode [ 223.536200][ T5669] tipc: Node identity 0a7faed13d06, cluster identity 4711 [ 223.572353][ T5669] tipc: Enabled bearer , priority 0 [ 223.599714][ T5672] device syzkaller0 entered promiscuous mode [ 223.660632][ T5669] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 223.703086][ T5672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 223.742005][ T4307] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 223.781529][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 223.888695][ T5666] tipc: Resetting bearer [ 223.981405][ T5666] tipc: Disabling bearer [ 224.162094][ T4307] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 224.170917][ T4307] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 224.183292][ T5682] netlink: 'syz.1.395': attribute type 10 has an invalid length. [ 224.240245][ T4307] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 224.265228][ T4307] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 224.442190][ T4307] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 224.464764][ T4307] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 224.475035][ T5682] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 224.499483][ T4307] usb 5-1: Product: syz [ 224.521262][ T4307] usb 5-1: Manufacturer: syz [ 224.572992][ T150] block nbd0: Attempted send on invalid socket [ 224.579420][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 224.632204][ T5671] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 224.663114][ T4307] cdc_wdm 5-1:1.0: skipping garbage [ 224.677157][ T4307] cdc_wdm 5-1:1.0: skipping garbage [ 224.851509][ T4307] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 224.944097][ T4307] usb 5-1: USB disconnect, device number 6 [ 227.205998][ T4633] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 227.258184][ T5704] loop3: detected capacity change from 0 to 256 [ 227.353241][ T5704] exfat: Deprecated parameter 'utf8' [ 227.359465][ T5704] exfat: Deprecated parameter 'namecase' [ 227.379090][ T5704] exfat: Deprecated parameter 'namecase' [ 227.395695][ T5704] exfat: Deprecated parameter 'utf8' [ 227.439707][ T5704] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 227.748775][ T5708] kAFS: unable to lookup cell '\/' [ 228.014447][ T4633] usb 1-1: unable to get BOS descriptor or descriptor too short [ 228.073517][ T26] audit: type=1800 audit(1760814433.530:21): pid=5708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.403" name="file1" dev="loop3" ino=1048594 res=0 errno=0 [ 228.096841][ T4633] usb 1-1: not running at top speed; connect to a high speed hub [ 228.231992][ T4633] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 228.240413][ T4633] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 228.814031][ T4633] usb 1-1: config 13 has no interface number 0 [ 228.820493][ T4633] usb 1-1: config 13 interface 50 altsetting 183 endpoint 0x8 has invalid wMaxPacketSize 0 [ 228.838444][ T4633] usb 1-1: config 13 interface 50 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.872040][ T4633] usb 1-1: config 13 interface 50 has no altsetting 0 [ 229.008087][ T5716] tipc: Enabled bearer , priority 0 [ 229.027846][ T5716] device syzkaller0 entered promiscuous mode [ 229.058311][ T5716] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 229.082673][ T4633] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 229.111445][ T5716] tipc: Resetting bearer [ 229.117564][ T3521] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 229.132779][ T4633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.140210][ T5716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'. [ 229.174712][ T5716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'. [ 229.192653][ T4633] usb 1-1: Product: syz [ 229.198798][ T4633] usb 1-1: Manufacturer: syz [ 229.200529][ T5715] tipc: Resetting bearer [ 229.221099][ T4633] usb 1-1: SerialNumber: syz [ 229.245707][ T5715] tipc: Disabling bearer [ 229.273808][ T4633] usb 1-1: can't set config #13, error -71 [ 229.311542][ T4633] usb 1-1: USB disconnect, device number 7 [ 229.563082][ T3521] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 229.590997][ T3521] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 229.654140][ T3521] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 229.698942][ T3521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.701926][ T4633] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 229.737295][ T3521] usb 4-1: config 0 descriptor?? [ 229.830152][ T3521] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 230.193384][ T150] block nbd0: Attempted send on invalid socket [ 230.200835][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 230.236870][ T4633] usb 1-1: Using ep0 maxpacket: 32 [ 230.373751][ T4633] usb 1-1: config 0 has an invalid interface number: 91 but max is 0 [ 230.466630][ T4633] usb 1-1: config 0 has no interface number 0 [ 230.482489][ T4633] usb 1-1: config 0 interface 91 has no altsetting 0 [ 231.012165][ T4633] usb 1-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=7e.8a [ 231.038070][ T4633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.208108][ T5741] netlink: 32 bytes leftover after parsing attributes in process `syz.2.414'. [ 231.219720][ T5741] netlink: 48 bytes leftover after parsing attributes in process `syz.2.414'. [ 231.232805][ T5741] netlink: 48 bytes leftover after parsing attributes in process `syz.2.414'. [ 231.265342][ T4633] usb 1-1: Product: syz [ 