last executing test programs: 7m44.12007065s ago: executing program 1 (id=9): openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) write$uinput_user_dev(r6, &(0x7f0000000900)={'syz1\x00', {0x0, 0x0, 0x6}, 0x37b4, [0xfeff, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x100, 0xfffffffd, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0xfffffffc, 0x0, 0x530e2754, 0x6, 0x0, 0x0, 0x24004, 0x0, 0x0, 0x105], [0x10, 0xffffffff, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0xbb, 0x400001, 0xfffffffc, 0x5, 0x800, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0xec6a, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x7fffffff, 0xfffffffd, 0x3, 0xfffffffc, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x8c, 0x0, 0x0, 0x4, 0x5, 0x0, 0xfffffffc, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x4000000, 0x80, 0x0, 0x4, 0x0, 0x7, 0x800000, 0x7], [0x10000, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0x0, 0xb78, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x520, 0xd, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2b2, 0x0, 0x9, 0x0, 0x10000, 0x3, 0xfffffffd, 0x0, 0x0, 0x6, 0x10, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x6, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x3, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x1, 0x7fff, 0x0, 0xd, 0x800000, 0xfffffffe, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x3, 0xbfb6, 0xfffffffe, 0x4, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x100, 0x0, 0x6, 0x3, 0xfffffffd, 0x53591b27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x3]}, 0x45c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@mcast1, 0x4e22, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5f}, {0xfffffffffffffffc, 0x0, 0x1}, {0x0, 0x0, 0x8865, 0x2}}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x4, 0x3, 0x1, 0x0, 0xf000000}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 7m40.708116625s ago: executing program 1 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) r3 = socket(0x10, 0x3, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) geteuid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) close(0x3) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r5}, 0x18) r6 = socket$inet6(0xa, 0x2, 0x0) close(r6) 7m38.980568539s ago: executing program 1 (id=15): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd2(0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r6, 0x107, 0xe, &(0x7f0000000100)=0x2, 0x4) r7 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0xa) fchdir(r8) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x0) lseek(r9, 0xffff, 0x1) getdents64(r9, 0x0, 0x4f) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000200)={r1}, 0x1) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000009c0)={{r12}, r13, 0x8, @unused=[0x6, 0x8, 0x9, 0x3], @subvolid=0x4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000bc0)={0x0, 0x8001, 0x4, 0x1}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000fc0)={{r3}, r13, 0x12, @unused=[0x7, 0x6f, 0x9, 0x5], @devid=r14}) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 7m34.372360178s ago: executing program 1 (id=22): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000080)) 7m33.73059156s ago: executing program 1 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) r3 = socket(0x10, 0x3, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) geteuid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) close(0x3) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r5}, 0x18) r6 = socket$inet6(0xa, 0x2, 0x0) close(r6) 7m32.293587268s ago: executing program 1 (id=25): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x20a680, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000000c0)=""/221) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYRES16, @ANYBLOB="010028bd7000fbdbdf250c0000004c0105802c00028008000200da0800000800040003000000080001001d000000080002000000000008000300580f00003400028008000400f9ffffff080002000400000008000300dc0000000800040040000000080002000008000008000200080000003c000280080003000c00000008000200e303000008000300ff07000008000200faffffff080003000400000008000100060000000800020000100000080001007564700008000100756470004c000280080001001f00000008000200020000000800040010000000080004000400000008000200000000000800010001000000080002000008"], 0x160}, 0x1, 0x0, 0x0, 0x28000021}, 0x24008854) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) write$evdev(r1, &(0x7f0000000000), 0xaa6f50) write$uinput_user_dev(r1, 0x0, 0x0) 7m16.050451222s ago: executing program 32 (id=25): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x20a680, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000000c0)=""/221) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYRES16, @ANYBLOB="010028bd7000fbdbdf250c0000004c0105802c00028008000200da0800000800040003000000080001001d000000080002000000000008000300580f00003400028008000400f9ffffff080002000400000008000300dc0000000800040040000000080002000008000008000200080000003c000280080003000c00000008000200e303000008000300ff07000008000200faffffff080003000400000008000100060000000800020000100000080001007564700008000100756470004c000280080001001f00000008000200020000000800040010000000080004000400000008000200000000000800010001000000080002000008"], 0x160}, 0x1, 0x0, 0x0, 0x28000021}, 0x24008854) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) write$evdev(r1, &(0x7f0000000000), 0xaa6f50) write$uinput_user_dev(r1, 0x0, 0x0) 5m0.397300967s ago: executing program 2 (id=369): unshare(0x28040680) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000300)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x1, 0x100) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) unshare(0x22020600) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getpeername$llc(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket(0xf, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000000)={0x1, 0x10}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 4m59.165470791s ago: executing program 2 (id=371): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x590, 0x4) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x200, 0x0, &(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000580), &(0x7f00000000c0)=[0x100000000, 0xfffffffffffffffc]}) openat$vcsa(0xffffffffffffff9c, 0x0, 0x800, 0x0) mount$fuseblk(&(0x7f00000001c0), &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000200001f869a70ece00fcffffff000000000200000000000000120000000c001440800000"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0) socket$packet(0x11, 0x3, 0x300) 4m56.937714484s ago: executing program 2 (id=372): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0x0, 0x206}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc001000, 0x0, 0x0, 0x12, 0x1}) getrlimit(0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f00000000c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, '\x00', 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1, 0x4}) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "00800000000000f51000", "00598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) 4m55.391027454s ago: executing program 2 (id=377): unshare(0x28040680) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000300)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x2, 0x1, 0x100) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) 4m52.192756576s ago: executing program 2 (id=380): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 4m48.205090003s ago: executing program 2 (id=388): syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff6c, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {r3, r4+10000000}}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) setrlimit(0xa, &(0x7f0000000080)={0x4, 0x3}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x24040880) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000340)) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x114, &(0x7f0000000200)=0x8, 0xc06620, 0x4) 4m32.762452472s ago: executing program 33 (id=388): syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff6c, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {r3, r4+10000000}}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) setrlimit(0xa, &(0x7f0000000080)={0x4, 0x3}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x24040880) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000340)) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x114, &(0x7f0000000200)=0x8, 