last executing test programs: 1m5.077543699s ago: executing program 0 (id=130): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c000196"], 0x14}}, 0x0) 1m4.031959133s ago: executing program 0 (id=133): setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) socket(0x10, 0x80002, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000}) r0 = socket$packet(0x11, 0x2, 0x300) dup3(0xffffffffffffffff, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x4000996f, r3, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0xffffd000) 1m2.652633853s ago: executing program 0 (id=140): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) 59.498724996s ago: executing program 0 (id=144): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 56.098324048s ago: executing program 0 (id=153): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x82240, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000003c0)={0x1, 0x6, 0x8, 0x5, 0x14, "4bd87fff5d667c03025d9e3aa6f6a05505bfd4"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x1000000000000010, 0x80802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)) read$dsp(r5, &(0x7f00000001c0)=""/95, 0x5f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) 53.286269213s ago: executing program 0 (id=155): setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000500)=0xf, 0x4) socket(0x10, 0x80002, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000}) r0 = socket$packet(0x11, 0x2, 0x300) dup3(0xffffffffffffffff, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x4000996f, r3, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0xffffd000) 37.636319607s ago: executing program 32 (id=155): setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000500)=0xf, 0x4) socket(0x10, 0x80002, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000}) r0 = socket$packet(0x11, 0x2, 0x300) dup3(0xffffffffffffffff, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x4000996f, r3, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0xffffd000) 33.509690507s ago: executing program 2 (id=195): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 30.448854742s ago: executing program 2 (id=199): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001140)=""/134, 0x86}], 0x1) 29.694509713s ago: executing program 3 (id=201): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x41, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xd1, 0x25, 0x3c, 0x40, 0x12d1, 0xed56, 0x46dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcf, 0x0, 0x0, 0xff, 0x1, 0x37, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xc957}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x7, 0x5}, {0x6, 0x24, 0x1a, 0x8001, 0x9}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000400)={0x14, &(0x7f0000000380)={0x20, 0x22, 0x2, {0x2, 0xd}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 29.450173902s ago: executing program 2 (id=202): setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) socket(0x10, 0x80002, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0xffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) dup3(0xffffffffffffffff, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x4000996f, r3, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0xffffd000) 26.511912998s ago: executing program 3 (id=206): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x1, {{0xa, 0x4e22, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x800018f1) gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1, 0x86, 0x451) 25.430616204s ago: executing program 3 (id=209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$watch_queue(0x0, 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.978363411s ago: executing program 3 (id=212): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x4c03, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd_index=0x1, 0xffffffffffffffff, 0xfffffffffffffaaf, 0x9c7, 0x5, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000180)=[{0x0}], 0x1) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r6 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000480), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r5, r6}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x3d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 21.36061988s ago: executing program 2 (id=216): syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x3}]}}, 0x0, 0x26}, 0x28) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) read$FUSE(r7, 0x0, 0x0) write$FUSE_DIRENTPLUS(r7, &(0x7f0000003b80)={0x10}, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 20.589851522s ago: executing program 3 (id=218): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/mcfilter6\x00') ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x800018f1) gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) preadv(r0, &(0x7f0000001640)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1, 0x86, 0x451) 18.537240066s ago: executing program 2 (id=219): syz_emit_ethernet(0x41, &(0x7f0000000000)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2f, 0x2f, 0x0, @loopback, @broadcast}, "4b41d6"}}}}}, 0x0) 18.081290382s ago: executing program 3 (id=220): syz_usb_connect(0x2, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe40102030109021200"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000c00000000000000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xc1e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x26}, 0xbf20}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x1, r3}) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x2040400) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000740)={[0x8000000000000001]}, 0x8, 0x80000) poll(&(0x7f0000000800)=[{r6, 0x200}], 0x1, 0x1ad) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @remote, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr=0x64010100, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}]}}}}}}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000013c0)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)) 17.514711368s ago: executing program 2 (id=223): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x5) 7.233719221s ago: executing program 1 (id=228): syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x3}]}}, 0x0, 0x26}, 0x28) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) read$FUSE(r7, 0x0, 0x0) write$FUSE_DIRENTPLUS(r7, &(0x7f0000003b80)={0x10}, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 7.12241338s ago: executing program 4 (id=229): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/mcfilter6\x00') ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x800018f1) gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) preadv(r0, &(0x7f0000001640)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1, 0x86, 0x451) 6.212128463s ago: executing program 1 (id=230): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0xe) 5.404425808s ago: executing program 1 (id=231): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='iso9660\x00', 0x1082088, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x15, 0x5, 0x0) getsockopt(0xffffffffffffffff, 0x80000001, 0x2711, 0x0, &(0x7f0000000000)) mq_open(&(0x7f0000000240)='sys_exit\x00', 0x80, 0x10, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0/bus\x00', 0x0, 0x0, 0x0, 0x1) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) 5.362073641s ago: executing program 4 (id=232): r0 = socket(0x25, 0x80000, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r0) getsockname$packet(r0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, {0x2}}) syz_io_uring_setup(0x3a46, 0x0, &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$vim2m(0x0, 0x0, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x16) socket(0x2, 0x80805, 0x0) 4.365089121s ago: executing program 1 (id=233): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x406, r0) write$binfmt_script(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c5000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x7a6f938d2aadffed, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x4f27, 0x3, 0x10000, 0x2f, 0x66, 0xcc7, 0xe, 0x0, 0xa, 0x100, 0x9, 0x1, 0x1db, 0x5, 0x0, 0x80000101, 0x5, 0x1a449, 0x3, 0x40020003, 0x208d, 0x2, 0xd27, 0xae, 0x7fff, 0x8, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) write$P9_RXATTRWALK(r1, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x4}, 0xca80) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0xa, 0xfffa}, 0xba, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x2004d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x5, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x4, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x8, 0x3e, 0x8e, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0xd31, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x0, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0xc12f, 0x3e7, 0xb, 0x4, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3ff, 