last executing test programs: 9.756849498s ago: executing program 0 (id=515): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) epoll_create1(0x80000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7fffefff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9.748303798s ago: executing program 3 (id=516): write(0xffffffffffffffff, &(0x7f0000000040)="3a0300001900255107", 0x9) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000f060101"], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 9.699697801s ago: executing program 1 (id=517): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 8.396897697s ago: executing program 1 (id=518): prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) brk(0x689d80000000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 8.238804527s ago: executing program 0 (id=519): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x814) 7.204853695s ago: executing program 1 (id=522): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) r2 = syz_open_dev$dri(0x0, 0x7, 0x200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0]}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680080001"], 0x30}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) r6 = syz_open_dev$swradio(&(0x7f0000001c40), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0xd70f, 0xb, 0x3, "5cb2117e734c8efecf179ff3f458bb23b09982cd0b2c6f8315a127237f901310", 0x4745504d}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) 7.13071845s ago: executing program 0 (id=523): recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x5}, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 7.007871189s ago: executing program 0 (id=525): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffffe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) unshare(0x4000280) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) 6.444394215s ago: executing program 2 (id=527): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$peekuser(0x3, r1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@cswp={0x58, 0x114, 0x7, {{0x5}, &(0x7f00000003c0)=0xdf, 0x0, 0x55, 0x5, 0x4, 0x8, 0x30, 0x2}}], 0x58}, 0x0) 5.972741466s ago: executing program 3 (id=528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x8, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.846302215s ago: executing program 0 (id=530): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000006180), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000d40), 0x2, 0x1) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000e00)={0x16, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r6, 0x8000000000000003, {0x0, 0x0, 0x4}, 0xfd}, 0x33) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@getchain={0x24, 0x66, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xffff, 0x3}, {0xfff1, 0x56e7de01af07971a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r4) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x200004, &(0x7f00000004c0)={[{@mblk_io_submit}, {@resgid}]}, 0x1, 0x554, &(0x7f0000000640)="$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") quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040), 0x4) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000400)={0x0, 0x0}) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x1) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 5.362035646s ago: executing program 3 (id=532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000002000100240012800b00010065727370616e00001400028006000200300000"], 0x44}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="e800000000000000000000e0fffa00ffffffff005b7c0a8c68c535ba43893db766722800"/46, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0xffffffff, 0x10100}, &(0x7f0000000480), &(0x7f0000000300)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0xc5f7}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) newfstatat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), 0x800) io_uring_enter(r4, 0x48e9, 0x0, 0x0, 0x0, 0x0) 4.24101884s ago: executing program 3 (id=534): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x814) 2.799555315s ago: executing program 3 (id=535): prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 2.433126289s ago: executing program 0 (id=536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) syz_open_dev$dri(0x0, 0x20000000, 0x40800) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.310086328s ago: executing program 4 (id=538): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fc", 0x57}], 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200013, 0xfffffffe, 0x8000, 0x525, 0x9}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) 2.071123324s ago: executing program 3 (id=539): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xca, 0x9b, 0xd4, 0x10, 0x1199, 0xb000, 0xa898, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x30, 0x2, 0x0, 0x17, 0xb5, 0x1b}}]}}]}}, 0x0) syz_usb_connect$uac1(0x3, 0x99, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0x40, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x10, 0x3, 0xfa, 0x8, "266ca9", "f8d8"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x7, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7, 0x0, 0x8, {0x7, 0x25, 0x1, 0x80, 0x9, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xce, 0x4, 0x2, 0x10, "7c9013"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x7, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x9, 0xb0, 0xa, {0x7, 0x25, 0x1, 0x0, 0x2, 0xc911}}}}}}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 1.989543919s ago: executing program 4 (id=540): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x181040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_emit_ethernet(0x6e, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x40402, 0x1) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1], 0x2d) 1.660961421s ago: executing program 1 (id=541): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b010202068105"], 0x16) 1.501510241s ago: executing program 2 (id=542): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x81, @value=0x327}) 1.439744375s ago: executing program 1 (id=543): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00"/151], 0x13c}}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 1.329093962s ago: executing program 2 (id=544): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x77359401}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 1.328874872s ago: executing program 4 (id=545): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 1.327164142s ago: executing program 1 (id=546): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000006180), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000d40), 0x2, 0x1) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000e00)={0x16, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r6, 0x8000000000000003, {0x0, 0x0, 0x4}, 0xfd}, 0x33) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@getchain={0x24, 0x66, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xffff, 0x3}, {0xfff1, 0x56e7de01af07971a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r4) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x200004, &(0x7f00000004c0)={[{@mblk_io_submit}, {@resgid}]}, 0x1, 0x554, &(0x7f0000000640)="$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") quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040), 0x4) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000400)={0x0, 0x0}) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x1) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.228745979s ago: executing program 2 (id=547): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x814) 1.200228681s ago: executing program 4 (id=548): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) unshare(0x26000400) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 231.095745ms ago: executing program 2 (id=549): prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 121.597472ms ago: executing program 4 (id=550): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1) capset(0x0, &(0x7f0000000040)={0x200000, 0x200013, 0xfffffffe, 0x8000, 0x525, 0x9}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) 37.590927ms ago: executing program 2 (id=551): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) r2 = syz_open_dev$dri(0x0, 0x7, 0x200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0]}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) r6 = syz_open_dev$swradio(&(0x7f0000001c40), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0xd70f, 0xb, 0x3, "5cb2117e734c8efecf179ff3f458bb23b09982cd0b2c6f8315a127237f901310", 0x4745504d}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) 0s ago: executing program 4 (id=552): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) shmat(r4, &(0x7f0000000000/0x2000)=nil, 0x5000) shmctl$SHM_LOCK(r4, 0xb) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]) shmctl$SHM_UNLOCK(r4, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.29' (ED25519) to the list of known hosts. [ 64.259763][ T4172] cgroup: Unknown subsys name 'net' [ 64.409085][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.880551][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.415426][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 67.439674][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 67.463333][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 67.541480][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 67.551143][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 67.588277][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.595701][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.605024][ T4184] device bridge_slave_0 entered promiscuous mode [ 67.619861][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.627453][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.636025][ T4184] device bridge_slave_1 entered promiscuous mode [ 67.733331][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.746044][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.758592][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.766834][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.775539][ T4185] device bridge_slave_0 entered promiscuous mode [ 67.817156][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.824755][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.833360][ T4185] device bridge_slave_1 entered promiscuous mode [ 67.840504][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.848170][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.856395][ T4191] device bridge_slave_0 entered promiscuous mode [ 