0xc06620, 0x4) 13.787305083s ago: executing program 6 (id=1074): pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000008c0)="4191", 0x2}], 0x1, 0xc) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000140), 0x21c804, &(0x7f0000002600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r4, 0x0, 0x2000000002ffff, 0x0) 12.701507704s ago: executing program 6 (id=1080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)={'wg1\x00'}) 12.093129766s ago: executing program 6 (id=1082): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) r3 = socket(0x10, 0x3, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) geteuid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) close(0x3) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r5}, 0x18) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 10.458451668s ago: executing program 6 (id=1087): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12, &(0x7f0000000600)=ANY=[@ANYBLOB="636f6465706167653d69736f383835392d352c756d61736b3d303030303030303030303030303737372c696f636861727365743d63703836392c00593e6b66dbda701c6930c62a968870c671f6477cb145c6d89cc4842eb0720eecdf2ebd09f8dbf643b0adace8211effc59b60800919356a988fc72124c74383345cffd7c56ca293570c91cd0a246a89578c98a5d7adce29637c1181f1683d5b3c231fc700f5a4d5ade92e536e6d48a33c8fe7196d3c21f85102d71c4a757c811f270651dd6cfe2890f2650fbaa112ebd9f2a722f5811fbfc1b06807a0e87b42b6cc7bbb2fd495cdcb77aaef069c174193a8350150f86d32b86d93bb71ff0af70de640bdf600dca52899a1f64a3cf2350dd993a702353ce0d906412f6301a961fec3049536174a7cadd6be69704ff9c8e45bc92f4ccdfc7626ebd4ad65aa3778bb6797cb9e25f80325f1fa5903d4e6cde04bb0bef07c4fc5a02fa21e6a0a2a000000000000002aaa70aab01fd5b798ffc080975b803acbfccf66f252"], 0x4, 0x339, &(0x7f0000000140)="$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") syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x703342, 0x0) 10.051661495s ago: executing program 3 (id=1089): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200810, &(0x7f0000000240)={[{@ssd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@nodatasum}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 9.005003196s ago: executing program 6 (id=1091): syz_genetlink_get_family_id$ieee802154(&(0x7f0000001bc0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x48}, 0x48) r0 = gettid() mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, 0x0) timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace$getenv(0x4201, r1, 0x7, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x18) r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX]) read$FUSE(0xffffffffffffffff, &(0x7f00000028c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002840)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000002700)="05d8262c57b421691d65068a628b3b6bf6f20eff6564f7cca4968954d393906f9487cc9a7c49b9835377c1893948a3d70b988228867b905ae44bdcce918dcccf6a4bc10d24", 0x45}, {&(0x7f0000000100)="560224c63f188d14f7523f5184080810049daab7c9ebbe04de6597445a1a321557cf945e14b8", 0x26}, {&(0x7f00000016c0)="411c9600c71076242cf118a1f890cd128f7e58583269f4487fccb6899024826b839f407d96d62926957dbc45fe3ce568405cebb944d9e83279f5e701", 0x3c}, {&(0x7f0000002780)="a8a94395d80bb60243e23a951ecc49621584d5c01debcffd5b50271fd54084d3010cbf0714a51eb15eca7ca809d371da8357c0def0f1f9127b9226d261f8ba7665ddeeb2acb09207e9bebd8a05895d59e500fe3393d3f5f02c39b442baf34bc1d01e86dc12cf521ad1ae9869eb4ad4e1e0aa3b912fcd1ac35d81d0c457c1922707a122276a98a7756c9071c271cd11639731714dc80712f8039c8f9a", 0x9c}], 0x5, &(0x7f0000004900)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00, r4}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}], 0x58, 0x40}}], 0x1, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r5, &(0x7f0000000240)=[{&(0x7f0000000540)=""/206, 0xce}, {&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/208, 0xd0}], 0x3) 7.478996515s ago: executing program 6 (id=1096): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) 7.301058558s ago: executing program 3 (id=1098): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") open(0x0, 0x20041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) lstat(&(0x7f0000001fc0)='./bus\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/11, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) 7.19055758s ago: executing program 4 (id=1099): r0 = semget$private(0x0, 0x20000000102, 0x0) semctl$SEM_STAT(r0, 0x2, 0x12, 0x0) semop(r0, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x1, 0xe65b}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) 6.414252686s ago: executing program 4 (id=1100): unshare(0x28040680) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000300)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x1, 0x100) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) unshare(0x22020600) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getpeername$llc(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket(0xf, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 6.258593789s ago: executing program 0 (id=1103): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x22281, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r5, 0x40046104, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r6 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x8b) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000000)='ro\x00', &(0x7f0000000080)='./file0\x00', r7) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x200c008, &(0x7f0000000300)='usrquota') r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r8, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) close_range(r0, 0xffffffffffffffff, 0x0) 5.797732168s ago: executing program 5 (id=1105): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, 0x0) chdir(&(0x7f0000000440)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f00000007c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0x7, 0x5, 0x1, {0x0, 0x181, 0x3, 0x5, 0x87, 0xd615, 0xffff, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0xcea, 0x1}}, {0x0, 0x10}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 5.14552807s ago: executing program 0 (id=1106): syz_genetlink_get_family_id$ieee802154(&(0x7f0000001bc0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x48}, 0x48) r0 = gettid() mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, 0x0) timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace$getenv(0x4201, r1, 0x7, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x18) r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX]) read$FUSE(0xffffffffffffffff, &(0x7f00000028c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002840)=[{&(0x7f00000006c0)="0c77bb60c1f1d48dcee15794a71008532260c61581850a6ec3644fec634bcee3fa12cd72afff2e261d2807cf83c1518d0923d84dd2ace9d2e55b999dd1c6d711bb50a4f056d78e1d045fedff66ff9af5658e3fa700c62381e41c09e509e80900c7882a7bb8b2ca0f2dbdd158b70233675fbc970664101d823237db4e1c980d95c1c2237eda08827a4399e2962f6651a17c8926a9819ae659de2717315854829730a527893063522b32abcaaf40e913e70db58ae55b8c364d263fa15ebf4f5ae3613b93e2432b9600b823597aa1513f1cb3059fdc14d0a23be8d9177fc7139270e5e30c170291cd41ac2c00de4b48177948131f219417864f8ac715302cc670add34cc28db2e207eb39bc3d05fcb14114e5bf90b3de1a5bb4ced3d436e0ff032a3cc3a61f3a840b76dda362404c3159880e5889a64f09fc076180b1818082d020cb3ee9fcac6d98c02ad7e04b5e378dfa9ffef615cbef914dded2ae012e26d66418b2dfefaacb20c24ff13a97d2ee70eec123d19935912913d9be039a584c6f7ee82737549f7015788accce6014fe50d99474874a2430aefcff969f1baa8727c8bf8f6ec7897eb3616204847a3f6666ce3056d67688ad2b88a725322046c79c9f579086093ba862b543621330ec317212518934a926c9991b73fde48baf65849c860a3c4f2f6e1791ded2c631ac26e5c9d91108011688ce45fdd58e320063bd30aab01ea7ba1e5e4bcb69fd29862410280462471a1bd94bd4dffa9c774936ce2ee28b79351bfec0553b73124f3c367d7940e5eb0d5d4d1d89a8e362f80414169ada8feebd561b5d58823baec8b27edcc4c3c2bd706d5dffdf5daf5a009ef1369a725b5fb706a07c602f35665611377af8c5dec76174b53ae4269ede9de3a0d16b018f96819964b8473be08d875caada79a2c1740a018843fad42469a026eb100b293864de22b24db25bec96051a447c8c57ff366f8dac00987e6be98e6248662e565ad18f2952bc5846787dea22792efc5cee97eb1a592a95ed1eb130c8fac734d575080eb2a943ddb5559414f101070125adb3beea15c8f5b8f5041f862ebe156e009b386468b400f0c784cf1b144bcae535967934f16b848a6cc7bd79e007726498448b46b2da04f839743ec98852823382678d06be39a92f53f2da63cfa7635d4dfced9f2a8