0x7ff, 0x12b, 0x4, 0x1, 0x2, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2106, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xa, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x2, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.179187526s ago: executing program 1 (id=234): setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3}, 0x65) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x6d, 0x0, 0x8000000) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="ab", 0x1, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getpid() r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000680)='syz1\x00', 0x200002, 0x0) 2.960602194s ago: executing program 33 (id=220): syz_usb_connect(0x2, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe40102030109021200"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000c00000000000000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xc1e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x26}, 0xbf20}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x1, r3}) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x2040400) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000740)={[0x8000000000000001]}, 0x8, 0x80000) poll(&(0x7f0000000800)=[{r6, 0x200}], 0x1, 0x1ad) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @remote, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr=0x64010100, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}]}}}}}}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000013c0)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)) 2.838821343s ago: executing program 4 (id=236): r0 = socket(0x25, 0x80000, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r0) getsockname$packet(r0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, {0x2}}) syz_io_uring_setup(0x3a46, 0x0, &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$vim2m(0x0, 0x0, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x16) sched_setaffinity(0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) 2.097112363s ago: executing program 34 (id=223): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x5) 1.712744943s ago: executing program 4 (id=238): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000019400)={0x0, 0x0, 0x0, 0x0, 0xc0c0c0c0}) 1.552397536s ago: executing program 4 (id=239): syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x3}]}}, 0x0, 0x26}, 0x28) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) read$FUSE(r7, 0x0, 0x0) write$FUSE_DIRENTPLUS(r7, &(0x7f0000003b80)={0x558, 0x0, 0x0, [{{0x6, 0x1, 0x9, 0x1e9, 0x3, 0xffff, {0x3, 0x362, 0x81, 0x8, 0x0, 0x8, 0x9, 0x81, 0xd8, 0xc000, 0x7, 0x0, 0x0, 0x4, 0xf}}, {0x5, 0x6d15, 0x4, 0xb, ':(\\['}}, {{0x1, 0x2, 0x8, 0xc1, 0x8, 0x9, {0x2, 0x1, 0x7fffffff, 0xfff, 0x1, 0x0, 0x6, 0xfff, 0xfffffff9, 0x8000, 0xffff7fff, 0x0, 0x0, 0xb, 0x9}}, {0x2, 0x5, 0x0, 0xd}}, {{0x5, 0x2, 0x5, 0xfffffffffffffff6, 0x3, 0x1, {0x0, 0x6, 0x800, 0x0, 0x5fd1, 0x7, 0x0, 0x6, 0x1ff, 0x4000, 0x401, 0x0, 0x0, 0x3b21, 0x7932e179}}, {0x6, 0x4, 0x1, 0x1cc8, ','}}, {{0x5, 0x0, 0x1, 0x1, 0xfffffff7, 0x7, {0x2, 0xe5e, 0x1, 0xfa8, 0x8, 0x4, 0x9, 0x8, 0x5, 0x4000, 0x8, 0x0, 0x0, 0x8}}, {0x1, 0x80, 0x3, 0x80000001, '}^@'}}, {{0x1, 0x1, 0x100000001, 0x1, 0x2, 0xb, {0x4, 0x6, 0xc9d, 0x1, 0xffffffffffff0001, 0x2, 0x6, 0x8000, 0x81, 0x1000, 0x122, 0x0, 0x0, 0x912, 0x5}}, {0x0, 0x8, 0x6, 0x81, 'sched\x00'}}, {{0x1, 0x2, 0x7fffffff, 0xcfdb, 0x7fff, 0x3, {0x5, 0xfdc3, 0x7400, 0xff, 0x5, 0x3, 0x9, 0x4, 0x4, 0x6000, 0x2, 0x0, 0x0, 0x5, 0x4}}, {0x4, 0x1, 0xe, 0x3, '/dev/ubi_ctrl\x00'}}, {{0x2, 0x1, 0xc, 0x0, 0xa, 0x3, {0x6, 0x200000000800, 0x8, 0x3, 0x2, 0x100, 0x41fe, 0x6, 0x581, 0x8000, 0x1ea8e1f2, 0x0, 0x0, 0x3, 0x7}}, {0x0, 0x1ff, 0x0, 0x4}}, {{0x0, 0x1, 0x2, 0x101, 0x9, 0x100, {0x5, 0xfffffffffffffffc, 0x2, 0x101, 0x100000000, 0x0, 0x3ff, 0x3, 0x5, 0x1000, 0x1, 0x0, 0x0, 0x47, 0x5}}, {0x5, 0x1, 0x53, 0x5, 'P\xc2\xfa\xaf\xcc\x00\xaf\xb1?\x83\xfb\x8f\xed\xb9\xc2\xa3\xb2\xdb~\xfe\xd4\xf6`ei\x8b9\xd2\x81\xf2\x951\xd3\xb0\xa3\xba\xb4\xab\xbf\x81\r\xff4\xff$29\xfa\\\vn\x00\xa2\xfd\xed\xb7\x83\"hi\xaa(\xde\xc4\xe0c\xda`9\xe4gql$\xfdb\x90\x1b\xc8u\xf8\xc9\r'}}]}, 0x558) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 444.716695ms ago: executing program 4 (id=240): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x14) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x0, 0x0, &(0x7f0000000a80)}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=241): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/mcfilter6\x00') ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x800018f1) gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) preadv(r0, &(0x7f0000001640)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1, 0x86, 0x451) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. [ 79.664544][ T4256] cgroup: Unknown subsys name 'net' [ 79.803273][ T4256] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.465655][ T4256] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 83.449673][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.487637][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.499267][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.499648][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.508035][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.516535][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.524837][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.536760][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.544206][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.552712][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.560779][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.568786][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.576213][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.584315][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.592809][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.607353][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.607986][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.616564][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.623592][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.631025][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.639250][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.647533][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.654557][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.662080][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.669070][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.676823][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.726970][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.728442][ T4271] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.760828][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.769414][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.256822][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 84.298644][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 84.356114][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 84.405345][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 84.456136][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 84.579826][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.588707][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.599545][ T4267] device bridge_slave_0 entered promiscuous mode [ 84.647686][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.655446][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.667527][ T4267] device bridge_slave_1 entered promiscuous mode [ 84.676558][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.684617][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.693942][ T4277] device bridge_slave_0 entered promiscuous mode [ 84.707404][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.716579][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.729194][ T4276] device bridge_slave_0 entered promiscuous mode [ 84.761008][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.770309][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.779429][ T4277] device bridge_slave_1 entered promiscuous mode [ 84.800448][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.808559][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.818680][ T4276] device bridge_slave_1 entered promiscuous mode [ 84.836856][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.847621][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.858250][ T4280] device bridge_slave_0 entered promiscuous mode [ 84.908133][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.923715][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.935218][ T4280] device bridge_slave_1 entered promiscuous mode [ 