231.269587][ T4633] usb 1-1: Manufacturer: syz [ 231.274816][ T4633] usb 1-1: SerialNumber: syz [ 231.282004][ T4633] usb 1-1: config 0 descriptor?? [ 232.621867][ T2302] usb 4-1: USB disconnect, device number 3 [ 232.658996][ T5746] loop1: detected capacity change from 0 to 256 [ 232.672216][ T4633] usb 1-1: can't set config #0, error -71 [ 232.698314][ T4633] usb 1-1: USB disconnect, device number 8 [ 232.709352][ T5746] exfat: Deprecated parameter 'utf8' [ 232.751774][ T5746] exfat: Deprecated parameter 'namecase' [ 233.104550][ T5746] exfat: Deprecated parameter 'namecase' [ 233.110778][ T5746] exfat: Deprecated parameter 'utf8' [ 233.111100][ T5751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.418'. [ 233.158816][ T5746] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 233.455580][ T5751] input: syz1 as /devices/virtual/input/input7 [ 233.721623][ T5746] kAFS: unable to lookup cell '\/' [ 234.182056][ T26] audit: type=1800 audit(1760814439.690:22): pid=5746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.416" name="file1" dev="loop1" ino=1048595 res=0 errno=0 [ 234.202823][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.358538][ T5764] tipc: Enabled bearer , priority 0 [ 234.429919][ T5766] device syzkaller0 entered promiscuous mode [ 234.499042][ T5764] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 234.670672][ T5764] tipc: Resetting bearer [ 234.681594][ T5764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.420'. [ 234.709002][ T5764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.420'. [ 234.723787][ T5762] tipc: Resetting bearer [ 234.751577][ T5762] tipc: Disabling bearer [ 235.776763][ T150] block nbd0: Attempted send on invalid socket [ 235.783537][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 236.675050][ T5799] loop0: detected capacity change from 0 to 256 [ 237.031087][ T5799] exfat: Deprecated parameter 'utf8' [ 237.075955][ T5799] exfat: Deprecated parameter 'namecase' [ 237.090087][ T5799] exfat: Deprecated parameter 'namecase' [ 237.096825][ T5799] exfat: Deprecated parameter 'utf8' [ 237.130114][ T5799] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 237.584275][ T5814] kAFS: unable to lookup cell '\/' [ 237.671231][ T26] audit: type=1800 audit(1760814443.170:23): pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.432" name="file1" dev="loop0" ino=1048596 res=0 errno=0 [ 238.867171][ T5825] netlink: 'syz.0.436': attribute type 2 has an invalid length. [ 239.583799][ T5826] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.437'. [ 239.602029][ T5826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.437'. [ 243.723783][ T5857] netlink: 76 bytes leftover after parsing attributes in process `syz.4.449'. [ 245.170776][ T5863] netlink: 'syz.1.451': attribute type 2 has an invalid length. [ 245.887734][ T1305] block nbd4: Attempted send on invalid socket [ 245.895267][ T1305] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.916714][ T1305] block nbd4: Attempted send on invalid socket [ 245.924836][ T1305] blk_update_request: I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.938755][ T5877] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 245.962697][ T1305] block nbd4: Attempted send on invalid socket [ 245.969785][ T1305] blk_update_request: I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.982239][ T5877] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 245.998301][ T1305] block nbd4: Attempted send on invalid socket [ 246.013511][ T1305] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.033978][ T1305] block nbd4: Attempted send on invalid socket [ 246.047148][ T1305] blk_update_request: I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.061400][ T5877] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 246.075100][ T1305] block nbd4: Attempted send on invalid socket [ 246.084936][ T1305] blk_update_request: I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.102612][ T5877] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 246.120615][ T1305] block nbd4: Attempted send on invalid socket [ 246.129125][ T1305] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.150218][ T1305] block nbd4: Attempted send on invalid socket [ 246.161570][ T1305] blk_update_request: I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.176553][ T5877] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 246.189822][ T1305] block nbd4: Attempted send on invalid socket [ 246.202653][ T1305] blk_update_request: I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.218326][ T5877] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 246.249981][ T1305] block nbd4: Attempted send on invalid socket [ 246.270602][ T1305] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.482249][ T5877] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 246.492401][ T5877] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 246.502245][ T5877] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 248.952086][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.456'. [ 249.538169][ T5891] netlink: 'syz.1.459': attribute type 6 has an invalid length. [ 249.552440][ T5890] input: syz1 as /devices/virtual/input/input8 [ 249.840691][ T4202] udevd[4202]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 250.548546][ T5908] netlink: 'syz.2.464': attribute type 2 has an invalid length. [ 254.552184][ T5954] netlink: 'syz.4.475': attribute type 2 has an invalid length. [ 