fc9b5a8c2ad411c8d5faef9b182d4dd6be820986bdb8f232baf11864f70537549399c9bb456b1df061c59030e3dd262554b34046c47551461b6bb6bfe02e5802b178789df2acf3d29e0c38a35e58a966b19c8ec610e092dcba6b78bbe21779a486ed2b470c8d7b4e6af0a204e30cdb3002c840aedc42bf1a9943f37eee13bae6f4f89b802bc7cd337285128f40720526595164a13d63692f817249443365b2fd2b561bb7fc52e18d45ba85cc02d3f60a5427354703e9b19c9c79093743d3d9e772afa3d704485ecfdee6c447623e68ff15b2523e7ca96b8b4a35b6c3ed12297a7aee69e9cb4eeebf359fc98416b54e0cd4d02dcc423a34e24d98d70d296fc1d50187cf5849e0148988074664f12766d708c9e44dac211fe4d380fcca16ba0332836511ec1f200a04b301259a16b4a9e4a29333812fe8d800de8a7d3392a3b93b791bf4753a97dd28ea29ba7795c4f0209d4fae981e33ee6d70370b2488c01e8eeed5477b5148ce5f28f6875fc2c7f7679a61d2cb40eb90e4e590b6ad854d04a143062eb60fffca5e96e7306986397759295ed6856e55c4e3f38b7e7a98e6bd99aa076a4d27080100c9bd8999e44be9f2aa6dacb5ba5b13f24fe940c3ae2e08c13012f09598a8318a621c6c70202e93d36f595e4ccd28deb1b54493dd49f75a3e738d4a30d0a44c5b41191f257582b4c2c94cd97ce65afb61fc8cf04a7f41498bd82a396f1b624ab4f4986412ebcacc512090e80140bcdbf5e0780109eb37b2a6e61542314f6d75dc8336da545d55d0cb7b3a319db3ad20712b0c956e4e81d24a34362a776dc86e002416a0e613fe8753ce6e4b121b7792536ebf098941886dfccbf7cbd97c200cc4685fd21341d6a6dd00f85c0524437b8950415b8e64fa1c8af1541d28365eebf2aa85c19a7abb626964834ce32b6145e5ca5d972087ee3c28c191ecc922523862f02c3eccd3424d6f2628dd7b2dc9d4bb6c42696ba15de070dfc5a4a93335a98ee2e1ee23d0796e0b9980b1dce857b2cace558b4a93eb1588cc0ae98a049a6c4136c7c3d45f4f2da39fe82e779439d3ddcd9a5d428b388fd028d4f4c5dfd7e8311c7258f31e654badb30d713d58dd0ee72e0ddfb7e6b5b24ef0d467ec59af7caadca4cf73385436d8694843ceeaaae8b00249fac77676c04ba9e513fceca26c5610e480bc239c8eb72a51f27cb1a2aabba8fb13ca55e5c388eb9db6950220012a5aa513fab0b86f76b6a04577fa9c14d0555529e8dd55093a3212d47b252e483e9a85db62330eeecf1e34e54d010e5fca8d17c9544e33e6eb7558f8878b089a201f74d53ce5881ed968703a0b0d10cfa899fb50b79ce1c13c447d943eb3fc18fda1f3923c2398c58ad2b290e594d41a9f1fa98f7360e52aa111b836c1cca2a659a1fecf01840b343ee7a28047efc97e5fdcb5325ccb0cd8c7bafa25557fa54a9d8b4724319e753b2a3dc59aaf20f3ca281a5d45f72117368bc0a3a309e58a5760f38a8e0fe67a8911a85f113515285121ff6082097a9282ba55b379146336f639c9116f704a2b49998883620a57d80468e3013f0ffd7d1856d153c11ddefc57af540d0dff952236f419c3af0741de15e1926bbf0f32636f558bf8e184e5706898173fb9874eae10746463b0882855af733b2fe419f4155912f548ac53057f1e83d12e0ddd52d597b549b06b03ff2d5bf8df18fe26c55374dac13449b63b19e528086c0ea28e33bec2249072c8723f75793f0d7207264023c6eeffdac74470c6b524e1440a2ed34e8f245eab5223028860b7491f46efc033f5d0d47bb29a183c6e8c0b82059f087c0ee09875531f5460b6dff4b2c59f8ef61affe27edde4ca72bd0a088126709f22d00c72709b51a84525c67ed511eafc03451c81e915cf817997f9b344d158983622a2842b1d5e4704c3c41663faa8c9fb727e8d5931d2300920db3c045d75491acb64528129eaede375bd33c4f4b5476137c881bff8a6ce78f29651eee753794bc89dcfb7cc3fce206ad211f7300e0ee9ca6988609d2a84bbc057cbdc07b672cc7374f7b55df5a03ab77ee4f853b3166e734300456d33f047a6adf313aedf34ca3b8b16bc44524ffa4a7d3254ebf7876df0e4f90ba7f6ca6e1fff1a7fb506151f31fbd43cebd5a43b43dcee45824e15bec3d81ce6366abd3297e58c7604cefe99ac761aef78d369c0c669ecb31ef76034b07c84c7294f385212aa7220e66e5519c8cd80d803a1ff699256897bf20b9b30448833444d3e0801f7148580592d2f3aeaf7acc9c8ef4de1464d3c100fee316ff11cd7d9aab2a8d4901ae858026fe3f43948092c7a359c58238e21333574bbc4db7f075c76a4425ed6f03b33bb6f3e591986d9c6c52107e06863285b5979e633917c06e42af335f7e98c4182415b4798725dcb82c8653eed9ec196cbd984dec9adc74615945a5d5f8ec48ce49d75ea0a8836e207873b59e1ea125cf256123e8a46246c9b91b4bae8017a36b9938a180bd264958123fda63da94fe33463ca5f38147aa827426ae4280c71dabb9857d5db08744320d553b6a601b0e3a34b5843d95ae0bfd11a82c881d932688f4152a6225940ff4d4968c4b191102c795736822bf8b8a8581c7468b48e839a93aac55a2a64a32395675fc678b94033dc701951151bcf635f63d11bbc7d51cf41bf185a305089822ae90f135fb494cdade78155fee41bb6d70144a849622c0f57a3c4a78bc15dff92be1ef9681555d55d2eb77283759b6fff86469a9fea2bb7f9b3f1b008d625a724326207f9cc0ff03c3b1b56ca16ffa70d54f87e5fc8dad5e441129f9a2df0586ff0723dc30cb2897199d4e711d319e6eabe45b45c783bf13455cf5e072815ec28cb6fe525ca137166b7a273e2755ad522bbb8a96695752bfaeae686d2ad0c3ff61ce2959ba6f17a2e6ebeb6492e08c9b064d59b6d5404c4928270127f54719cf4236a8d030f0b975476d8c0a707525c974403d6d4a0ab9fd18f6c55b417ccf5942dc0bfbc816cd91cd1b0841df2818959f024926e5e45c638ab7eb2fd8b36aedc32cda1e2165a14ee391f4d0abce550bb6a2151260a26b5b41c4c9b2ebc74f3ba7900ae4aaffba7f1634f04ec03f4924cd0b610f08caae62e7a4de26d7b126538dec427e0ed163bb7d7e561a125ae0f51d6eb469804a457f2ac1f0f9002102c1132f15091ddfa0e0b68fcd77b19355ccf1442c114c337f644e0d83df0a8bcd0bc0bc6362cbfa0974abe4bf2ff833efa171bf167dea20b95b2c20f4ae63030ed9d97eaa648282c40f57fb9a03499f321c4406a42245033e607a458c94e80101050fbbeb7757fa1071aa4c10a68a3b10d3eb8ee428e8d35b52ade9ed4930bace37094ea41701493dff39bee946a3ebfe437ff11e8cc3e6c187174a79b9c9245b25ebda6da942f31f90180ef481dde4b07b96efb4f7b248ed95630ef41a64bbc329a142ed2e24626a01cfa9e6893e754dd102ee1b53cde3a8f42c6bd69798f378a09aca72eda30c0875647db630e2cde71d919fa809532ac57fac02215b23aa7c8f850fa3afb2cd2524f84020df3abb8f73d65eb4ab2cddd41b1d0007898c908d80aee1daae66a989524fc635bb39c08ac670296561048679a4b4c6e44d9253a533c8913fb23dea247d0ce18c951d5d74e4286064a6f130e1082081f53de24e25312468e3d4ee6e9b58fec9b6a9c5876facea6b00b3fb160e55cea02c8227e9fe9d89e9e041c91feac7ccd427159fdd0df9f393e40e6e5309ecada22b141766eb6012a94bd9fbda89a87203af0b9955bf6172449042ea8e3c47b81a35eac8f7b4f3b23ec0e5e86bbd3502ef1865908984376adfb03838dd5f82f8940428060ecf90ad0eeae4699a75751034adb6bfb08918a3e3f058d10070922d4fac8fe34dbbab496bbec96ff578a810a1d2cd2979b633319b2204521e2966e8c2f30ca78af73703e1435eabe65dea500e4ec8c9d6b45a8b0ff0e279150c70f62eec0d6d601318b2b3a874336842f7220ae1f6a87248c2a17cfbbffd83694e3efcda8db61f1f87133e6a828692119797edf8a6d1371b1676517930076dd3e96581a9c13592932f684dcdccad058bb9398ed024b5168a6f5da066cb61837a16e7c0828a18adb6e6789df86790326360e748a574b349833067b6cb90dc3a3b03edfe97970c9a5acf1c5ebce83dfa00e793c8c0c025d8cb9f819667a8b844be6a1ef039481f5ec18d850ff6b28176dd9940e2dba71405514e81cb9aaeca2b218cc089ed76db1ad674f2108d324cf19089a121d08a7393c8529afe6370115c8adcb605bb3788eca258761ec94666bd1ff80fce4b3182f45bfa261f34104153db895627a5e6bb42774e24fefd94ee818a71edac5ecfda547da4b85abdfc9ff8e7effa446505a12501ced2442cae8c22a7628f5fdc15484692f5e6c8ea965f5bae2e979f7785375eb8c9f75000e0da91bf22b09b3ce282c0580359ceafd25327a93f801edb62775a4a52019c52a4b5860187f87455a0e78c92df47dc44ea97723b83e2dd8688c3d97ba7984b8ab9ff779239cca4a85c1f7c47443a1d11b8ff4b4fce88c04ae7a92375548961d831c7a30b", 0x1000}, {&(0x7f0000002700)="05d8262c57b421691d65068a628b3b6bf6f20eff6564f7cca4968954d393906f9487cc9a7c49b9835377c1893948a3d70b988228867b905ae44bdcce918dcccf6a4bc10d24", 0x45}, {&(0x7f0000000100)="560224c63f188d14f7523f5184080810049daab7c9ebbe04de6597445a1a321557cf945e14b8", 0x26}, {&(0x7f00000016c0)="411c9600c71076242cf118a1f890cd128f7e58583269f4487fccb6899024826b839f407d96d62926957dbc45fe3ce568405cebb944d9e83279f5e701", 0x3c}, {&(0x7f0000002780)="a8a94395d80bb60243e23a951ecc49621584d5c01debcffd5b50271fd54084d3010cbf0714a51eb15eca7ca809d371da8357c0def0f1f9127b9226d261f8ba7665ddeeb2acb09207e9bebd8a05895d59e500fe3393d3f5f02c39b442baf34bc1d01e86dc12cf521ad1ae9869eb4ad4e1e0aa3b912fcd1ac35d81d0c457c1922707a122276a98a7756c9071c271cd11639731714dc80712f8039c8f9a", 0x9c}], 0x5, &(0x7f0000004900)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00, r4}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}], 0x58, 0x40}}], 0x1, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r5, &(0x7f0000000240)=[{&(0x7f0000000540)=""/206, 0xce}, {&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/208, 0xd0}], 0x3) 3.948740653s ago: executing program 3 (id=1107): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000000), 0x12) 3.802063526s ago: executing program 5 (id=1108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}}, 0x44084) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x15, 0x3, 0x2, 0x87}, {0x6000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xe, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x2, 0x1500, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.801651786s ago: executing program 0 (id=1109): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@ng={0x4, 0x5}, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.801501276s ago: executing program 4 (id=1110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001000)={0x28, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x6, 0x34, @random="0162"}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x28}}, 0x0) 3.540578491s ago: executing program 4 (id=1111): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="ffffe0920fcc73f5b6b58f8fd6b9", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.528710172s ago: executing program 0 (id=1112): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) r3 = socket(0x10, 0x3, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) geteuid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) close(0x3) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r5}, 0x18) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 3.519881062s ago: executing program 5 (id=1113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000e168b745d971f1261c0ba748ac286d198c39fe9872f60d6ab3279d8cb4c45730fad28593c6f208bc4def"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000f80)={0x1f, 0x8001, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000280), 0x4) 3.250376717s ago: executing program 4 (id=1114): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="240000002c00010026bd7000fcdbdf250400000005000b000000000008000c00", @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) 2.087592119s ago: executing program 3 (id=1115): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x10000}], 0x2, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 2.038277051s ago: executing program 5 (id=1116): r0 = socket$netlink(0x10, 0x3, 0x9) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0xd) 1.949057512s ago: executing program 5 (id=1117): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") open(0x0, 0x20041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) lstat(&(0x7f0000001fc0)='./bus\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/11, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) 1.605059969s ago: executing program 3 (id=1118): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, 0x0) chdir(&(0x7f0000000440)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f00000007c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0x7, 0x5, 0x1, {0x0, 0x181, 0x3, 0x5, 0x87, 0xd615, 0xffff, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0xcea, 0x1}}, {0x0, 0x10}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 1.602870169s ago: executing program 4 (id=1119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c646174615f666c7573682c66617374626f6f742c6a71666d743d76667376312c6e6f696e6c696e655f64656e7472792c7573726a71756f74613d66326673002c00ff371013587045d0d273e856ce75c2b11120ece6d6a76856a2cdd8c835ef14aa3aea583b7f3affd12ff9abc9b21098874a75607f009920ad1a283ce7b8b528e239692ab156e30dd8365f708e6c98cfcd0b30d5304dd70f87da026e2d4e4df1ad07ba72683f43d76541d455d1fa118f0900000009fe28bfded255e7c5806f05b80ec0e186b4f72759eb096a1fe6793e734fe61555f01ff9f23bc11370aa247215e8f1410ea4728bb2a2c2d20bc5e61b0a4c7ddb25da21c75f35f711581d1f5b8db3be07c80000000000000000"], 0x1, 0x54f4, &(0x7f0000005600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x8841, 0x119) fallocate(r1, 0x20, 0x0, 0x8000) 1.317120544s ago: executing program 0 (id=1120): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8) 269.063725ms ago: executing program 3 (id=1121): syz_genetlink_get_family_id$ieee802154(&(0x7f0000001bc0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000", @ANYBLOB="011026bd7000fcdbdf2524000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x48}, 0x48) r0 = gettid() mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, 0x0) timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace$getenv(0x4201, r1, 0x7, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x18) r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX]) read$FUSE(0xffffffffffffffff, &(0x7f00000028c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002840)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000002700)="05d8262c57b421691d65068a628b3b6bf6f20eff6564f7cca4968954d393906f9487cc9a7c49b9835377c1893948a3d70b988228867b905ae44bdcce918dcccf6a4bc10d24", 0x45}, {&(0x7f0000000100)="560224c63f188d14f7523f5184080810049daab7c9ebbe04de6597445a1a321557cf945e14b8", 0x26}, {&(0x7f00000016c0)="411c9600c71076242cf118a1f890cd128f7e58583269f4487fccb6899024826b839f407d96d62926957dbc45fe3ce568405cebb944d9e83279f5e701", 0x3c}, {&(0x7f0000002780)="a8a94395d80bb60243e23a951ecc49621584d5c01debcffd5b50271fd54084d3010cbf0714a51eb15eca7ca809d371da8357c0def0f1f9127b9226d261f8ba7665ddeeb2acb09207e9bebd8a05895d59e500fe3393d3f5f02c39b442baf34bc1d01e86dc12cf521ad1ae9869eb4ad4e1e0aa3b912fcd1ac35d81d0c457c1922707a122276a98a7756c9071c271cd11639731714dc80712f8039c8f9a", 0x9c}], 0x5, &(0x7f0000004900)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00, r4}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}], 0x58, 0x40}}], 0x1, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r5, &(0x7f0000000240)=[{&(0x7f0000000540)=""/206, 0xce}, {&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/208, 0xd0}], 0x3) 209.804466ms ago: executing program 0 (id=1122): unshare(0x28040680) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000300)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x1, 0x100) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) unshare(0x22020600) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getpeername$llc(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket(0xf, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 5 (id=1123): syz_io_uring_setup(0x110, &(0x7f0000000040)={0x0, 0xfad9, 0x1000}, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="c3"], 0x48}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): link becomes ready [ 72.108042][ T1481] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.115261][ T1481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.149880][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.170454][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.183550][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.193263][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.208705][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.231257][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.244767][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.269444][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.289221][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.300163][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.316844][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.325811][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.335634][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.344870][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.355274][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.363988][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.374388][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.389612][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.431521][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.454450][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.483606][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.491876][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.506668][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.521238][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.552971][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.566152][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.577685][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.589024][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.596257][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.612470][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.620697][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.635194][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.658879][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.666436][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.697435][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.705619][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.714890][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.722992][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.733084][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.742100][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.749214