67.879147][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.886477][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.894859][ T4194] device bridge_slave_0 entered promiscuous mode [ 67.911029][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.918269][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.926516][ T4191] device bridge_slave_1 entered promiscuous mode [ 67.943780][ T4184] team0: Port device team_slave_0 added [ 67.950188][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.957854][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.966189][ T4194] device bridge_slave_1 entered promiscuous mode [ 67.989350][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.997108][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.006586][ T4183] device bridge_slave_0 entered promiscuous mode [ 68.017065][ T4184] team0: Port device team_slave_1 added [ 68.041459][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.059722][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.067233][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.075580][ T4183] device bridge_slave_1 entered promiscuous mode [ 68.099126][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.110616][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.129515][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.136577][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.163337][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.176989][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.196254][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.215088][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.222095][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.248606][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.261418][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.288021][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.312860][ T4185] team0: Port device team_slave_0 added [ 68.339120][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.350594][ T4185] team0: Port device team_slave_1 added [ 68.359467][ T4194] team0: Port device team_slave_0 added [ 68.368158][ T4194] team0: Port device team_slave_1 added [ 68.384516][ T4191] team0: Port device team_slave_0 added [ 68.434491][ T4191] team0: Port device team_slave_1 added [ 68.464432][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.471422][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.498476][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.514908][ T4184] device hsr_slave_0 entered promiscuous mode [ 68.522803][ T4184] device hsr_slave_1 entered promiscuous mode [ 68.539543][ T4183] team0: Port device team_slave_0 added [ 68.546166][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.553499][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.581126][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.594404][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.601747][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.628585][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.652290][ T4183] team0: Port device team_slave_1 added [ 68.658890][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.666258][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.693394][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.706037][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.714271][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.741666][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.770516][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.777956][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.806863][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.858665][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.865762][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.891788][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.928789][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.936058][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.963687][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.983289][ T4186] Bluetooth: hci1: command 0x0409 tx timeout [ 68.983289][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 69.007255][ T4194] device hsr_slave_0 entered promiscuous mode [ 69.015986][ T4194] device hsr_slave_1 entered promiscuous mode [ 69.023062][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.031188][ T4194] Cannot create hsr debugfs directory [ 69.062768][ T4186] Bluetooth: hci3: command 0x0409 tx timeout [ 69.065803][ T4185] device hsr_slave_0 entered promiscuous mode [ 69.069233][ T4186] Bluetooth: hci4: command 0x0409 tx timeout [ 69.082765][ T4186] Bluetooth: hci2: command 0x0409 tx timeout [ 69.082986][ T4185] device hsr_slave_1 entered promiscuous mode [ 69.097083][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.105109][ T4185] Cannot create hsr debugfs directory [ 69.135758][ T4191] device hsr_slave_0 entered promiscuous mode [ 69.142926][ T4191] device hsr_slave_1 entered promiscuous mode [ 69.149590][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.157408][ T4191] Cannot create hsr debugfs directory [ 69.203441][ T4183] device hsr_slave_0 entered promiscuous mode [ 69.210904][ T4183] device hsr_slave_1 entered promiscuous mode [ 69.218388][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.226426][ T4183] Cannot create hsr debugfs directory [ 69.526770][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.538470][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.557864][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.573380][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.593159][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.603246][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.619704][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.640741][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.708188][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.719343][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.730795][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.760654][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.815910][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.829972][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.842640][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.857266][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.919422][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.970303][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.980943][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.991285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.002930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.021686][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.034054][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.044683][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.064121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.075355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.085237][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.093080][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.111209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.120214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.134652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.144125][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.151487][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.159687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.169246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.181296][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.211977][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.226307][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.251331][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.259697][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.270830][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.280750][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.291643][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.308110][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.318110][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.328134][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.337182][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.346208][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.354720][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.364272][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.374109][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.430378][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.439973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.453467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.462247][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.469562][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.479947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.490468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.500197][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.507796][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.518966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.545803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.580337][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.590429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.608142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.618172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.627356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.647810][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.662297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.670479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.679056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.689303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.699137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.708397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.718255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.726556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.735652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.746155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.755101][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.762434][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.770532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.781008][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.793242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.801959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.824961][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.837323][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.846401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.857658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.868649][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.876268][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.886448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.894575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.903370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.938590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.964927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.977864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.990861][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.998389][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.013837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.041136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.062581][ T4251] Bluetooth: hci1: command 0x041b tx timeout [ 71.068862][ T4251] Bluetooth: hci0: command 0x041b tx timeout [ 71.076014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.085017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.094236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.103716][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.111191][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.120596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.130370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.139937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.142788][ T4242] Bluetooth: hci2: command 0x041b tx timeout [ 71.148615][ T4251] Bluetooth: hci4: command 0x041b tx timeout [ 71.160721][ T4251] Bluetooth: hci3: command 0x041b tx timeout [ 71.174878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.201966][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.233987][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.260418][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.270415][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.280601][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.289825][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.300130][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.309107][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.361095][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.369270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.380230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.391487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.399468][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.408342][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.410150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.430854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.440232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.450175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.459118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.468245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.477131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.508123][ T4184] device veth0_vlan entered promiscuous mode [ 71.521832][ T4184] device veth1_vlan entered promiscuous mode [ 71.539230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.550909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.567070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.579496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.588903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.598684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.607579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.616195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.629687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.648945][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.658405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.669072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.680080][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.687246][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.735663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.748533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.761684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.776592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.790286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.805444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.813719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.822938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.831335][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.838466][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.848308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.862013][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.877879][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.895110][ T4184] device veth0_macvtap entered promiscuous mode [ 71.902731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.911657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.933566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.959209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.989320][ T4184] device veth1_macvtap entered promiscuous mode [ 72.020384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.029364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.040709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.050509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.059705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.070152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.079653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.089372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.099965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.111913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.138191][ T4191] device veth0_vlan entered promiscuous mode [ 72.157821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.168219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.178626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.188481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.204342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.215329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.224541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.234067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.246383][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.258834][ T4194] device veth0_vlan entered promiscuous mode [ 72.271844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.282023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.291384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.300919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.310037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.317745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.330417][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.341424][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.359725][ T4191] device veth1_vlan entered promiscuous mode [ 72.381077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.391402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.401452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.410577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.420561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.444412][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.480687][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.494142][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.508232][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.517728][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.530173][ T4194] device veth1_vlan entered promiscuous mode [ 72.548166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.559073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.568576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.579200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.610283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.620210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.630029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.641290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.651630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.660730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.676741][ T4185] device veth0_vlan entered promiscuous mode [ 72.705329][ T4191] device veth0_macvtap entered promiscuous mode [ 72.754817][ T4185] device veth1_vlan entered promiscuous mode [ 72.769975][ T4191] device veth1_macvtap entered promiscuous mode [ 72.780457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.789584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.798072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.807337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.816568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.831554][ T4194] device veth0_macvtap entered promiscuous mode [ 72.879822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.891832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.901117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.911985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.947105][ T4194] device veth1_macvtap entered promiscuous mode [ 72.957241][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.968528][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.983527][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.995968][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.020495][ T4185] device veth0_macvtap entered promiscuous mode [ 73.033553][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.042062][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.051591][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.062276][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.072265][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.083090][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.094082][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.106001][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.117504][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.126287][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.135517][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.142630][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 73.145616][ T4251] Bluetooth: hci0: command 0x040f tx timeout [ 73.157281][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.170650][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.180221][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.182148][ T4185] device veth1_macvtap entered promiscuous mode [ 