256.414989][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.421347][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.334178][ T5969] sd 0:0:1:0: device reset [ 260.542720][ T5999] xt_socket: unknown flags 0x50 [ 260.800550][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.495'. [ 262.960095][ T6031] Cannot find add_set index 0 as target [ 263.185130][ T6036] xt_CT: You must specify a L4 protocol and not use inversions on it [ 265.861974][ T4633] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 266.102045][ T4633] usb 2-1: Using ep0 maxpacket: 16 [ 266.472734][ T4633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.742028][ T4633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.762207][ T4633] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 266.776314][ T4633] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 266.787154][ T4633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.798741][ T4633] usb 2-1: config 0 descriptor?? [ 267.786004][ T4633] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 267.823796][ T4633] microsoft 0003:045E:07DA.0002: unsupported Resolution Multiplier 0 [ 267.856877][ T4633] microsoft 0003:045E:07DA.0002: implement() called with n (152) > 32! (kworker/0:8) [ 267.992768][ T4633] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 268.022665][ T4633] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 268.058353][ T4633] microsoft 0003:045E:07DA.0002: no inputs found [ 268.082592][ T4633] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 268.960783][ T4633] usb 2-1: USB disconnect, device number 6 [ 269.024497][ T4254] libceph: connect (1)[c::]:6789 error -101 [ 269.045902][ T4254] libceph: mon0 (1)[c::]:6789 connect error [ 269.403332][ T4254] libceph: connect (1)[c::]:6789 error -101 [ 269.409737][ T6089] ceph: No mds server is up or the cluster is laggy [ 269.506217][ T4254] libceph: mon0 (1)[c::]:6789 connect error [ 269.821384][ T6099] xt_CT: You must specify a L4 protocol and not use inversions on it [ 270.219591][ T6110] loop4: detected capacity change from 0 to 512 [ 270.322020][ T4254] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 270.480860][ T6107] fido_id[6107]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 271.119555][ T6110] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 271.162055][ T6110] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.221985][ T4254] usb 2-1: Using ep0 maxpacket: 16 [ 271.301574][ T6119] Cannot find add_set index 0 as target [ 271.772626][ T4254] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 271.792197][ T4254] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.815187][ T4254] usb 2-1: Product: syz [ 271.829887][ T4254] usb 2-1: Manufacturer: syz [ 271.851728][ T4254] usb 2-1: SerialNumber: syz [ 271.953208][ T4254] r8152-cfgselector 2-1: config 0 descriptor?? [ 272.752024][ T4254] r8152-cfgselector 2-1: Unknown version 0x0000 [ 272.815466][ T4254] r8152-cfgselector 2-1: Unknown version 0x0000 [ 272.840253][ T4254] r8152-cfgselector 2-1: bad CDC descriptors [ 272.924464][ T4254] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 273.139305][ T4254] usb 2-1: USB disconnect, device number 7 [ 275.449680][ T6153] loop1: detected capacity change from 0 to 512 [ 277.051902][ T6153] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 277.154856][ T6153] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.208071][ T6168] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.314118][ T6171] Cannot find add_set index 0 as target [ 280.784891][ T6211] No source specified [ 281.501838][ T3521] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 281.559674][ T6213] loop3: detected capacity change from 0 to 512 [ 281.673824][ T6213] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 281.707335][ T6213] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.741894][ T3521] usb 5-1: Using ep0 maxpacket: 16 [ 281.862019][ T3521] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.394036][ T3521] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.404438][ T3521] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 282.414080][ T3521] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.426320][ T3521] usb 5-1: config 0 descriptor?? [ 282.827318][ T6229] loop2: detected capacity change from 0 to 1024 [ 282.882346][ T3521] usbhid 5-1:0.0: can't add hid device: -71 [ 282.891210][ T3521] usbhid: probe of 5-1:0.0 failed with error -71 [ 283.121523][ T3521] usb 5-1: USB disconnect, device number 7 [ 284.102845][ T4247] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 284.576684][ T6244] tipc: Enabled bearer , priority 0 [ 284.606607][ T6244] device syzkaller0 entered promiscuous mode [ 284.656647][ T6244] tipc: Resetting bearer [ 284.673302][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 284.683355][ T4247] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 284.691636][ T4247] usb 4-1: config 0 has no interface number 0 [ 284.719747][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 284.790943][ T6243] tipc: Resetting bearer [ 284.942625][ T4247] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 284.999520][ T6253] vivid-000: disconnect [ 285.012346][ T4247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.097810][ T6250] vivid-000: reconnect [ 285.116982][ T4247] usb 4-1: Product: syz [ 285.160620][ T4247] usb 4-1: Manufacturer: syz [ 285.208697][ T4247] usb 4-1: SerialNumber: syz [ 