][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.760760][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.791976][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.831059][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.843961][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.852810][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.860109][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.869195][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.877893][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.886942][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.900396][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.910559][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.922013][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.931223][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.940253][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.949747][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.959560][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.968823][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.975899][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.983884][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.007793][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.025218][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.035883][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.049490][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.057469][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.066695][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.075572][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.084824][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.093839][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.102118][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.110631][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.119788][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.129375][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.144070][ T4182] device veth0_vlan entered promiscuous mode [ 73.160165][ T4182] device veth1_vlan entered promiscuous mode [ 73.173056][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.181752][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.190184][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.197990][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.207234][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.248963][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.259490][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.268137][ T1481] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.275401][ T1481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.285570][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.295143][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.303606][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 73.308384][ T4227] Bluetooth: hci2: command 0x041b tx timeout [ 73.312446][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.325341][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.336555][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.349689][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.358062][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.367641][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.376190][ T1481] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.383287][ T1481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.388593][ T4227] Bluetooth: hci3: command 0x041b tx timeout [ 73.391518][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 73.403224][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.411329][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 73.412707][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.426438][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.442811][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.451455][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.465794][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.485448][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.511994][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.522381][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.541269][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.566534][ T4182] device veth0_macvtap entered promiscuous mode [ 73.580925][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.596017][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.608463][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.617319][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.641538][ T4182] device veth1_macvtap entered promiscuous mode [ 73.662794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.671169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.682071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.717494][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.731723][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.746405][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.760809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.774242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.796520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.806039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.815778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.825029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.834229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.842120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.850953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.860424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.873050][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.884905][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.894639][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.904622][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.914210][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.940298][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.963273][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.001006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.010104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.018476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.027357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.105145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.114782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.124733][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.132077][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.140482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.149856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.159118][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.166186][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.174295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.182851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.192181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.201391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.211325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.224560][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.299568][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.310461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.319444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.329613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.339645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.349347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.358580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.367207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.375992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.384365][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.392655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.403113][ T4184] device veth0_vlan entered promiscuous mode [ 74.430220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.440015][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.454508][ T4184] device veth1_vlan entered promiscuous mode [ 