84.947660][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.964242][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.990645][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.015004][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.036946][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.048084][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.056517][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.066654][ T4268] device bridge_slave_0 entered promiscuous mode [ 85.076544][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.116166][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.124184][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.133390][ T4268] device bridge_slave_1 entered promiscuous mode [ 85.155005][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.170406][ T4267] team0: Port device team_slave_0 added [ 85.180499][ T4277] team0: Port device team_slave_0 added [ 85.189375][ T4277] team0: Port device team_slave_1 added [ 85.223256][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.245411][ T4267] team0: Port device team_slave_1 added [ 85.262582][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.274842][ T4276] team0: Port device team_slave_0 added [ 85.284833][ T4276] team0: Port device team_slave_1 added [ 85.327655][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.355512][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.363690][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.393862][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.408519][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.416440][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.447232][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.481059][ T4280] team0: Port device team_slave_0 added [ 85.488796][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.496447][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.528802][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.545202][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.553981][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.585698][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.605003][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.612775][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.643514][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.663784][ T4280] team0: Port device team_slave_1 added [ 85.681782][ T4268] team0: Port device team_slave_0 added [ 85.707611][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.715914][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.745112][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.768186][ T4287] Bluetooth: hci1: command 0x0409 tx timeout [ 85.768199][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 85.768408][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 85.793149][ T4268] team0: Port device team_slave_1 added [ 85.800052][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.808637][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.840971][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.853640][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 85.857542][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 85.908456][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.917510][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.950266][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.966232][ T4277] device hsr_slave_0 entered promiscuous mode [ 85.974749][ T4277] device hsr_slave_1 entered promiscuous mode [ 85.998953][ T4267] device hsr_slave_0 entered promiscuous mode [ 86.008240][ T4267] device hsr_slave_1 entered promiscuous mode [ 86.017616][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.027398][ T4267] Cannot create hsr debugfs directory [ 86.052831][ T4276] device hsr_slave_0 entered promiscuous mode [ 86.060471][ T4276] device hsr_slave_1 entered promiscuous mode [ 86.068897][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.078683][ T4276] Cannot create hsr debugfs directory [ 86.097450][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.105717][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.137485][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.180846][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.189827][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.219931][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.331325][ T4280] device hsr_slave_0 entered promiscuous mode [ 86.342757][ T4280] device hsr_slave_1 entered promiscuous mode [ 86.352641][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.364287][ T4280] Cannot create hsr debugfs directory [ 86.414980][ T4268] device hsr_slave_0 entered promiscuous mode [ 86.424742][ T4268] device hsr_slave_1 entered promiscuous mode [ 86.433126][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.441141][ T4268] Cannot create hsr debugfs directory [ 86.763772][ T4276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.782422][ T4276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.801801][ T4276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.814350][ T4276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.860214][ T4267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.892621][ T4267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.910836][ T4267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.925783][ T4267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.990990][ T4277] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.006060][ T4277] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.019918][ T4277] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.033416][ T4277] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.110761][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.169769][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.180425][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.192796][ T4280] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.216806][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.228838][ T4280] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.245988][ T4280] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.275860][ T4280] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.292219][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.303699][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.316817][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.325738][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.342400][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.390999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.411344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.422813][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.430770][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.443576][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.509346][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.521665][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.561152][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.573759][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.591888][ T4268] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.603133][ T4268] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.620070][ T4268] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.636027][ T4268] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.646800][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.658225][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.666940][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.680768][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.692133][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.705581][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.723851][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.760385][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.772132][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.782262][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.792285][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.809822][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.819063][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.831862][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.847355][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 87.849494][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.854566][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 87.864804][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.870301][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 87.903704][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.914983][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.924843][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.933901][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.942549][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 87.942560][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 