285.376757][ T4247] usb 4-1: config 0 descriptor?? [ 285.387126][ T6243] tipc: Disabling bearer [ 285.853215][ T4247] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 285.942792][ T4247] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 285.976962][ T4247] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 286.028076][ T4247] usb 4-1: media controller created [ 286.177988][ T4247] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 288.218165][ T6274] tmpfs: Unknown parameter 'usrquota' [ 288.221824][ T4247] usb 4-1: USB disconnect, device number 4 [ 289.081967][ T4262] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 289.696266][ T4262] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 289.809699][ T6296] tipc: Started in network mode [ 289.812201][ T4262] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 289.820203][ T6296] tipc: Node identity 3adc256ff036, cluster identity 4711 [ 289.989921][ T6296] tipc: Enabled bearer , priority 0 [ 289.999416][ T4262] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 290.056992][ T6302] device syzkaller0 entered promiscuous mode [ 290.063159][ T4262] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 290.070116][ T21] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 290.117150][ T6311] tipc: Resetting bearer [ 290.136427][ T6311] tipc: Disabling bearer [ 290.222020][ T4262] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 290.246313][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 290.255541][ T4262] usb 5-1: Product: syz [ 290.259919][ T4262] usb 5-1: Manufacturer: syz [ 290.302339][ T6275] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 290.321909][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 290.325508][ T4262] cdc_wdm 5-1:1.0: skipping garbage [ 290.350538][ T4262] cdc_wdm 5-1:1.0: skipping garbage [ 290.356598][ T4262] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 290.393455][ T6317] netlink: 9 bytes leftover after parsing attributes in process `syz.3.589'. [ 290.428395][ T6317] device gretap0 entered promiscuous mode [ 290.441964][ T21] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 290.450774][ T21] usb 2-1: config 179 has no interface number 0 [ 290.469715][ T21] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 290.485533][ T21] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 290.497676][ T21] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 290.512350][ T6318] netlink: 5 bytes leftover after parsing attributes in process `syz.3.589'. [ 290.521286][ T21] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 290.537681][ T21] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 290.569159][ T6318] 0{X功: renamed from gretap0 [ 290.574299][ T21] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 290.589309][ T6318] device 30{X功 left promiscuous mode [ 290.595228][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.622117][ T6308] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 290.664566][ T4262] usb 5-1: USB disconnect, device number 8 [ 290.699397][ T6318] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 290.935121][ T146] block nbd0: Receive control failed (result -32) [ 290.948205][ T6313] block nbd0: shutting down sockets [ 290.992205][ T21] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input9 [ 291.180257][ T21] usb 2-1: USB disconnect, device number 8 [ 291.186860][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 291.187009][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 291.258008][ T21] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 293.319951][ T6323] loop0: detected capacity change from 0 to 32768 [ 293.488299][ T6323] XFS (loop0): Mounting V5 Filesystem [ 293.706123][ T6323] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 293.754131][ T6356] binder: 6355:6356 ioctl 4018620d 0 returned -22 [ 293.840030][ T6356] binder: 6355:6356 ioctl c0306201 0 returned -14 [ 293.901673][ T6356] binder: 6355:6356 ioctl c0306201 0 returned -14 [ 294.078290][ T6323] XFS (loop0): Starting recovery (logdev: internal) [ 294.131000][ T6323] XFS (loop0): Ending recovery (logdev: internal) [ 294.442583][ T6366] netlink: 'syz.3.599': attribute type 2 has an invalid length. [ 295.356888][ T4185] XFS (loop0): Unmounting Filesystem [ 297.677226][ T6392] netlink: 32 bytes leftover after parsing attributes in process `syz.0.602'. [ 298.244748][ T6395] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 301.581407][ T6419] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 301.707587][ T6421] No source specified [ 302.593155][ T4174] hid-generic 0B42:FFFEFFFF:0004.0003: hidraw0: HID v1.01 Device [syz0] on syz1 [ 303.451412][ T6428] fido_id[6428]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 304.312699][ T6446] netlink: 'syz.3.623': attribute type 2 has an invalid length. [ 304.871325][ T21] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 305.292299][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 305.333052][ T4262] libceph: connect (1)[c::]:6789 error -101 [ 305.349405][ T4262] libceph: mon0 (1)[c::]:6789 connect error [ 305.472088][ T21] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 305.633793][ T4254] libceph: connect (1)[c::]:6789 error -101 [ 305.648606][ T4254] libceph: mon0 (1)[c::]:6789 connect error [ 305.755677][ T6452] ceph: No mds server is up or the cluster is laggy [ 305.862728][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.870940][ T21] usb 5-1: Product: syz [ 305.875579][ T21] usb 5-1: Manufacturer: syz [ 305.880291][ T21] usb 5-1: SerialNumber: syz [ 305.899865][ T21] usb 5-1: config 0 descriptor?? [ 305.922273][ T6438] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 305.932473][ T6438] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 305.981909][ C1] port100 5-1:0.0: NFC: Urb failure (status -71) [ 305.988829][ C1] port100 5-1:0.0: NFC: Urb failure (status -71) [ 306.527841][ T4247] Bluetooth: hci5: command 0x1003 tx timeout [ 306.845815][ T21] port100 5-1:0.0: NFC: Could not get supported command types [ 306.854304][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 306.875098][ T21] usb 5-1: USB disconnect, device number 9 [ 307.362847][ T6469] No source specified [ 308.164507][ T6476] No source specified [ 308.976592][ T23] Bluetooth: hci5: command 0x1001 tx timeout [ 308.990542][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 310.308004][ T6493] netlink: 'syz.1.634': attribute type 2 has an invalid length. [ 311.022165][ T21] Bluetooth: hci5: command 0x1009 tx timeout [ 312.192757][ T6513] device lo entered promiscuous mode [ 312.202047][ T6513] device tunl0 entered promiscuous mode [ 312.211583][ T6513] device gre0 entered promiscuous mode [ 312.221161][ T6513] device gretap0 entered promiscuous mode [ 312.232876][ T6513] device erspan0 entered promiscuous mode [ 312.242016][ T6513] device ip_vti0 entered promiscuous mode [ 312.256662][ T6513] device ip6_vti0 entered promiscuous mode [ 312.266851][ T6513] device sit0 entered promiscuous mode [ 312.277616][ T6513] device ip6tnl0 entered promiscuous mode [ 312.287437][ T6513] device ip6gre0 entered promiscuous mode [ 312.297507][ T6513] device syz_tun entered promiscuous mode [ 312.405065][ T6513] device ip6gretap0 entered promiscuous mode [ 312.414703][ T6513] device bridge0 entered promiscuous mode [ 312.423925][ T6513] device vcan0 entered promiscuous mode [ 312.430654][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 312.439037][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 312.448244][ T6513] device bond0 entered promiscuous mode [ 312.454036][ T6513] device bond_slave_0 entered promiscuous mode [ 312.461652][ T6513] device bond_slave_1 entered promiscuous mode [ 312.469289][ T6513] device wlan1 entered promiscuous mode [ 312.482943][ T6513] device team0 entered promiscuous mode [ 312.488809][ T6513] device team_slave_0 entered promiscuous mode [ 312.496371][ T6513] device team_slave_1 entered promiscuous mode [ 312.508631][ T6513] device dummy0 entered promiscuous mode [ 312.559331][ T6513] device nlmon0 entered promiscuous mode [ 312.631711][ T6513] device caif0 entered promiscuous mode [ 312.637614][ T6513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.215951][ T6525] No source specified [ 313.909823][ T6526] tipc: Enabled bearer , priority 0 [ 314.199068][ T6528] device syzkaller0 entered promiscuous mode [ 314.492575][ T6526] tipc: Resetting bearer [ 314.850531][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 314.850988][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 315.076884][ T23] tipc: Node number set to 3516679308 [ 315.094819][ T6521] tipc: Resetting bearer [ 315.373012][ T6521] tipc: Disabling bearer [ 315.575903][ T6561] loop4: detected capacity change from 0 to 256 [ 315.625563][ T6561] exfat: Deprecated parameter 'utf8' [ 315.631968][ T6561] exfat: Deprecated parameter 'namecase' [ 315.637732][ T6561] exfat: Deprecated parameter 'namecase' [ 315.693177][ T6561] exfat: Deprecated parameter 'utf8' [ 315.702138][ T4174] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 315.764792][ T6561] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 315.859324][ T6547] loop1: detected capacity change from 0 to 32768 [ 315.935388][ T6547] XFS (loop1): Mounting V5 Filesystem [ 315.984324][ T6547] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 316.026588][ T6547] XFS (loop1): Starting recovery (logdev: internal) [ 316.032448][ T21] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 316.051426][ T6547] XFS (loop1): Ending recovery (logdev: internal) [ 316.112114][ T4174] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 316.120513][ T4174] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.225328][ T6573] kAFS: unable to lookup cell '\/' [ 316.392003][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 317.122208][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.132521][ T4174] usb 4-1: config 1 has no interface number 0 [ 317.138769][ T4174] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 317.152631][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 317.166420][ T21] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 317.176104][ T4174] usb 4-1: config 1 interface 105 has no altsetting 0 [ 317.183283][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.193582][ T21] usb 1-1: config 0 descriptor?? [ 317.273311][ T4184] XFS (loop1): Unmounting Filesystem [ 317.344197][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.350647][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.359590][ T4174] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 317.388019][ T4174] usb 4-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 317.407278][ T4174] usb 4-1: Product: syz [ 317.411610][ T4174] usb 4-1: Manufacturer: syz [ 317.447314][ T4174] usb 4-1: SerialNumber: syz [ 317.679671][ T21] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0 [ 317.708175][ T21] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0 [ 317.722126][ T4174] aqc111: probe of 4-1:1.105 failed with error -22 [ 317.737320][ T4174] usb 4-1: USB disconnect, device number 5 [ 317.739943][ T4262] libceph: connect (1)[c::]:6789 error -101 [ 317.743423][ T21] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0 [ 317.760308][ T21] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0 [ 317.767989][ T21] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0 [ 317.776039][ T21] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0 [ 317.790083][ T21] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0 [ 317.797791][ T21] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0 [ 317.798009][ T4262] libceph: mon0 (1)[c::]:6789 connect error [ 317.814592][ T21] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0 [ 317.827303][ T21] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0 [ 317.839589][ T21] hid-generic 0003:0457:07DA.0004: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 317.914034][ T4320] usb 1-1: USB disconnect, device number 9 [ 318.057996][ T6584] fido_id[6584]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 318.067575][ T6579] ceph: No mds server is up or the cluster is laggy [ 318.139633][ T6586] No source specified [ 318.830562][ T4262] libceph: connect (1)[c::]:6789 error -101 [ 318.840601][ T4262] libceph: mon0 (1)[c::]:6789 connect error [ 319.600428][ T4262] libceph: connect (1)[c::]:6789 error -101 [ 319.637294][ T4262] libceph: mon0 (1)[c::]:6789 connect error [ 320.373661][ T150] nbd_handle_cmd: 2 callbacks suppressed [ 320.373683][ T150] block nbd0: Attempted send on invalid socket [ 320.386653][ T150] print_req_error: 2 callbacks suppressed [ 320.386666][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 323.559383][ T6637] loop2: detected capacity change from 0 to 7 [ 324.729990][ T4190] Dev loop2: unable to read RDB block 7 [ 324.749029][ T4190] loop2: AHDI p1 p2 p3 [ 324.759804][ T6644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.669'. [ 324.765419][ T4190] loop2: partition table partially beyond EOD, truncated [ 324.920407][ T4190] loop2: p1 start 1601398130 is beyond EOD, truncated [ 324.930880][ T4190] loop2: p2 start 1702059890 is beyond EOD, truncated [ 325.359299][ T6637] Dev loop2: unable to read RDB block 7 [ 325.365470][ T6637] loop2: AHDI p1 p2 p3 [ 325.400358][ T6637] loop2: partition table partially beyond EOD, truncated [ 325.456035][ T6637] loop2: p1 start 1601398130 is beyond EOD, truncated [ 325.477605][ T6637] loop2: p2 start 1702059890 is beyond EOD, truncated [ 325.497480][ T3561] Dev loop2: unable to read RDB block 7 [ 325.512209][ T3561] loop2: AHDI p1 p2 p3 [ 325.522260][ T3561] loop2: partition table partially beyond EOD, truncated [ 325.537934][ T3561] loop2: p1 start 1601398130 is beyond EOD, truncated [ 325.565940][ T3561] loop2: p2 start 1702059890 is beyond EOD, truncated [ 326.271001][ T13] Bluetooth: hci5: command 0x1003 tx timeout [ 326.288155][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 326.378923][ T6644] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.387701][ T6644] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.574596][ T6654] kAFS: unable to lookup cell '\/' [ 328.164430][ T6644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.260322][ T6644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.335171][ T4254] Bluetooth: hci5: command 0x1001 tx timeout [ 328.341677][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 329.266674][ T6644] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.277129][ T6644] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.286948][ T6644] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.296967][ T6644] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.345498][ T1305] block nbd0: Attempted send on invalid socket [ 330.353773][ T1305] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 330.500940][ T13] Bluetooth: hci5: command 0x1009 tx timeout [ 330.567177][ T6644] syz.0.669 (6644) used greatest stack depth: 20480 bytes left [ 330.951930][ T5535] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 331.116365][ T4174] libceph: connect (1)[c::]:6789 error -101 [ 331.127610][ T4174] libceph: mon0 (1)[c::]:6789 connect error [ 331.475704][ T6685] loop2: detected capacity change from 0 to 1024 [ 331.501299][ T4174] libceph: connect (1)[c::]:6789 error -101 [ 331.619144][ T4174] libceph: mon0 (1)[c::]:6789 connect error [ 332.133118][ T6679] ceph: No mds server is up or the cluster is laggy [ 332.188838][ T5535] usb 5-1: unable to get BOS descriptor or descriptor too short [ 332.292065][ T5535] usb 5-1: not running at top speed; connect to a high speed hub [ 332.373360][ T6689] loop2: detected capacity change from 0 to 256 [ 332.382226][ T5535] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x1 has invalid wMaxPacketSize 0 [ 332.402008][ T5535] usb 5-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.429456][ T6689] exfat: Deprecated parameter 'utf8' [ 332.451907][ T6689] exfat: Deprecated parameter 'namecase' [ 332.451939][ T5535] usb 5-1: config 1 interface 0 has no altsetting 0 [ 332.457995][ T6689] exfat: Deprecated parameter 'namecase' [ 332.491249][ T6689] exfat: Deprecated parameter 'utf8' [ 332.556171][ T6689] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 332.671969][ T5535] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 