74.479416][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.485128][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.487565][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.507897][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.515786][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.532174][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.545498][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.575819][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.604836][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.631097][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.657066][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.658645][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.672185][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.696162][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.718962][ T4184] device veth0_macvtap entered promiscuous mode [ 74.760777][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.779841][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.799205][ T4184] device veth1_macvtap entered promiscuous mode [ 74.842082][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.880671][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.927388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.944736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.956665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.970471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.984548][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.997354][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.013061][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.029694][ T4186] device veth0_vlan entered promiscuous mode [ 75.042153][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.052478][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.069114][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.081650][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.093484][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.102064][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.111502][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.123892][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.133007][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.146448][ T4186] device veth1_vlan entered promiscuous mode [ 75.160017][ T4183] device veth0_vlan entered promiscuous mode [ 75.171926][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.180486][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.189461][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.205455][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.216453][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.224442][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.234159][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.243039][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.251972][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.261164][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.283596][ T4183] device veth1_vlan entered promiscuous mode [ 75.292617][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.331901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.341063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.353235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.362776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.378747][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 75.384741][ T4186] device veth0_macvtap entered promiscuous mode [ 75.391334][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 75.426947][ T4186] device veth1_macvtap entered promiscuous mode [ 75.447027][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.455851][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.464589][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 75.468618][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 75.472670][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.479927][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 75.486423][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.500025][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.509113][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.536049][ T4183] device veth0_macvtap entered promiscuous mode [ 75.564715][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.573614][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.582129][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.595210][ T4183] device veth1_macvtap entered promiscuous mode [ 75.607116][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.622003][ T1481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.627265][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.642429][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.648555][ T1481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.653371][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.674369][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.683759][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.692707][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.702443][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.712179][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.726814][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.736537][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.783463][ T4185] device veth0_vlan entered promiscuous mode [ 75.797882][ T4304] loop1: detected capacity change from 0 to 512 [ 75.806182][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.817634][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.829383][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.840124][ T4304] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.854356][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.869589][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.884066][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.899109][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.912408][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.923389][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.933730][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.939574][ T4304] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 75.952848][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.954671][ T4304] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 75.973560][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.983468][ T4304] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.6: Failed to acquire dquot type 0 [ 75.994746][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.004574][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.012168][ T4304] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.6: corrupted inode contents [ 76.018555][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.038764][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.047978][ T4304] EXT4-fs error (device loop1): ext4_dirty_inode:6040: inode #16: comm syz.1.6: mark_inode_dirty error [ 76.061567][ T4304] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.6: corrupted inode contents [ 76.074137][ T4304] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.6: mark_inode_dirty error [ 76.081746][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.094738][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.104567][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.106952][ T4304] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.6: corrupted inode contents [ 76.116210][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.136491][ T4304] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 76.140068][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.156531][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.165490][ T4304] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.6: corrupted inode contents [ 76.166810][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.188735][ T4304] EXT4-fs error (device loop1): ext4_truncate:4273: inode #16: comm syz.1.6: mark_inode_dirty error [ 76.190453][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.201115][ T4304] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 76.211339][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.230448][ T4304] EXT4-fs (loop1): 1 truncate cleaned up [ 76.232517][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.236136][ T4304] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.247963][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.273731][ T4185] device veth1_vlan entered promiscuous