87.959820][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.970775][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.980658][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.989395][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.002514][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.016522][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.026631][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.035918][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.046961][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.060380][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.095025][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.105319][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.118310][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.126689][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.139518][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.150285][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.223124][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.236782][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.258287][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.275304][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.291278][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.305839][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.319147][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.333534][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.344018][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.355574][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.406387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.419535][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.431529][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.443347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.454302][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.487672][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.511626][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.529250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.543432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.556905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.572409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.586159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.606514][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.619625][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.640386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.655129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.666719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.683506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.720358][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.748265][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.759558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.786156][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.809648][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.826928][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.836358][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.870436][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.886909][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.900693][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.921116][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.929813][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.946949][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.984804][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.010588][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.030601][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.056611][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.074253][ T4276] device veth0_vlan entered promiscuous mode [ 89.098143][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.116476][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.150517][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.163594][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.173176][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.183249][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.193145][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.203121][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.211767][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.232662][ T4276] device veth1_vlan entered promiscuous mode [ 89.242462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.253547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.265589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.285190][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.301777][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.327887][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.342203][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.355213][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.369585][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.379876][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.390703][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.411951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.420419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.432587][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.445430][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.515757][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.536459][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.547852][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.562648][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.573219][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.581512][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.598142][ T4276] device veth0_macvtap entered promiscuous mode [ 89.642305][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.655038][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.666390][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.678525][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.690135][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.703058][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.712307][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.722851][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.734447][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.761753][ T4276] device veth1_macvtap entered promiscuous mode [ 89.793184][ T4277] device veth0_vlan entered promiscuous mode [ 89.824041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.834585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.851795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.869662][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.886027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.896875][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.927710][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 89.927737][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 89.934951][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 89.983084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.993976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.005943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.007554][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 90.015824][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 90.031339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.040911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.051712][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.062717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.073062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.083356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.094095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.113113][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.134751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.144961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.155581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.170778][ T4277] device veth1_vlan entered promiscuous mode [ 90.188573][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.221934][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.240601][ T4267] device veth0_vlan entered promiscuous mode [ 90.320502][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.332058][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.344209][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.355343][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.365624][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.378689][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.387948][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.397596][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.406951][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.433823][ T4276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.444080][ T4276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.455012][ T4276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.465053][ T4276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.519136][ T4267] device veth1_vlan entered promiscuous mode [ 90.530200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.549604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.585966][ T4277] device veth0_macvtap entered promiscuous mode [ 90.598567][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.614205][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.624731][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.665318][ T4277] device veth1_macvtap entered promiscuous mode [ 90.725750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.740161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.749994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.758862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.771347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.781629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.790307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.802939][ T4280] device veth0_vlan entered promiscuous mode [ 90.830504][ T4267] device veth0_macvtap entered promiscuous mode [ 90.856791][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.903439][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.916969][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.934227][ T4280] device veth1_vlan entered promiscuous mode [ 90.952244][ T4267] device veth1_macvtap entered promiscuous mode [ 90.969919][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.985358][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.001405][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.011993][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.024241][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.038440][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.051842][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.065228][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.103112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.112109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.125384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.141817][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.151879][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.163270][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.174086][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.203013][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.213943][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.231747][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.242302][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.277462][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.295618][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.315432][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.390360][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.408390][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.431332][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.480991][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.493579][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.514074][ T4280] device veth0_macvtap entered promiscuous mode [ 91.526967][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.544878][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.558375][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.575100][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.590602][ T4280] device veth1_macvtap entered promiscuous mode [ 91.605675][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.620474][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.631992][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.643545][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.655915][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.670398][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.681193][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.694780][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.707324][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.742975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.755576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.766934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.780570][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.800805][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.836543][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.874413][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.901475][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.916603][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.936254][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.955787][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.969086][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.982956][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.014193][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 92.017824][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 92.022221][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 92.033390][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.051129][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.053985][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.078568][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.087445][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 92.089829][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 92.103620][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.115830][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.127749][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.138147][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.149602][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.164936][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.178713][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.193326][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.215266][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.243238][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.308208][ T4280] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.345352][ T4280] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.358717][ T4280] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.369665][ T4280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.571232][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.584108][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.901194][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.079700][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.248422][ T127] cfg80211: failed to load regulatory.db [ 93.274269][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.429550][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.533232][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.583143][ T4268] device veth0_vlan entered promiscuous mode [ 93.617595][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.628337][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.638689][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.681350][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.738055][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.758319][ T4268] device veth1_vlan entered promiscuous mode [ 93.776096][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.825489][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.862434][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.887940][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.930260][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.973077][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.008575][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.068043][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.100713][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.128262][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.172531][ T4268] device veth0_macvtap entered promiscuous mode [ 94.246336][ T4268] device veth1_macvtap entered promiscuous mode [ 