332.685903][ T5535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.703371][ T5535] usb 5-1: Product: syz [ 332.714370][ T5535] usb 5-1: Manufacturer: syz [ 332.724727][ T5535] usb 5-1: SerialNumber: syz [ 333.092709][ T5535] usblp0: Disabling reads from problematic bidirectional printer [ 333.119373][ T5535] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 9 proto 1 vid 0x03F0 pid 0x0004 [ 333.142988][ T5535] usb 5-1: USB disconnect, device number 10 [ 333.162298][ T6695] kAFS: unable to lookup cell '\/' [ 333.187527][ T5535] usblp0: removed [ 333.224045][ T26] audit: type=1800 audit(2000000083.410:24): pid=6695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.686" name="file1" dev="loop2" ino=1048649 res=0 errno=0 [ 334.111224][ T6702] xt_socket: unknown flags 0x50 [ 337.783738][ T6726] loop1: detected capacity change from 0 to 256 [ 337.797502][ T6726] exfat: Deprecated parameter 'utf8' [ 337.810151][ T6726] exfat: Deprecated parameter 'namecase' [ 337.816586][ T6726] exfat: Deprecated parameter 'namecase' [ 337.837256][ T6726] exfat: Deprecated parameter 'utf8' [ 337.950812][ T6726] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 339.610396][ T6734] xt_socket: unknown flags 0x50 [ 341.521923][ T6750] netlink: 'syz.3.700': attribute type 2 has an invalid length. [ 345.935559][ T6782] loop1: detected capacity change from 0 to 256 [ 346.022550][ T6782] exfat: Deprecated parameter 'utf8' [ 346.039104][ T6782] exfat: Deprecated parameter 'namecase' [ 346.116877][ T6782] exfat: Deprecated parameter 'namecase' [ 346.159058][ T6787] loop4: detected capacity change from 0 to 256 [ 346.166373][ T150] block nbd0: Attempted send on invalid socket [ 346.172861][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 346.198574][ T6782] exfat: Deprecated parameter 'utf8' [ 346.256781][ T6787] exfat: Deprecated parameter 'utf8' [ 346.272022][ T6782] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 346.332088][ T6787] exfat: Deprecated parameter 'namecase' [ 346.347520][ T6787] exfat: Deprecated parameter 'namecase' [ 346.367683][ T6787] exfat: Deprecated parameter 'utf8' [ 346.405245][ T6787] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 346.817328][ T6794] kAFS: unable to lookup cell '\/' [ 347.493498][ T26] audit: type=1800 audit(2000000097.230:25): pid=6794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.713" name="file1" dev="loop4" ino=1048650 res=0 errno=0 [ 348.051455][ T6807] netlink: 'syz.4.716': attribute type 2 has an invalid length. [ 351.213521][ T146] ================================================================== [ 351.222115][ T146] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12c0/0x3b80 [ 351.229978][ T146] Read of size 1 at addr ffff88807a783c0a by task kworker/u5:0/146 [ 351.237962][ T146] [ 351.240305][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 351.247853][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 351.258449][ T146] Workqueue: hci4 hci_rx_work [ 351.263169][ T146] Call Trace: [ 351.266480][ T146] [ 351.269432][ T146] dump_stack_lvl+0x168/0x230 [ 351.274153][ T146] ? show_regs_print_info+0x20/0x20 [ 351.279404][ T146] ? load_image+0x3b0/0x3b0 [ 351.284057][ T146] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 351.289540][ T146] print_address_description+0x60/0x2d0 [ 351.295201][ T146] ? hci_le_meta_evt+0x12c0/0x3b80 [ 351.300418][ T146] kasan_report+0xdf/0x130 [ 351.304849][ T146] ? hci_le_meta_evt+0x12c0/0x3b80 [ 351.310203][ T146] hci_le_meta_evt+0x12c0/0x3b80 [ 351.315152][ T146] ? hci_event_packet+0x2b0/0x12f0 [ 351.320293][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 351.326378][ T146] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 351.332039][ T146] ? mark_lock+0x94/0x320 [ 351.336390][ T146] ? mutex_unlock+0x10/0x10 [ 351.340923][ T146] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 351.346917][ T146] ? lock_chain_count+0x20/0x20 [ 351.351806][ T146] ? __rwlock_init+0x140/0x140 [ 351.356599][ T146] hci_event_packet+0xe05/0x12f0 [ 351.361647][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 351.366973][ T146] ? rcu_lock_release+0x20/0x20 [ 351.371859][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 351.377083][ T146] hci_rx_work+0x255/0xa10 [ 351.381626][ T146] process_one_work+0x863/0x1000 [ 351.386583][ T146] ? worker_detach_from_pool+0x240/0x240 [ 351.392348][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 351.397758][ T146] ? _raw_spin_lock_irq+0xab/0xe0 [ 351.402983][ T146] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 351.408388][ T146] ? wq_worker_running+0x97/0x170 [ 351.413443][ T146] worker_thread+0xaa8/0x12a0 [ 351.418370][ T146] kthread+0x436/0x520 [ 351.422471][ T146] ? rcu_lock_release+0x20/0x20 [ 351.427332][ T146] ? kthread_blkcg+0xd0/0xd0 [ 351.431951][ T146] ret_from_fork+0x1f/0x30 [ 351.436411][ T146] [ 351.439712][ T146] [ 351.442046][ T146] Allocated by task 6829: [ 351.446385][ T146] __kasan_kmalloc+0xb5/0xf0 [ 351.450998][ T146] __alloc_skb+0x22c/0x750 [ 351.455448][ T146] vhci_write+0xbc/0x450 [ 351.459802][ T146] vfs_write+0x712/0xd00 [ 351.464058][ T146] ksys_write+0x14d/0x250 [ 351.468801][ T146] do_syscall_64+0x4c/0xa0 [ 351.473263][ T146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 351.479169][ T146] [ 351.481498][ T146] The buggy address belongs to the object at ffff88807a783800 [ 351.481498][ T146] which belongs to the cache kmalloc-1k of size 1024 [ 351.495795][ T146] The