73.203280][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.211593][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.220313][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.229936][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.238784][ T4251] Bluetooth: hci3: command 0x040f tx timeout [ 73.239664][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.245266][ T4251] Bluetooth: hci4: command 0x040f tx timeout [ 73.259817][ T4251] Bluetooth: hci2: command 0x040f tx timeout [ 73.281277][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.294554][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.306548][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.319256][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.330934][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.357645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.366808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.376284][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.386494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.397386][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.409219][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.421096][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.435036][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.447818][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.461904][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.473354][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.485722][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.496850][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.507311][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.518674][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.530198][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.540362][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.554256][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.565006][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.575601][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.585722][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.596736][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.608042][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.627726][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.638276][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.648140][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.659153][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.668600][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.677337][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.691843][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.701335][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.711832][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.723803][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.744250][ T1213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.752833][ T1213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.781890][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.793925][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.803084][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.812103][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.822989][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.865743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.894083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.909398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.919603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.932590][ T4183] device veth0_vlan entered promiscuous mode [ 73.970261][ T4183] device veth1_vlan entered promiscuous mode [ 73.980606][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.996442][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.093007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.106228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.115042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.141619][ T4183] device veth0_macvtap entered promiscuous mode [ 74.159897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.169539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.185902][ T4183] device veth1_macvtap entered promiscuous mode [ 74.204617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.214768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.224484][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.226494][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.245520][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.271560][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.283957][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.294685][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.302837][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.317337][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.330807][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.341641][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.352982][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.363834][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.376433][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.400156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.411616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.420618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.430792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.442841][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.450405][ T23] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 74.459577][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.473279][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.484661][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.495214][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.506363][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.516812][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.527446][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.541327][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.557318][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.569192][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.600996][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.610651][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.619674][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.630020][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.662995][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.670585][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.671604][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.683597][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.746765][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.774490][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.785383][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.798024][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.807047][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.833057][ T23] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 74.849639][ T1213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.874065][ T23] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 74.893490][ T23] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 74.907489][ T1213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.921162][ T23] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 74.962501][ T23] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 74.974692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.977818][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.025789][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.038155][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.051109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.067434][ T4306] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.202807][ T23] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 75.218494][ T23] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 75.233513][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 75.238907][ T23] usb 5-1: Product: syz [ 75.240876][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 75.245910][ T23] usb 5-1: Manufacturer: syz [ 75.256817][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.264770][ T23] usb 5-1: SerialNumber: syz [ 75.313135][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 75.314585][ T23] usb 5-1: config 0 descriptor?? [ 75.327112][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 75.345043][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 75.355145][ T4298] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 75.395606][ T23] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 75.424877][ T23] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 75.502476][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 75.622929][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.646109][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.658516][ T21] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 75.690998][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.861999][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 75.931272][ T21] usb 4-1: config 0 descriptor?? [ 76.090969][ T21] hub 4-1:0.0: USB hub found [ 76.182923][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 76.192598][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 76.202659][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 76.212234][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 76.222360][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 76.231977][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 76.241518][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 76.251081][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 76.260561][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 76.318485][ T4242] usb 5-1: USB disconnect, device number 2 [ 76.433492][ T21] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 76.510459][ T4242] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 76.741177][ T21] usbhid 4-1:0.0: can't add hid device: -71 [ 76.761453][ T21] usbhid: probe of 4-1:0.0 failed with error -71 [ 76.996509][ T21] usb 4-1: USB disconnect, device number 2 [ 77.452687][ T4242] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.852446][ T4242] usb 3-1: Using ep0 maxpacket: 32 [ 77.869719][ T4341] loop3: detected capacity change from 0 to 8 [ 77.912653][ T2304] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.934110][ T4341] ======================================================= [ 77.934110][ T4341] WARNING: The mand mount option has been deprecated and [ 77.934110][ T4341] and is ignored by this kernel. Remove the mand [ 77.934110][ T4341] option from the mount to silence