mode [ 76.274406][ T4304] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.302018][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.311660][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.323561][ T1481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.342210][ T1481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.351194][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.369799][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.380585][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.389569][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.414472][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.454586][ T4304] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.6: iget: bad i_size value: 1407374883557376 [ 76.486034][ T4304] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.6: iget: bad i_size value: 1407374883557376 [ 76.520133][ T4304] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.6: iget: bad i_size value: 1407374883557376 [ 76.525153][ T4185] device veth0_macvtap entered promiscuous mode [ 76.563130][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.578778][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.596554][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.605786][ T4310] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.6: iget: bad i_size value: 1407374883557376 [ 76.611501][ T4309] loop0: detected capacity change from 0 to 4096 [ 76.640728][ T4185] device veth1_macvtap entered promiscuous mode [ 76.678750][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.687052][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.723688][ T4310] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.6: iget: bad i_size value: 360287970189639690 [ 76.751764][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.761625][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.766543][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.783243][ T4309] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.815195][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.824278][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.832019][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.873708][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.942302][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.984918][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.996720][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.007341][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.018228][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.030906][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.040264][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.061029][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.069622][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.115252][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.373911][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.727629][ T4249] Bluetooth: hci0: command 0x0419 tx timeout [ 77.748569][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 77.760759][ T4262] Bluetooth: hci2: command 0x0419 tx timeout [ 77.766928][ T4262] Bluetooth: hci4: command 0x0419 tx timeout [ 77.773588][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 77.783693][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.795228][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 77.815470][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 77.877285][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.895474][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.906330][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.919607][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.929501][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.941334][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.951671][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.962455][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.976239][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.003416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.029684][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 78.041083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.055328][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 78.090597][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.108863][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.117803][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.128859][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.151536][ T1481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.210891][ T1481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.279682][ T4318] loop1: detected capacity change from 0 to 128 [ 78.317327][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.418325][ T4322] syz.0.7[4322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.418951][ T4322] syz.0.7[4322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.778105][ C0] sched: RT throttling activated [ 80.079437][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.783370][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.333492][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.348680][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.372066][ T4339] input: syz1 as /devices/virtual/input/input5 [ 82.409841][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.535652][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.548964][ T4243] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 82.621563][ T4243] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 82.642603][ T26] audit: type=1326 audit(1757666063.779:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49915bba9 code=0x7ffc0000 [ 82.683601][ T26] audit: type=1326 audit(1757666063.799:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe49915bba9 code=0x7ffc0000 [ 82.706142][ T26] audit: type=1326 audit(1757666063.799:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49915bba9 code=0x7ffc0000 [ 82.728420][ T26] audit: type=1326 audit(1757666063.809:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fe49915bba9 code=0x7ffc0000 [ 82.750458][ T26] audit: type=1326 audit(1757666063.809:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49915bba9 code=0x7ffc0000 [ 82.996175][ T26] audit: type=1326 audit(1757666063.809:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe49915bba9 code=0x7ffc0000 [ 83.024028][ T26] audit: type=1326 audit(1757666063.809:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49915bba9 code=0x7ffc0000 [ 83.763716][ T4243] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 83.772060][ T4243] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 83.779797][ T4243] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 83.787240][ T4243] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 83.794778][ T4243] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 83.841933][ T26] audit: type=1326 audit(1757666064.119:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe49915bba9 code=0x7ffc0000 [ 84.188012][ T4243] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 84.207896][ T4243] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 84.215658][ T4243] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 84.226534][ T4243] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 84.234462][ T26] audit: type=1326 audit(1757666064.119:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49915bba9 code=0x7ffc0000 [ 84.267465][ T4243] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 84.275832][ T4243] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 84.286863][ T26] audit: type=1326 audit(1757666064.129:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe49915bba9 code=0x7ffc0000 [ 84.311869][ T4243] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 84.320270][ T4243] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 84.335762][ T4243] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 86.744849][ T4350] fido_id[4350]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 86.882604][ T4374] loop4: detected capacity change from 0 to 128 [ 86.906192][ T1108] cfg80211: failed to load regulatory.db [ 89.351722][ T4386] loop4: detected capacity change from 0 to 1024 [ 91.793959][ T4386] EXT4-fs (loop4): Ignoring removed orlov option [ 92.893676][ T4386] EXT4-fs: error -4 creating inode table