buggy address is located 10 bytes to the right of [ 351.495795][ T146] 1024-byte region [ffff88807a783800, ffff88807a783c00) [ 351.510091][ T146] The buggy address belongs to the page: [ 351.515747][ T146] page:ffffea0001e9e000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a780 [ 351.525913][ T146] head:ffffea0001e9e000 order:3 compound_mapcount:0 compound_pincount:0 [ 351.534342][ T146] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 351.542351][ T146] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016841dc0 [ 351.551068][ T146] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 351.559975][ T146] page dumped because: kasan: bad access detected [ 351.566431][ T146] page_owner tracks the page as allocated [ 351.572840][ T146] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3870, ts 41484492317, free_ts 41447506156 [ 351.591986][ T146] get_page_from_freelist+0x1b77/0x1c60 [ 351.597607][ T146] __alloc_pages+0x1e1/0x470 [ 351.602223][ T146] new_slab+0xc0/0x4b0 [ 351.606332][ T146] ___slab_alloc+0x81e/0xdf0 [ 351.611055][ T146] __kmalloc+0x1cd/0x330 [ 351.615407][ T146] load_elf_binary+0x279/0x2890 [ 351.620277][ T146] bprm_execve+0xa92/0x17d0 [ 351.624801][ T146] do_execveat_common+0x51e/0x6d0 [ 351.629862][ T146] __x64_sys_execve+0x8e/0xa0 [ 351.634552][ T146] do_syscall_64+0x4c/0xa0 [ 351.638986][ T146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 351.645001][ T146] page last free stack trace: [ 351.649784][ T146] free_unref_page_prepare+0x637/0x6c0 [ 351.655259][ T146] free_unref_page+0x94/0x280 [ 351.659983][ T146] __unfreeze_partials+0x1a5/0x200 [ 351.665124][ T146] put_cpu_partial+0x12d/0x190 [ 351.669961][ T146] qlist_free_all+0x35/0x90 [ 351.674485][ T146] kasan_quarantine_reduce+0x150/0x160 [ 351.679967][ T146] __kasan_slab_alloc+0x2f/0xd0 [ 351.684973][ T146] slab_post_alloc_hook+0x4c/0x380 [ 351.690113][ T146] kmem_cache_alloc_trace+0x103/0x2a0 [ 351.695496][ T146] tomoyo_init_log+0x171/0x1e40 [ 351.700375][ T146] tomoyo_supervisor+0x34e/0x10d0 [ 351.705533][ T146] tomoyo_path_permission+0x25a/0x380 [ 351.711010][ T146] tomoyo_path_perm+0x3d9/0x510 [ 351.715876][ T146] security_inode_getattr+0xcf/0x120 [ 351.721177][ T146] vfs_getattr+0x26/0x3a0 [ 351.725519][ T146] __x64_sys_newfstat+0x104/0x1d0 [ 351.730575][ T146] [ 351.732909][ T146] Memory state around the buggy address: [ 351.738759][ T146] ffff88807a783b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 351.746841][ T146] ffff88807a783b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 351.755162][ T146] >ffff88807a783c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 351.763361][ T146] ^ [ 351.767715][ T146] ffff88807a783c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 351.775793][ T146] ffff88807a783d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 351.783951][ T146] ================================================================== [ 351.792298][ T146] Disabling lock debugging due to kernel taint [ 351.800396][ T146] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 351.807914][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Tainted: G B syzkaller #0 [ 351.816790][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 351.826961][ T146] Workqueue: hci4 hci_rx_work [ 351.831762][ T146] Call Trace: [ 351.835064][ T146] [ 351.838017][ T146] dump_stack_lvl+0x168/0x230 [ 351.842911][ T146] ? show_regs_print_info+0x20/0x20 [ 351.848263][ T146] ? load_image+0x3b0/0x3b0 [ 351.852806][ T146] panic+0x2c9/0x7f0 [ 351.856910][ T146] ? bpf_jit_dump+0xd0/0xd0 [ 351.861525][ T146] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 351.867446][ T146] ? _raw_spin_unlock+0x40/0x40 [ 351.872332][ T146] ? hci_le_meta_evt+0x12c0/0x3b80 [ 351.877476][ T146] check_panic_on_warn+0x80/0xa0 [ 351.882452][ T146] ? hci_le_meta_evt+0x12c0/0x3b80 [ 351.887592][ T146] end_report+0x6d/0xf0 [ 351.891774][ T146] kasan_report+0x102/0x130 [ 351.896307][ T146] ? hci_le_meta_evt+0x12c0/0x3b80 [ 351.901546][ T146] hci_le_meta_evt+0x12c0/0x3b80 [ 351.906512][ T146] ? hci_event_packet+0x2b0/0x12f0 [ 351.911712][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 351.917818][ T146] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 351.923579][ T146] ? mark_lock+0x94/0x320 [ 351.927941][ T146] ? mutex_unlock+0x10/0x10 [ 351.932650][ T146] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 351.938670][ T146] ? lock_chain_count+0x20/0x20 [ 351.943812][ T146] ? __rwlock_init+0x140/0x140 [ 351.948611][ T146] hci_event_packet+0xe05/0x12f0 [ 351.953583][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 351.958821][ T146] ? rcu_lock_release+0x20/0x20 [ 351.963836][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 351.969068][ T146] hci_rx_work+0x255/0xa10 [ 351.973623][ T146] process_one_work+0x863/0x1000 [ 351.978616][ T146] ? worker_detach_from_pool+0x240/0x240 [ 351.984293][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 351.989608][ T146] ? _raw_spin_lock_irq+0xab/0xe0 [ 351.994758][ T146] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 352.000174][ T146] ? wq_worker_running+0x97/0x170 [ 352.005410][ T146] worker_thread+0xaa8/0x12a0 [ 352.010393][ T146] kthread+0x436/0x520 [ 352.014579][ T146] ? rcu_lock_release+0x20/0x20 [ 352.019473][ T146] ? kthread_blkcg+0xd0/0xd0 [ 352.024093][ T146] ret_from_fork+0x1f/0x30 [ 352.028653][ T146] [ 352.032044][ T146] Kernel Offset: disabled [ 352.036398][ T146] Rebooting in 86400 seconds..