this warning. [ 77.934110][ T4341] ======================================================= [ 77.976402][ T4242] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 77.991602][ T4242] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 78.045487][ T4242] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 78.094935][ T4242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.234026][ T26] audit: type=1800 audit(1759901141.619:2): pid=4351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.15" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 78.312881][ T4242] usb 3-1: config 0 descriptor?? [ 78.332587][ T2304] usb 1-1: Using ep0 maxpacket: 8 [ 78.730132][ T4351] syz.3.15 (4351) used greatest stack depth: 20768 bytes left [ 78.873446][ T2304] usb 1-1: unable to get BOS descriptor or descriptor too short [ 78.904438][ T4242] usbhid 3-1:0.0: can't add hid device: -71 [ 78.910651][ T4242] usbhid: probe of 3-1:0.0 failed with error -71 [ 78.964840][ T4242] usb 3-1: USB disconnect, device number 2 [ 78.982532][ T2304] usb 1-1: config 4 interface 0 has no altsetting 0 [ 80.025745][ T2304] usb 1-1: string descriptor 0 read error: -22 [ 80.032141][ T2304] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 80.042751][ T2304] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 80.079675][ T2304] usb 1-1: can't set config #4, error -71 [ 80.103588][ T2304] usb 1-1: USB disconnect, device number 2 [ 80.571785][ T4387] atomic_op ffff88807d3e5198 conn xmit_atomic 0000000000000000 [ 81.311038][ T4396] loop3: detected capacity change from 0 to 8 [ 82.424548][ T26] audit: type=1800 audit(1759901145.809:3): pid=4405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.33" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 83.082429][ T2304] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.482509][ T2304] usb 4-1: Using ep0 maxpacket: 8 [ 83.661649][ T4432] atomic_op ffff888022c5d198 conn xmit_atomic 0000000000000000 [ 84.652342][ C0] sched: RT throttling activated [ 84.676350][ T4439] loop1: detected capacity change from 0 to 8 [ 85.652997][ T2304] usb 4-1: unable to get BOS descriptor or descriptor too short [ 85.746186][ T26] audit: type=1800 audit(1759901149.129:4): pid=4454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.46" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 86.003935][ T2304] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 86.011767][ T2304] usb 4-1: can't read configurations, error -71 [ 86.022428][ T4337] Bluetooth: hci2: command 0x0401 tx timeout [ 86.183839][ T4461] netlink: 32 bytes leftover after parsing attributes in process `syz.3.54'. [ 86.236910][ T4469] tipc: Started in network mode [ 86.242199][ T4469] tipc: Node identity 5e66a727457e, cluster identity 4711 [ 86.380387][ T4469] tipc: Enabled bearer , priority 0 [ 86.387176][ T4469] tipc: Resetting bearer [ 86.572974][ T4467] tipc: Disabling bearer [ 86.602775][ T4476] atomic_op ffff88801fd85998 conn xmit_atomic 0000000000000000 [ 86.987269][ T1111] cfg80211: failed to load regulatory.db [ 88.186212][ T4488] loop4: detected capacity change from 0 to 8 [ 88.484160][ T26] audit: type=1800 audit(1759901151.869:5): pid=4496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.63" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 88.602444][ T2304] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.023080][ T7] Bluetooth: hci2: command 0x0401 tx timeout [ 89.252416][ T2304] usb 1-1: Using ep0 maxpacket: 8 [ 89.412632][ T2304] usb 1-1: unable to get BOS descriptor or descriptor too short [ 89.492644][ T2304] usb 1-1: config 4 interface 0 has no altsetting 0 [ 89.732765][ T2304] usb 1-1: string descriptor 0 read error: -22 [ 89.741989][ T2304] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 89.773407][ T2304] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 89.855273][ T2304] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 89.887741][ T2304] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 89.919894][ T2304] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 89.947307][ T2304] usb 1-1: media controller created [ 90.023216][ T2304] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.149943][ T4519] tipc: Started in network mode [ 90.159529][ T4519] tipc: Node identity d28c7e6ce442, cluster identity 4711 [ 90.179277][ T4519] tipc: Enabled bearer , priority 0 [ 90.216432][ T4519] tipc: Resetting bearer [ 90.238090][ T4518] tipc: Disabling bearer [ 91.102673][ T2304] zl10353_read_register: readreg error (reg=127, ret==0) [ 91.221333][ T4536] loop3: detected capacity change from 0 to 8 [ 91.427920][ T2304] usb 1-1: USB disconnect, device number 3 [ 91.700462][ T26] audit: type=1800 audit(1759901155.079:6): pid=4537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.76" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 92.699533][ T4560] tipc: Enabled bearer , priority 0 [ 92.741421][ T4560] tipc: Resetting bearer [ 92.806733][ T4559] tipc: Disabling bearer [ 93.210573][ T4568] capability: warning: `syz.2.87' uses deprecated v2 capabilities in a way that may be insecure [ 93.644005][ T4582] loop4: detected capacity change from 0 to 8 [ 93.862920][ T4337] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.875788][ T26] audit: type=1800 audit(1759901157.259:7): pid=4587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.92" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 94.659255][ T4593] tipc: Enabled bearer , priority 0 [ 94.672518][ T4337] usb 3-1: Using ep0 maxpacket: 8 [ 94.684869][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.716145][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.744004][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.798430][ T4593] tipc: Resetting bearer [ 94.825987][ T4592] tipc: Disabling bearer [ 94.862920][ T4337] usb 3-1: unable to get BOS descriptor or descriptor too short [ 94.944196][ T4337] usb 3-1: config 4 interface 0 has no altsetting 0 [ 95.222789][ T4337] usb 3-1: string descriptor 0 read error: -22 [ 95.231155][ T4337] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 95.267937][ T4337] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 95.325020][ T4337] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 95.344980][ T4337] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 95.412444][ T4337] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 95.445854][ T4337] usb 3-1: media controller created [ 95.465020][ T4621] loop1: detected capacity change from 0 to 8 [ 95.534080][ T4337] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.796508][ T26] audit: type=1800 audit(1759901159.179:8): pid=4627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.106" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 96.268960][ T26] audit: type=1326 audit(1759901159.649:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4637 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcf515ec9 code=0x7ffc0000 [ 96.347846][ T26] audit: type=1326 audit(1759901159.679:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4637 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fddcf515ec9 code=0x7ffc0000 [ 96.378511][ T26] audit: type=1326 audit(1759901159.679:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4637 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcf515ec9 code=0x7ffc0000 [ 96.612549][ T4337] zl10353_read_register: readreg error (reg=127, ret==0) [ 96.759337][ T4337] usb 3-1: USB disconnect, device number 3 [ 97.612577][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 97.647754][ T4665] loop4: detected capacity change from 0 to 8 [ 97.679219][ T4640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.112'. [ 97.963110][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 100.058895][ T26] audit: type=1800 audit(1759901163.439:12): pid=4671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.121" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 100.122734][ T7] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 100.204026][ T7] usb 3-1: can't read configurations, error -71 [ 101.552696][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 101.852614][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 101.942673][ T2304] Bluetooth: hci5: command 0x1003 tx timeout [ 101.954097][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 102.012701][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 102.196060][ T7] usb 3-1: config 4 interface 0 has no altsetting 0 [ 102.482599][ T7] usb 3-1: string descriptor 0 read error: -22 [ 102.499626][ T7] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 102.528900][ T7] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 102.615052][ T7] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 102.640792][ T7] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 102.667327][ T7] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 102.685123][ T7] usb 3-1: media controller created [ 102.746804][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.793143][ T7] zl10353_read_register: readreg error (reg=127, ret==0) [ 104.755373][ T4674] Bluetooth: hci5: command 0x1001 tx timeout [ 104.761742][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 104.802695][ T7] usb 3-1: USB disconnect, device number 6 [ 106.614390][ T4728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.136'. [ 106.837890][ T7] Bluetooth: hci5: command 0x1009 tx timeout [ 106.872699][ T7] Bluetooth: hci2: command 0x0401 tx timeout [ 107.793585][ T4763] atomic_op ffff888074797998 conn xmit_atomic 0000000000000000 [ 109.818779][ T4781] tipc: Enabling of bearer rejected, failed to enable media [ 110.723568][ T4802] loop2: detected capacity change from 0 to 7 [ 110.758822][ T4802] Dev loop2: unable to read RDB block 7 [ 110.936827][ T4802] loop2: unable to read partition table [ 110.972681][ T4802] loop2: partition table beyond EOD, truncated [ 112.002732][ T4802] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 112.120006][ T4800] netlink: 16 bytes leftover after parsing attributes in process `syz.1.157'. [ 113.599902][ T4827] tipc: Enabling of bearer rejected, failed to enable media [ 113.775741][ T4835] netlink: 'syz.2.168': attribute type 8 has an invalid length. [ 113.822188][ T4838] loop1: detected capacity change from 0 to 8 [ 114.293343][ T26] audit: type=1800 audit(1759901177.679:13): pid=4845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.169" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 115.666063][ T4874] (unnamed net_device) (uninitialized): peer notification delay (65537) is not a multiple of miimon (100), value rounded to 65500 ms [ 115.796390][ T4878] tipc: Enabling