94.287328][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.429359][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.443988][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.485901][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.561637][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.607175][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.657147][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.707113][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.727086][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.757346][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.786923][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.798955][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.825017][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.836315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.846064][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.856633][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.877362][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.901037][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.921293][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.943327][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.955193][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.971970][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.983881][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.996421][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.007397][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.019348][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.046362][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.058793][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 95.068221][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.089751][ T7] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 95.089875][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.107045][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.118235][ T7] usb 1-1: Product: syz [ 95.122787][ T7] usb 1-1: Manufacturer: syz [ 95.129734][ T7] usb 1-1: SerialNumber: syz [ 95.154446][ T7] usb 1-1: config 0 descriptor?? [ 95.190137][ T4268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.214887][ T4268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.226186][ T4268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.237850][ T4268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.268333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 95.280175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 95.303870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 95.575633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.587081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 95.597479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 95.607444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 95.608119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.616312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 95.624749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.048279][ T7] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 96.929522][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.968817][ T4434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 97.023742][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.100909][ T4434] batman_adv: batadv0: Adding interface: bond1 [ 97.108521][ T4434] batman_adv: batadv0: The MTU of interface bond1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.146037][ T4434] batman_adv: batadv0: Not using interface bond1 (retrying later): interface not active [ 97.162851][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.201712][ T4436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 97.213061][ T4436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.222514][ T4436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.233326][ T4436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.250942][ T4436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.276383][ T4436] batman_adv: batadv0: Removing interface: bond1 [ 97.396600][ T4430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.457820][ T4430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.512654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.654967][ T7] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 97.705243][ T7] usb 1-1: USB disconnect, device number 2 [ 97.757201][ T4336] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.868948][ T4446] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.967795][ T4336] usb 4-1: Using ep0 maxpacket: 16 [ 97.978558][ T4336] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.005677][ T4336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.018545][ T4336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 98.031840][ T4336] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 98.045002][ T4336] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.081107][ T4336] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 98.110522][ T4336] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 98.129666][ T4336] usb 4-1: Manufacturer: syz [ 98.151038][ T4336] usb 4-1: config 0 descriptor?? [ 99.477219][ T4336] rc_core: IR keymap rc-hauppauge not found [ 99.497880][ T4336] Registered IR keymap rc-empty [ 99.524557][ T4336] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 99.577265][ T4336] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 99.621848][ T4336] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 99.735158][ T4336] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 99.873455][ T4336] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 99.948733][ T4336] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 99.989007][ T4336] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 100.050075][ T4336] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 100.150503][ T4336] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 100.247897][ T4336] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 100.297338][ T4336] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 100.367309][ T4336] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 100.409038][ T4336] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 100.461476][ T4336] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 100.548163][ T4336] mceusb 4-1:0.0: Registered Є with mce emulator interface version 1 [ 100.976251][ T4336] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 101.087158][ T127] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.225778][ T4336] usb 4-1: USB disconnect, device number 2 [ 101.280230][ T127] usb 3-1: Using ep0 maxpacket: 32 [ 101.294616][ T127] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 101.344082][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.374801][ T127] usb 3-1: Product: syz [ 101.389546][ T127] usb 3-1: Manufacturer: syz [ 101.404749][ T127] usb 3-1: SerialNumber: syz [ 101.655600][ T127] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 101.694917][ T127] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 101.763337][ T127] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 101.868839][ T14] usb 3-1: USB disconnect, device number 2 [ 101.979662][ T14] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 102.019250][ T14] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 102.035948][ T14] visor 3-1:1.0: device disconnected [ 107.647991][ T4553] futex_wake_op: syz.2.43 tries to shift op by 32; fix this program [ 112.769216][ T4601] netlink: 48 bytes leftover after parsing attributes in process `syz.0.61'. [ 116.526949][ T4636] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 121.006717][ T4676] ubi31: attaching mtd0 [ 121.026019][ T4676] ubi31: scanning is finished [ 121.031554][ T4676] ubi31: empty MTD device detected [ 121.602677][ T4676] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 126.104979][ T4710] device syzkaller0 entered promiscuous mode [ 126.222053][ T4713] process 'syz.0.87' launched './file1' with NULL argv: empty string added [ 127.347183][ T4313] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.617170][ T4313] usb 5-1: Using ep0 maxpacket: 32 [ 127.716099][ T4313] usb 5-1: config 0 has no interfaces? [ 127.754534][ T4313] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 127.771336][ T4313] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 127.793598][ T4313] usb 5-1: Product: syz [ 127.800910][ T4313] usb 5-1: Manufacturer: syz [ 127.810356][ T4313] usb 5-1: SerialNumber: syz [ 127.844848][ T4313] usb 5-1: config 0 descriptor?? [ 128.341808][ T1189] usb 5-1: USB disconnect, device number 2 [ 132.111004][ T4784] ubi31: attaching mtd0 [ 132.126054][ T4784] ubi31: scanning is finished [ 132.757363][ T4784] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 133.621834][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.630743][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.772571][ T4749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.653257][ T4752] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 134.671735][ T4462] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 134.897959][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 136.097025][ C0] sched: RT throttling activated [ 136.494490][ T4462] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 137.082437][ T4812] device syzkaller0 entered promiscuous mode [ 138.547945][ T14] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 138.843330][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.857234][ T14] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 138.877222][ T14] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 139.710501][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.747924][ T14] usb 5-1: config 0 descriptor?? [ 140.533881][ T4844] ubi31: attaching mtd0 [ 140.551017][ T4844] ubi31: scanning is finished [ 141.130201][ T4335] usb 5-1: USB disconnect, device number 3 [ 141.142809][ T4844] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 142.566522][ T4875] netlink: 'syz.2.139': attribute type 1 has an invalid length. [ 144.305276][ T4875] device bond1 entered promiscuous mode [ 144.484118][ T4875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.841203][ T4879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.857520][ T4879] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 145.880849][ T4879] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 146.204188][ T4901] ubi31: attaching mtd0 [ 146.217753][ T4901] ubi31: scanning is finished [ 146.819762][ T4901] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 146.947037][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 147.007321][ T4879] bond1: (slave vcan1): making interface the new active one [ 147.027197][ T4879] device vcan1 entered promiscuous mode [ 147.060185][ T4879] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 147.297248][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 147.346252][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 147.367625][ T14] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 148.167394][ T14] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 148.551626][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.812325][ T14] usb 1-1: Product: syz [ 148.901561][ T4909] futex_wake_op: syz.4.149 tries to shift op by 32; fix this program [ 148.963026][ T14] usb 1-1: Manufacturer: syz [ 149.980044][ T14] usb 1-1: SerialNumber: syz [ 150.053912][ T14] usb 1-1: config 0 descriptor?? [ 150.072012][ T14] usb 1-1: can't set config #0, error -71 [ 150.111403][ T14] usb 1-1: USB disconnect, device number 3 [ 153.528916][ T4952] ubi31: attaching mtd0 [ 153.543470][ T4952] ubi31: scanning is finished [ 154.153527][ T4952] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 154.934829][ T4950] netlink: 'syz.4.161': attribute type 1 has an invalid length. [ 155.742120][ T4950] device bond1 entered promiscuous mode [ 155.751318][ T4950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.870874][ T4961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.922440][ T4961] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 155.942353][ T4961] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 156.085625][ T4961] bond1: (slave vcan1): making interface the new active one [ 156.097021][ T4961] device vcan1 entered promiscuous mode [ 156.117757][ T4961] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 156.418867][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 157.082734][ T4973] binder: 4972:4973 ioctl 400c620e 200000000040 returned -22 [ 158.633272][ T4982] futex_wake_op: syz.1.167 tries to shift op by 32; fix this program [ 169.897871][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.908533][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.918587][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.934401][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.942827][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 169.952227][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.571596][ T4583] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.272649][ T4287] Bluetooth: hci1: command 0x0409 tx timeout [ 172.459383][ T4583] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.595831][ T4583] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.617249][ T4328] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 172.882360][ T4328] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.963928][ T4328] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 172.987425][ T4328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.076110][ T4328] usb 3-1: config 0 descriptor?? [ 173.148302][ T4328] pwc: Askey VC010 type 2 USB webcam detected. [ 173.556636][ T4583] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.686836][ T4328] pwc: recv_control_msg error -32 req 02 val 2b00 [ 173.697994][ T4328] pwc: recv_control_msg error -32 req 02 val 2700 [ 173.722491][ T5049] chnl_net:caif_netlink_parms(): no params data found [ 173.735364][ T4328] pwc: recv_control_msg error -32 req 02 val 2c00 [ 173.772609][ T4328] pwc: recv_control_msg error -32 req 04 val 1000 [ 173.812321][ T4328] pwc: recv_control_msg error -32 req 04 val 1300 [ 173.849058][ T4328] pwc: recv_control_msg error -32 req 04 val 1400 [ 173.888298][ T4328] pwc: recv_control_msg error -32 req 02 val 2000 [ 173.924854][ T4328] pwc: recv_control_msg error -32 req 02 val 2100 [ 173.955081][ T4328] pwc: recv_control_msg error -32 req 04 val 1500 [ 174.009522][ T4328] pwc: recv_control_msg error -32 req 02 val 2500 [ 174.037315][ T4328] pwc: recv_control_msg error -32 req 02 val 2400 [ 174.047375][ T4328] pwc: recv_control_msg error -32 req 02 val 2600 [ 174.055420][ T4328] pwc: recv_control_msg error -32 req 02 val 2900 [ 174.072212][ T4328] pwc: recv_control_msg error -32 req 02 val 2800 [ 174.087722][ T4328] pwc: recv_control_msg error -71 req 04 val 1100 [ 174.098226][ T4328] pwc: recv_control_msg error -71 req 04 val 1200 [ 174.112251][ T4328] pwc: Registered as video103. [ 174.122549][ T4328] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 174.161318][ T4328] usb 3-1: USB disconnect, device number 3 [ 174.337130][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 174.487823][ T4583] bond1: (slave ip6gretap1): Removing an active aggregator [ 174.519224][ T4430] bond1: Warning: Found an uninitialized port [ 174.610705][ T4583] bond1: (slave ip6gretap1): Releasing backup interface [ 174.762885][ T5049] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.789649][ T5049] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.818569][ T5049] device bridge_slave_0 entered promiscuous mode [ 174.906832][ T5049] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.924839][ T5049] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.960084][ T5049] device bridge_slave_1 entered promiscuous mode [ 175.007473][ T4258] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 175.166214][ T5049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.207170][ T4258] usb 2-1: Using ep0 maxpacket: 16 [ 175.215899][ T4258] usb 2-1: config 0 has no interfaces? [ 175.224386][ T5049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.253085][ T4258] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.295918][ T4258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.324910][ T4258] usb 2-1: Product: syz [ 175.354212][ T4258] usb 2-1: Manufacturer: syz [ 175.377407][ T4258] usb 2-1: SerialNumber: syz [ 175.400873][ T4258] usb 2-1: config 0 descriptor?? [ 175.466484][ T5049] team0: Port device team_slave_0 added [ 175.553305][ T5049] team0: Port device team_slave_1 added [ 175.689724][ T5049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.719588][ T5049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.728742][ T4258] usb 2-1: USB disconnect, device number 2 [ 175.751855][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.867410][ T1189] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 175.894633][ T5049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.019213][ T5049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.035914][ T5049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.065314][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.114891][ T1189] usb 4-1: config 0 has an invalid interface number: 207 but max is 0 [ 176.136245][ T1189] usb 4-1: config 0 has no interface number 0 [ 176.160526][ T1189] usb 4-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 176.189457][ T1189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.199088][ T5049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.230624][ T1189] usb 4-1: Product: syz [ 176.247539][ T1189] usb 4-1: Manufacturer: syz [ 176.281264][ T1189] usb 4-1: SerialNumber: syz [ 176.309136][ T1189] usb 4-1: config 0 descriptor?? [ 176.358780][ T1189] qmi_wwan 4-1:0.207: bogus CDC Union: master=0, slave=1 [ 176.407363][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 177.133719][ T1189] qmi_wwan: probe of 4-1:0.207 failed with error -22 [ 177.349586][ T7] usb 4-1: USB disconnect, device number 3 [ 177.367253][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 177.370534][ T5049] device hsr_slave_0 entered promiscuous mode [ 177.437534][ T5049] device hsr_slave_1 entered promiscuous mode [ 177.489472][ T5049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.487175][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 178.576056][ T5049] Cannot create hsr debugfs directory [ 179.570893][ T4583] device hsr_slave_0 left promiscuous mode [ 179.595126][ T4583] device hsr_slave_1 left promiscuous mode [ 