of bearer rejected, failed to enable media [ 116.262484][ T4674] Bluetooth: hci5: command 0x1003 tx timeout [ 116.268796][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 118.352555][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 118.359019][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 118.430708][ T4910] fuse: Unknown parameter 'group_i00000000000000000000' [ 118.442427][ T1111] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.802678][ T1111] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.823861][ T1111] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 118.849482][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.868442][ T1111] usb 3-1: config 0 descriptor?? [ 118.924724][ T1111] pwc: Askey VC010 type 2 USB webcam detected. [ 118.959972][ T4923] tipc: Enabling of bearer rejected, failed to enable media [ 119.362516][ T1111] pwc: recv_control_msg error -32 req 02 val 2b00 [ 119.472742][ T4674] Bluetooth: hci2: command 0x0401 tx timeout [ 119.624682][ T1111] pwc: recv_control_msg error -71 req 02 val 2c00 [ 119.672556][ T1111] pwc: recv_control_msg error -71 req 04 val 1000 [ 119.702726][ T1111] pwc: recv_control_msg error -71 req 04 val 1300 [ 119.732582][ T1111] pwc: recv_control_msg error -71 req 04 val 1400 [ 119.761031][ T1111] pwc: recv_control_msg error -71 req 02 val 2000 [ 119.783034][ T1111] pwc: recv_control_msg error -71 req 02 val 2100 [ 119.802584][ T1111] pwc: recv_control_msg error -71 req 04 val 1500 [ 119.832492][ T1111] pwc: recv_control_msg error -71 req 02 val 2500 [ 119.852546][ T1111] pwc: recv_control_msg error -71 req 02 val 2400 [ 119.892474][ T1111] pwc: recv_control_msg error -71 req 02 val 2600 [ 119.912548][ T1111] pwc: recv_control_msg error -71 req 02 val 2900 [ 119.942717][ T1111] pwc: recv_control_msg error -71 req 02 val 2800 [ 119.970536][ T1111] pwc: recv_control_msg error -71 req 04 val 1100 [ 120.086263][ T1111] pwc: recv_control_msg error -71 req 04 val 1200 [ 120.273449][ T1111] pwc: Registered as video103. [ 120.475514][ T2304] Bluetooth: hci5: command 0x1009 tx timeout [ 120.503704][ T1111] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 120.504271][ T4959] tipc: Enabling of bearer rejected, failed to enable media [ 121.411555][ T1111] usb 3-1: USB disconnect, device number 7 [ 121.766346][ T4980] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.208'. [ 121.963278][ T4987] binder: 4986:4987 ioctl c018620c 2000000000c0 returned -1 [ 122.342626][ T2304] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 122.755914][ T2304] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 122.780053][ T2304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.912971][ T2304] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 122.942357][ T2304] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 122.970615][ T2304] usb 4-1: Manufacturer: syz [ 122.984674][ T2304] usb 4-1: config 0 descriptor?? [ 123.122431][ T2304] rc_core: IR keymap rc-hauppauge not found [ 123.140098][ T2304] Registered IR keymap rc-empty [ 123.155087][ T2304] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 123.194133][ T2304] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14 [ 123.522514][ C0] igorplugusb 4-1:0.0: receive overflow invalid: 44 [ 123.850979][ T4337] usb 4-1: USB disconnect, device number 5 [ 129.477906][ T5058] loop0: detected capacity change from 0 to 8 [ 130.741210][ T26] audit: type=1800 audit(1759901194.119:14): pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.233" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 130.947699][ T5072] tipc: Enabling of bearer rejected, failed to enable media [ 132.803767][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 132.810673][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 132.828521][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.835424][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.165089][ T5107] atomic_op ffff888060268998 conn xmit_atomic 0000000000000000 [ 134.075318][ T5119] loop2: detected capacity change from 0 to 1024 [ 134.310849][ T5119] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 134.587672][ T5119] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 134.781341][ T5126] loop1: detected capacity change from 0 to 128 [ 134.831251][ T4256] Bluetooth: hci5: command 0x1001 tx timeout [ 134.862859][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 136.912846][ T4256] Bluetooth: hci5: command 0x1009 tx timeout [ 138.159642][ T5162] loop3: detected capacity change from 0 to 128 [ 138.772616][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 139.602401][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 139.900188][ T5183] loop3: detected capacity change from 0 to 1024 [ 139.991474][ T5183] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 139.999266][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 140.028869][ T5183] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 140.103323][ T7] usb 3-1: config 4 interface 0 has no altsetting 0 [ 140.402874][ T7] usb 3-1: string descriptor 0 read error: -22 [ 140.418202][ T7] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 140.431797][ T7] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 140.502411][ T7] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 140.522065][ T7] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 140.539722][ T7] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 140.547847][ T7] usb 3-1: media controller created [ 140.580731][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.493570][ T5211] loop4: detected capacity change from 0 to 128 [ 141.522496][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 142.711352][ T7] zl10353_read_register: readreg error (reg=127, ret==0) [ 142.824505][ T7] usb 3-1: USB disconnect, device number 8 [ 142.839292][ T26] audit: type=1326 audit(1759901206.219:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7534c2eec9 code=0x7ffc0000 [ 142.863446][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 142.977238][ T26] audit: type=1326 audit(1759901206.219:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7534c2eec9 code=0x7ffc0000 [ 143.003033][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.034790][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.082153][ T26] audit: type=1326 audit(1759901206.219:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7534c2eec9 code=0x7ffc0000 [ 143.082655][ T1108] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 143.169080][ T26] audit: type=1326 audit(1759901206.219:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7534c2eec9 code=0x7ffc0000 [ 143.285574][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.300729][ T26] audit: type=1326 audit(1759901206.219:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7534c2ef03 code=0x7ffc0000 [ 143.323271][ T1108] usb 2-1: config 0 descriptor?? [ 143.328938][ T26] audit: type=1326 audit(1759901206.219:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7534c2ef03 code=0x7ffc0000 [ 144.383561][ T26] audit: type=1326 audit(1759901206.219:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7534c2eec9 code=0x7ffc0000 [ 144.456261][ T5244] loop0: detected capacity change from 0 to 128 [ 144.488155][ T1108] usbhid 2-1:0.0: can't add hid device: -71 [ 144.495309][ T1108] usbhid: probe of 2-1:0.0 failed with error -71 [ 144.511674][ T5242] loop1: detected capacity change from 0 to 8 [ 144.747629][ T1108] usb 2-1: USB disconnect, device number 2 [ 144.787061][ T5228] netlink: 'syz.3.284': attribute type 4 has an invalid length. [ 145.822696][ T26] audit: type=1800 audit(1759901209.209:22): pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.289" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 145.842963][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.661984][ T5258] atomic_op ffff888022f3b998 conn xmit_atomic 0000000000000000 [ 146.772514][ T4337] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 147.312761][ T4337] usb 4-1: Using ep0 maxpacket: 8 [ 147.351555][ T5262] loop0: detected capacity change from 0 to 1024 [ 147.404292][ T5262] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 147.454134][ T5262] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 147.492714][ T4337] usb 4-1: unable to get BOS descriptor or descriptor too short [ 147.593055][ T4337] usb 4-1: config 4 interface 0 has no altsetting 0 [ 147.859054][ T5276] syz.2.301 sent an empty control message without MSG_MORE. [ 147.872494][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 147.881451][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 147.982445][ T4337] usb 4-1: string descriptor 0 read error: -22 [ 147.990452][ T5281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'. [ 147.994798][ T4337] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 148.010406][ T4337] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 148.066284][ T4337] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 148.079637][ T4337] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 148.093989][ T4337] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 148.101399][ T4337] usb 4-1: media controller created [ 148.120252][ T4337] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.212985][ T5286] loop2: detected capacity change from 0 to 512 [ 148.240467][ T5286] EXT4-fs (loop2): Unrecognized mount option "seclabel" or missing value [ 149.458556][ T4337] zl10353_read_register: readreg error (reg=127, ret==0) [ 149.524723][ T4337] usb 4-1: USB disconnect, device number 6 [ 149.531530][ T5292] fuse: Unknown parameter 'group_i00000000000000000000' [ 149.966992][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 150.156547][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 150.774135][ T5307] loop0: detected capacity change from 0 to 128 [ 152.506498][ T1108] Bluetooth: hci5: command 0x1009 tx timeout [ 152.643715][ T5317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.314'. [ 152.907037][ T5303] netlink: 'syz.4.310': attribute type 4 has an invalid length. [ 155.139085][ T5334] loop4: detected capacity change from 0 to 512 [ 155.177506][ T5334] EXT4-fs (loop4): Unrecognized mount option "seclabel" or missing value [ 157.177909][ T5338] fuse: Unknown parameter 'group_id00000000000000000000' [ 158.327125][ T5344] loop2: detected capacity change from 0 to 1024 [ 158.347059][ T5352] loop0: detected capacity change from 0 to 128 [ 158.413219][ T5344] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 158.424044][ T5344] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 159.589838][ T5369] loop4: detected capacity change