179.648628][ T4583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.738337][ T4583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.782980][ T4583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.804970][ T4583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.857390][ T4583] device bridge_slave_1 left promiscuous mode [ 180.748250][ T4583] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.888164][ T4583] device bridge_slave_0 left promiscuous mode [ 180.921496][ T4583] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.244063][ T4583] device veth1_macvtap left promiscuous mode [ 182.294377][ T4583] device veth0_macvtap left promiscuous mode [ 182.711453][ T4583] device veth1_vlan left promiscuous mode [ 182.757229][ T4583] device veth0_vlan left promiscuous mode [ 185.789828][ T5176] ubi31: attaching mtd0 [ 185.804438][ T5176] ubi31: scanning is finished [ 186.504041][ T5176] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 187.827240][ T4258] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 188.051728][ T4258] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.073133][ T4258] usb 4-1: config 0 has no interfaces? [ 188.097518][ T4258] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 188.108385][ T4258] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.120813][ T4258] usb 4-1: Product: syz [ 188.125525][ T4258] usb 4-1: Manufacturer: syz [ 188.134558][ T4258] usb 4-1: SerialNumber: syz [ 188.165155][ T4258] usb 4-1: config 0 descriptor?? [ 195.393258][ T5201] vivid-003: kernel_thread() failed [ 195.428690][ T5198] Falling back ldisc for ttyprintk. [ 195.563031][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.570268][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.641486][ T4583] bond1 (unregistering): Released all slaves [ 198.222965][ T5230] ubi31: attaching mtd0 [ 198.235847][ T5230] ubi31: scanning is finished [ 198.849434][ T5230] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 200.713649][ T4583] team0 (unregistering): Port device team_slave_1 removed [ 200.826909][ T4583] team0 (unregistering): Port device team_slave_0 removed [ 201.010178][ T4583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.391655][ T4583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.893799][ T5247] vivid-002: kernel_thread() failed [ 203.227928][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 203.240260][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 203.250537][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 203.265378][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 203.286635][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 203.307651][ T4287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 203.819314][ T4286] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 203.831113][ T4286] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 203.831559][ T4583] bond0 (unregistering): Released all slaves [ 203.914622][ T5269] ubi31: attaching mtd0 [ 203.930628][ T5269] ubi31: scanning is finished [ 204.554475][ T4286] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 204.570970][ T4286] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 204.589405][ T4286] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 204.598874][ T4286] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 204.625944][ T5269] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 204.832066][ T5204] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 204.846849][ T5204] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 204.854176][ T27] audit: type=1800 audit(1755652770.185:2): pid=5204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.220" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 204.860359][ T5204] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 205.091664][ T7] usb 4-1: USB disconnect, device number 4 [ 205.298985][ T4287] ------------[ cut here ]------------ [ 205.306038][ T4287] WARNING: CPU: 0 PID: 4287 at net/bluetooth/hci_conn.c:667 hci_conn_timeout+0x24f/0x450 [ 205.318192][ T4287] Modules linked in: [ 205.322324][ T4287] CPU: 0 PID: 4287 Comm: kworker/u5:8 Not tainted 6.1.148-syzkaller #0 [ 205.331603][ T4287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.343227][ T4287] Workqueue: hci3 hci_conn_timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 205.348720][ T4287] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 205.355427][ T4287] Code: 1f 8e e8 a4 4f af f8 48 8b 35 75 c9 fd 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 16 87 31 f8 e8 e1 32 5f f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 205.377608][ T4287] RSP: 0018:ffffc90004507c08 EFLAGS: 00010293 [ 205.385309][ T4287] RAX: ffffffff89218b7f RBX: ffff8880752fe330 RCX: ffff88801f3a0000 [ 205.387885][ T4286] Bluetooth: hci5: command 0x0409 tx timeout [ 205.394075][ T4287] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 205.409898][ T4287] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed100ea5fc03 [ 205.419312][ T4287] R10: ffffed100ea5fc03 R11: 1ffff1100ea5fc02 R12: dffffc0000000000 [ 205.429239][ T4287] R13: dffffc0000000000 R14: ffff8880752fe000 R15: ffff8880752fe010 [ 205.439559][ T4287] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 205.460906][ T4287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.470537][ T4287] CR2: 00007fb8f9031700 CR3: 000000004c1b2000 CR4: 00000000003506f0 [ 205.479465][ T4287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 205.489204][ T4287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 205.499137][ T4287] Call Trace: [ 205.503284][ T4287] [ 205.506524][ T4287] ? process_one_work+0x7a1/0x1160 [ 205.513685][ T4287] process_one_work+0x898/0x1160 [ 205.520077][ T4287] ? worker_detach_from_pool+0x240/0x240 [ 205.527379][ T4287] ? _raw_spin_lock_irq+0xab/0xe0 [ 205.533290][ T4287] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 205.539231][ T4287] ? kthread_data+0x4b/0xc0 [ 205.544940][ T4287] worker_thread+0xaa2/0x1250 [ 205.550235][ T4287] ? __kthread_parkme+0x162/0x1c0 [ 205.556612][ T4287] kthread+0x29d/0x330 [ 205.561503][ T4287] ? worker_clr_flags+0x1a0/0x1a0 [ 205.567309][ T4287] ? kthread_blkcg+0xd0/0xd0 [ 205.572222][ T4287] ret_from_fork+0x1f/0x30 [ 205.577358][ T4287] [ 205.580508][ T4287] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 205.589150][ T4287] CPU: 0 PID: 4287 Comm: kworker/u5:8 Not tainted 6.1.148-syzkaller #0 [ 205.600039][ T4287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.611367][ T4287] Workqueue: hci3 hci_conn_timeout [ 205.617563][ T4287] Call Trace: [ 205.621323][ T4287] [ 205.625076][ T4287] dump_stack_lvl+0x168/0x22e [ 205.630808][ T4287] ? memcpy+0x3c/0x60 [ 205.635379][ T4287] ? show_regs_print_info+0x12/0x12 [ 205.642898][ T4287] ? load_image+0x3b0/0x3b0 [ 205.648078][ T4287] panic+0x2c9/0x710 [ 205.652256][ T4287] ? bpf_jit_dump+0xd0/0xd0 [ 205.657948][ T4287] ? ret_from_fork+0x1f/0x30 [ 205.663760][ T4287] __warn+0x2f8/0x4f0 [ 205.668753][ T4287] ? hci_conn_timeout+0x24f/0x450 [ 205.675549][ T4287] ? hci_conn_timeout+0x24f/0x450 [ 205.683474][ T4287] report_bug+0x2ba/0x4f0 [ 205.688834][ T4287] ? hci_conn_timeout+0x24f/0x450 [ 205.695042][ T4287] handle_bug+0x3a/0x70 [ 205.700384][ T4287] exc_invalid_op+0x16/0x40 [ 205.706037][ T4287] asm_exc_invalid_op+0x16/0x20 [ 205.711823][ T4287] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 205.721175][ T4287] Code: 1f 8e e8 a4 4f af f8 48 8b 35 75 c9 fd 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 16 87 31 f8 e8 e1 32 5f f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 205.745041][ T4287] RSP: 0018:ffffc90004507c08 EFLAGS: 00010293 [ 205.752358][ T4287] RAX: ffffffff89218b7f RBX: ffff8880752fe330 RCX: ffff88801f3a0000 [ 205.763681][ T4287] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 205.775639][ T4287] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed100ea5fc03 [ 205.785415][ T4287] R10: ffffed100ea5fc03 R11: 1ffff1100ea5fc02 R12: dffffc0000000000 [ 205.798794][ T4287] R13: dffffc0000000000 R14: ffff8880752fe000 R15: ffff8880752fe010 [ 205.825387][ T4287] ? hci_conn_timeout+0x24f/0x450 [ 205.833403][ T4287] ? hci_conn_timeout+0x24f/0x450 [ 205.840203][ T4287] ? process_one_work+0x7a1/0x1160 [ 205.846242][ T4287] process_one_work+0x898/0x1160 [ 205.851869][ T4287] ? worker_detach_from_pool+0x240/0x240 [ 205.859344][ T4287] ? _raw_spin_lock_irq+0xab/0xe0 [ 205.865320][ T4287] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 205.871449][ T4287] ? kthread_data+0x4b/0xc0 [ 205.876704][ T4287] worker_thread+0xaa2/0x1250 [ 205.882977][ T4287] ? __kthread_parkme+0x162/0x1c0 [ 205.889883][ T4287] kthread+0x29d/0x330 [ 205.894983][ T4287] ? worker_clr_flags+0x1a0/0x1a0 [ 205.901489][ T4287] ? kthread_blkcg+0xd0/0xd0 [ 205.907293][ T4287] ret_from_fork+0x1f/0x30 [ 205.912069][ T4287] [ 205.916568][ T4287] Kernel Offset: disabled [ 205.923118][ T4287] Rebooting in 86400 seconds..