from 0 to 8 [ 159.621809][ T5371] loop1: detected capacity change from 0 to 512 [ 159.683599][ T5371] EXT4-fs (loop1): Unrecognized mount option "seclabel" or missing value [ 162.111737][ T5367] netlink: 'syz.0.329': attribute type 4 has an invalid length. [ 162.210727][ T26] audit: type=1800 audit(1759901225.589:23): pid=5377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.331" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 162.237649][ T5387] fuse: Unknown parameter 'group_id00000000000000000000' [ 162.587505][ T5397] loop0: detected capacity change from 0 to 128 [ 162.628628][ T5399] netlink: 180 bytes leftover after parsing attributes in process `syz.1.340'. [ 162.817966][ T5399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.340'. [ 163.637942][ T4256] Bluetooth: hci5: command 0x1003 tx timeout [ 163.645550][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 163.897773][ T5414] loop3: detected capacity change from 0 to 1024 [ 163.941419][ T5414] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 163.992525][ T5414] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 165.058211][ T5420] loop0: detected capacity change from 0 to 512 [ 165.113663][ T5420] EXT4-fs (loop0): Unrecognized mount option "seclabel" or missing value [ 166.390170][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 166.686097][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 167.368139][ T5422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.347'. [ 167.554817][ T5437] loop3: detected capacity change from 0 to 128 [ 167.571500][ T5439] fuse: Unknown parameter 'group_id00000000000000000000' [ 168.882661][ T4256] Bluetooth: hci5: command 0x1009 tx timeout [ 169.309982][ T5452] atomic_op ffff888024532198 conn xmit_atomic 0000000000000000 [ 170.488395][ T5472] loop1: detected capacity change from 0 to 1024 [ 170.604935][ T5472] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 170.631052][ T5472] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 171.155627][ T5487] xt_socket: unknown flags 0x50 [ 173.020212][ T5495] loop4: detected capacity change from 0 to 128 [ 174.432555][ T5497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.370'. [ 176.162478][ T5510] netlink: 104 bytes leftover after parsing attributes in process `syz.0.371'. [ 177.834883][ T5530] loop2: detected capacity change from 0 to 128 [ 177.881555][ T5532] process 'syz.0.383' launched '/dev/fd/7' with NULL argv: empty string added [ 178.954765][ T5540] loop1: detected capacity change from 0 to 1024 [ 179.061866][ T5540] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 179.073535][ T5540] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 181.339410][ T5576] syz.2.398[5576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.339518][ T5576] syz.2.398[5576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.527910][ T5581] tmpfs: Unknown parameter 'quota' [ 184.847237][ T5602] device syzkaller0 entered promiscuous mode [ 185.964197][ T5619] loop2: detected capacity change from 0 to 1024 [ 186.046938][ T5619] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 186.130706][ T5619] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 187.517618][ T5644] syz.2.420[5644] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.517747][ T5644] syz.2.420[5644] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.533246][ T5662] device syzkaller0 entered promiscuous mode [ 190.541381][ T5673] loop3: detected capacity change from 0 to 8 [ 190.787651][ T5679] loop4: detected capacity change from 0 to 1024 [ 190.898661][ T26] audit: type=1800 audit(1759901254.279:24): pid=5681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.429" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 190.926779][ T5679] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 190.935303][ T5679] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 191.222588][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 191.242698][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 191.344768][ T4256] Bluetooth: hci2: command 0x0406 tx timeout [ 191.351982][ T4256] Bluetooth: hci4: command 0x0406 tx timeout [ 192.125880][ T4256] Bluetooth: hci0: command 0x0406 tx timeout [ 192.130261][ T21] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 192.412405][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 192.612518][ T21] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 192.620633][ T21] usb 3-1: config 0 has no interface number 0 [ 193.725560][ T21] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 193.745546][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.761666][ T21] usb 3-1: Product: syz [ 193.766419][ T21] usb 3-1: Manufacturer: syz [ 193.771464][ T21] usb 3-1: SerialNumber: syz [ 193.968040][ T21] usb 3-1: config 0 descriptor?? [ 194.283931][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.296552][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.582698][ T21] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 194.607977][ T21] usb 3-1: selecting invalid altsetting 1 [ 194.627655][ T21] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 194.655681][ T5709] device syzkaller0 entered promiscuous mode [ 194.808903][ T21] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 194.820509][ T21] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 194.835681][ T21] usb 3-1: media controller created [ 194.864871][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.972518][ T21] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 194.991784][ T21] zl10353_read_register: readreg error (reg=127, ret==-71) [ 195.032583][ T21] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 195.115855][ T21] usb 3-1: USB disconnect, device number 9 [ 196.348332][ T5738] vivid-008: ================= START STATUS ================= [ 196.396819][ T5738] vivid-008: Enable Output Cropping: true [ 196.403311][ T5738] vivid-008: Enable Output Composing: true [ 196.409437][ T5738] vivid-008: Enable Output Scaler: true [ 196.416420][ T5738] vivid-008: Tx RGB Quantization Range: Automatic [ 196.423529][ T5738] vivid-008: Transmit Mode: HDMI [ 196.428964][ T5738] vivid-008: Display Present: true inactive [ 197.215196][ T5738] vivid-008: Hotplug Present: 0x00000001 [ 197.220931][ T5738] vivid-008: RxSense Present: 0x00000001 [ 197.293984][ T5738] vivid-008: EDID Present: 0x00000001 [ 197.299525][ T5738] vivid-008: ================== END STATUS ================== [ 197.978609][ T5739] loop2: detected capacity change from 0 to 1024 [ 198.040260][ T5739] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 198.052713][ T5739] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 198.059114][ T5747] device syzkaller0 entered promiscuous mode [ 198.121838][ T5754] atomic_op ffff88802b9f0998 conn xmit_atomic 0000000000000000 [ 198.191582][ T5755] loop4: detected capacity change from 0 to 512 [ 198.219891][ T5755] EXT4-fs (loop4): Unrecognized mount option "seclabel" or missing value [ 199.421427][ T5773] syz.1.461[5773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.421529][ T5773] syz.1.461[5773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.461557][ T5770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.462'. [ 199.634022][ T5780] netlink: 132 bytes leftover after parsing attributes in process `syz.0.464'. [ 201.598861][ T5800] loop1: detected capacity change from 0 to 512 [ 201.763663][ T5800] EXT4-fs (loop1): Unrecognized mount option "seclabel" or missing value [ 202.800282][ T5809] loop0: detected capacity change from 0 to 1024 [ 204.053431][ T5809] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 204.092558][ T5809] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 204.097643][ T5821] netlink: 132 bytes leftover after parsing attributes in process `syz.3.477'. [ 205.365769][ T5827] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 206.046808][ T5831] Zero length message leads to an empty skb [ 206.209911][ T5837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.483'. [ 206.856017][ T5848] loop1: detected capacity change from 0 to 512 [ 207.051354][ T5848] EXT4-fs (loop1): Unrecognized mount option "seclabel" or missing value [ 209.378514][ T5839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.481'. [ 210.238107][ T5869] loop2: detected capacity change from 0 to 1024 [ 210.347868][ T5869] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 210.356998][ T5869] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 210.756261][ T5888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.497'. [ 212.216371][ T5899] atomic_op ffff888023825998 conn xmit_atomic 0000000000000000 [ 214.300201][ T5916] loop4: detected capacity change from 0 to 512 [ 214.440216][ T5916] EXT4-fs (loop4): Unrecognized mount option "seclabel" or missing value [ 218.579140][ T5941] loop4: detected capacity change from 0 to 1024 [ 218.680209][ T5941] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 218.736761][ T5941] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 220.372633][ T4256] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 220.581014][ T5963] netlink: 16 bytes leftover after parsing attributes in process `syz.4.520'. [ 220.636123][ T5966] syz.4.521[5966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.636231][ T5966] syz.4.521[5966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.972738][ T4256] usb 4-1: Using ep0 maxpacket: 32 [ 221.285164][ T4256] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 221.302311][ T4256] usb 4-1: config 0 has no interface number 0 [ 221.552707][ T4256] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 221.583146][ T4256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.608894][ T4256] usb 4-1: Product: syz [ 221.619453][ T4256] usb 4-1: Manufacturer: syz [ 221.625294][ T4256] usb 4-1: SerialNumber: syz [ 221.757367][ T4256] usb 4-1: config 0 descriptor?? [ 222.602599][ T4256] usb 4-1: can't set config #0, error -71 [ 222.611015][ T4256] usb 4-1: USB disconnect, device number 7 [ 222.833138][ T5991] device syzkaller0 entered promiscuous mode [ 222.881023][ T5995] loop0: detected capacity change from 0 to 1024 [ 222.907563][ T5996] atomic_op ffff888024de8198 conn xmit_atomic 0000000000000000 [ 222.985285][ T5995] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 223.023688][ T5995] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 223.449861][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'. [ 225.741177][ T6012] syz.3.535[6012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.741280][ T6012] syz.3.535[6012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.676766][ T4174] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 226.681799][ T6025] kernel profiling enabled (shift: 5) [ 226.954345][ T4174] usb 4-1: Using ep0 maxpacket: 16 [ 227.092462][ T4174] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 227.107150][ T4174] usb 4-1: config 0 has no interface number 0 [ 227.123792][ T4174] usb 4-1: config 0 interface 48 has no altsetting 0 [ 227.279122][ T6044] loop1: detected capacity change from 0 to 1024 [ 227.315661][ T4174] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 227.508600][ T4174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.517292][ T6044] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 227.529496][ T6044] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 227.543299][ T4174] usb 4-1: Product: syz [ 227.547881][ T4174] usb 4-1: Manufacturer: syz [ 228.233358][ T4174] usb 4-1: SerialNumber: syz [ 228.261420][ T4174] usb 4-1: config 0 descriptor?? [ 228.309379][ T6050] syz.2.549[6050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.309484][ T6050] syz.2.549[6050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.674181][ T6020] udc-core: couldn't find an available UDC or it's busy [ 228.694637][ T6020] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 228.713279][ T4200] Bluetooth: hci3: Unknown advertising packet type: 0xd49b [ 228.713360][ T4200] Bluetooth: hci3: Unknown advertising packet type: 0x1bb5 [ 228.715251][ T4174] usb 4-1: USB disconnect, device number 8 [ 228.743106][ T4200] ================================================================== [ 228.751673][ T4200] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12c0/0x3b80 [ 228.759620][ T4200] Read of size 1 at addr ffff888022f3840a by task kworker/u5:7/4200 [ 228.767940][ T4200] [ 228.770297][ T4200] CPU: 1 PID: 4200 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 228.778389][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 228.788554][ T4200] Workqueue: hci3 hci_rx_work [ 228.793273][ T4200] Call Trace: [ 228.796582][ T4200] [ 228.799629][ T4200] dump_stack_lvl+0x168/0x230 [ 228.804432][ T4200] ? show_regs_print_info+0x20/0x20 [ 228.809673][ T4200] ? load_image+0x3b0/0x3b0 [ 228.814205][ T4200] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 228.819666][ T4200] print_address_description+0x60/0x2d0 [ 228.825256][ T4200] ? hci_le_meta_evt+0x12c0/0x3b80 [ 228.830456][ T4200] kasan_report+0xdf/0x130 [ 228.834986][ T4200] ? hci_le_meta_evt+0x12c0/0x3b80 [ 228.840295][ T4200] hci_le_meta_evt+0x12c0/0x3b80 [ 228.845339][ T4200] ? hci_event_packet+0x2b0/0x12f0 [ 228.850590][ T4200] ? hci_remote_host_features_evt+0x280/0x280 [ 228.856853][ T4200] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 228.862516][ T4200] ? mark_lock+0x94/0x320 [ 228.866971][ T4200] ? mutex_unlock+0x10/0x10 [ 228.871801][ T4200] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 228.877907][ T4200] ? lock_chain_count+0x20/0x20 [ 228.882788][ T4200] ? __rwlock_init+0x140/0x140 [ 228.887661][ T4200] hci_event_packet+0xe05/0x12f0 [ 228.892633][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 228.897864][ T4200] ? rcu_lock_release+0x20/0x20 [ 228.902755][ T4200] ? hci_send_to_monitor+0x9c/0x4a0 [ 228.908149][ T4200] hci_rx_work+0x255/0xa10 [ 228.912606][ T4200] process_one_work+0x863/0x1000 [ 228.917666][ T4200] ? worker_detach_from_pool+0x240/0x240 [ 228.923425][ T4200] ? lockdep_hardirqs_off+0x70/0x100 [ 228.928751][ T4200] ? _raw_spin_lock_irq+0xab/0xe0 [ 228.933988][ T4200] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 228.940096][ T4200] ? wq_worker_running+0x97/0x170 [ 228.945606][ T4200] worker_thread+0xaa8/0x12a0 [ 228.950561][ T4200] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 228.956786][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 228.962013][ T4200] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 228.968030][ T4200] kthread+0x436/0x520 [ 228.972208][ T4200] ? rcu_lock_release+0x20/0x20 [ 228.977498][ T4200] ? kthread_blkcg+0xd0/0xd0 [ 228.982210][ T4200] ret_from_fork+0x1f/0x30 [ 228.986673][ T4200] [ 228.989734][ T4200] [ 228.992251][ T4200] Allocated by task 6020: [ 228.996794][ T4200] __kasan_kmalloc+0xb5/0xf0 [ 229.001406][ T4200] __alloc_skb+0x22c/0x750 [ 229.005964][ T4200] vhci_write+0xbc/0x450 [ 229.010222][ T4200] vfs_write+0x712/0xd00 [ 229.014479][ T4200] ksys_write+0x14d/0x250 [ 229.018911][ T4200] do_syscall_64+0x4c/0xa0 [ 229.023447][ T4200] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 229.029382][ T4200] [ 229.031720][ T4200] The buggy address belongs to the object at ffff888022f38000 [ 229.031720][ T4200] which belongs to the cache kmalloc-1k of size 1024 [ 229.046152][ T4200] The buggy address is located 10 bytes to the right of [ 229.046152][ T4200] 1024-byte region [ffff888022f38000, ffff888022f38400) [ 229.060443][ T4200] The buggy address belongs to the page: [ 229.066109][ T4200] page:ffffea00008bce00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22f38 [ 229.076473][ T4200] head:ffffea00008bce00 order:3 compound_mapcount:0 compound_pincount:0 [ 229.084901][ T4200] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 229.093181][ T4200] raw: 00fff00000010200 ffffea0001d4ca00 0000000300000003 ffff888016841dc0 [ 229.102141][ T4200] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 229.110828][ T4200] page dumped because: kasan: bad access detected [ 229.117278][ T4200] page_owner tracks the page as allocated [ 229.123146][ T4200] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4184, ts 71323744902, free_ts 71243888762 [ 229.142636][ T4200] get_page_from_freelist+0x1b77/0x1c60 [ 229.148538][ T4200] __alloc_pages+0x1e1/0x470 [ 229.153276][ T4200] new_slab+0xc0/0x4b0 [ 229.157358][ T4200] ___slab_alloc+0x81e/0xdf0 [ 229.162211][ T4200] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 229.168412][ T4200] __alloc_skb+0x22c/0x750 [ 229.172846][ T4200] rtmsg_fib+0xe7/0x4b0 [ 229.177124][ T4200] fib_table_insert+0x987/0x1b20 [ 229.182275][ T4200] fib_magic+0x2c1/0x390 [ 229.186673][ T4200] fib_add_ifaddr+0x140/0x5e0 [ 229.191490][ T4200] fib_inetaddr_event+0x13c/0x1c0 [ 229.196610][ T4200] blocking_notifier_call_chain+0x103/0x1b0 [ 229.202534][ T4200] __inet_insert_ifa+0x9e9/0xbc0 [ 229.207580][ T4200] inet_rtm_newaddr+0x940/0x1800 [ 229.212631][ T4200] rtnetlink_rcv_msg+0x9b9/0xe60 [ 229.217583][ T4200] netlink_rcv_skb+0x1e0/0x430 [ 229.222367][ T4200] page last free stack trace: [ 229.227036][ T4200] free_unref_page_prepare+0x637/0x6c0 [ 229.232603][ T4200] free_unref_page+0x94/0x280 [ 229.237414][ T4200] __unfreeze_partials+0x1a5/0x200 [ 229.242546][ T4200] put_cpu_partial+0x12d/0x190 [ 229.247439][ T4200] qlist_free_all+0x35/0x90 [ 229.252134][ T4200] kasan_quarantine_reduce+0x150/0x160 [ 229.258006][ T4200] __kasan_slab_alloc+0x2f/0xd0 [ 229.262872][ T4200] slab_post_alloc_hook+0x4c/0x380 [ 229.267988][ T4200] kmem_cache_alloc_node+0x12d/0x2d0 [ 229.273279][ T4200] __alloc_skb+0xf4/0x750 [ 229.277631][ T4200] mld_newpack+0x12a/0xb90 [ 229.282052][ T4200] add_grhead+0x5a/0x240 [ 229.286312][ T4200] add_grec+0x1341/0x15d0 [ 229.290675][ T4200] mld_ifc_work+0x6e7/0xb40 [ 229.295584][ T4200] process_one_work+0x863/0x1000 [ 229.300639][ T4200] worker_thread+0xaa8/0x12a0 [ 229.305331][ T4200] [ 229.307667][ T4200] Memory state around the buggy address: [ 229.313326][ T4200] ffff888022f38300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.321688][ T4200] ffff888022f38380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.330055][ T4200] >ffff888022f38400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 229.338342][ T4200] ^ [ 229.342782][ T4200] ffff888022f38480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 229.351288][ T4200] ffff888022f38500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 229.359622][ T4200] ================================================================== [ 229.368006][ T4200] Disabling lock debugging due to kernel taint [ 229.405999][ T4200] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 229.413510][ T4200] CPU: 0 PID: 4200 Comm: kworker/u5:7 Tainted: G B syzkaller #0 [ 229.423029][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 229.433451][ T4200] Workqueue: hci3 hci_rx_work [ 229.438182][ T4200] Call Trace: [ 229.441547][ T4200] [ 229.444510][ T4200] dump_stack_lvl+0x168/0x230 [ 229.449700][ T4200] ? show_regs_print_info+0x20/0x20 [ 229.455177][ T4200] ? load_image+0x3b0/0x3b0 [ 229.459827][ T4200] panic+0x2c9/0x7f0 [ 229.463951][ T4200] ? bpf_jit_dump+0xd0/0xd0 [ 229.468497][ T4200] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 229.474882][ T4200] ? _raw_spin_unlock+0x40/0x40 [ 229.479777][ T4200] ? hci_le_meta_evt+0x12c0/0x3b80 [ 229.485270][ T4200] check_panic_on_warn+0x80/0xa0 [ 229.490435][ T4200] ? hci_le_meta_evt+0x12c0/0x3b80 [ 229.495776][ T4200] end_report+0x6d/0xf0 [ 229.500070][ T4200] kasan_report+0x102/0x130 [ 229.504614][ T4200] ? hci_le_meta_evt+0x12c0/0x3b80 [ 229.509913][ T4200] hci_le_meta_evt+0x12c0/0x3b80 [ 229.515106][ T4200] ? hci_event_packet+0x2b0/0x12f0 [ 229.520537][ T4200] ? hci_remote_host_features_evt+0x280/0x280 [ 229.526623][ T4200] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 229.532559][ T4200] ? mark_lock+0x94/0x320 [ 229.537125][ T4200] ? mutex_unlock+0x10/0x10 [ 229.541755][ T4200] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 229.548034][ T4200] ? lock_chain_count+0x20/0x20 [ 229.553300][ T4200] ? __rwlock_init+0x140/0x140 [ 229.558355][ T4200] hci_event_packet+0xe05/0x12f0 [ 229.563576][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 229.580168][ T4200] ? rcu_lock_release+0x20/0x20 [ 229.585145][ T4200] ? hci_send_to_monitor+0x9c/0x4a0 [ 229.590683][ T4200] hci_rx_work+0x255/0xa10 [ 229.595405][ T4200] process_one_work+0x863/0x1000 [ 229.600358][ T4200] ? worker_detach_from_pool+0x240/0x240 [ 229.606200][ T4200] ? lockdep_hardirqs_off+0x70/0x100 [ 229.611822][ T4200] ? _raw_spin_lock_irq+0xab/0xe0 [ 229.617221][ T4200] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 229.623048][ T4200] ? wq_worker_running+0x97/0x170 [ 229.628303][ T4200] worker_thread+0xaa8/0x12a0 [ 229.633391][ T4200] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 229.639921][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 229.645136][ T4200] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 229.651035][ T4200] kthread+0x436/0x520 [ 229.655325][ T4200] ? rcu_lock_release+0x20/0x20 [ 229.660520][ T4200] ? kthread_blkcg+0xd0/0xd0 [ 229.665138][ T4200] ret_from_fork+0x1f/0x30 [ 229.669681][ T4200] [ 229.673172][ T4200] Kernel Offset: disabled [ 229.677622][ T4200] Rebooting in 86400 seconds..