initialization thread [ 92.901998][ T4386] EXT4-fs (loop4): mount failed [ 100.968875][ T4467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.44'. [ 102.861258][ T4483] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 105.323390][ T4519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.58'. [ 112.019173][ T4253] Bluetooth: hci5: command 0x0409 tx timeout [ 114.266214][ T4233] Bluetooth: hci5: command 0x041b tx timeout [ 116.074234][ T4553] chnl_net:caif_netlink_parms(): no params data found [ 117.408199][ T4253] Bluetooth: hci5: command 0x040f tx timeout [ 120.790542][ T4253] Bluetooth: hci5: command 0x0419 tx timeout [ 122.888576][ T4182] syz-executor (4182) used greatest stack depth: 20800 bytes left [ 124.759328][ T4553] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.759368][ T4553] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.760538][ T4553] device bridge_slave_0 entered promiscuous mode [ 124.762641][ T4553] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.762678][ T4553] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.763717][ T4553] device bridge_slave_1 entered promiscuous mode [ 125.205822][ T4553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.309493][ T4553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.360005][ T4660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 125.436149][ T4553] team0: Port device team_slave_0 added [ 125.457195][ T4553] team0: Port device team_slave_1 added [ 125.534000][ T4553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.558540][ T4553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.584886][ T4233] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.718248][ T4553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.799176][ T4553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.806392][ T4553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.832915][ T4553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.868175][ T4233] usb 5-1: Using ep0 maxpacket: 8 [ 125.951929][ T4553] device hsr_slave_0 entered promiscuous mode [ 126.009893][ T4553] device hsr_slave_1 entered promiscuous mode [ 126.019368][ T4553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.027067][ T4553] Cannot create hsr debugfs directory [ 126.218486][ T4233] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 126.244566][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.284387][ T4233] usb 5-1: Product: syz [ 126.311146][ T4233] usb 5-1: Manufacturer: syz [ 126.342346][ T4233] usb 5-1: SerialNumber: syz [ 126.375889][ T4233] usb 5-1: config 0 descriptor?? [ 126.445202][ T4233] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 126.530791][ T4553] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.565480][ T4553] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.633625][ T4553] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.744893][ T4323] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.841747][ T4553] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 126.945018][ T4323] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.168910][ T4233] gspca_sonixj: reg_w1 err -71 [ 127.174240][ T4233] sonixj: probe of 5-1:0.0 failed with error -71 [ 127.199639][ T4233] usb 5-1: USB disconnect, device number 2 [ 127.219848][ T4323] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.314399][ T4323] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.468703][ T4553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.589496][ T4694] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 129.774571][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.801165][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.819786][ T4696] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 130.017475][ T4553] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.097292][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.119714][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.220729][ T4480] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.227953][ T4480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.319654][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.342471][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.376886][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.389120][ T4480] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.396398][ T4480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.411466][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.427166][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.514337][ T4553] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 130.539155][ T4553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.575148][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.605650][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.620982][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.650704][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.682397][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.709429][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.765153][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.776848][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.998669][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.005075][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.317819][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.353128][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.564204][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.581593][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.630099][ T4553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.421571][ T4323] device hsr_slave_0 left promiscuous mode [ 135.444509][ T4323] device hsr_slave_1 left promiscuous mode [ 135.473255][ T4323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.486594][ T4323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.506030][ T4323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.523935][ T4323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.540164][ T4323] device bridge_slave_1 left promiscuous mode [ 135.556139][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.621771][ T4323] device bridge_slave_0 left promiscuous mode [ 135.638272][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.697653][ T4323] device veth1_macvtap left promiscuous mode [ 135.725014][ T4323] device veth0_macvtap left promiscuous mode [ 135.737299][ T4323] device veth1_vlan left promiscuous mode [ 135.747142][ T4323] device veth0_vlan left promiscuous mode [ 137.018372][ T4797] loop3: detected capacity change from 0 to 1024 [ 137.146308][ T4797] EXT4-fs (loop3): Ignoring removed orlov option [ 137.324304][ T4797] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 138.095317][ T4323] team0 (unregistering): Port device team_slave_1 removed [ 138.176219][ T4323] team0 (unregistering): Port device team_slave_0 removed [ 138.252274][ T4323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.312747][ T4323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.626636][ T4323] bond0 (unregistering): Released all slaves [ 139.036237][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.064896][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.449296][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.526615][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.545830][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.584728][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.625994][ T4553] device veth0_vlan entered promiscuous mode [ 139.691409][ T4553] device veth1_vlan entered promiscuous mode [ 139.815640][ T4553] device veth0_macvtap entered promiscuous mode [ 139.862857][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.915485][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 139.944886][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.985094][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.023347][ T4553] device veth1_macvtap entered promiscuous mode [ 140.058959][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.070541][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.119738][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.157091][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.191241][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.232025][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.313155][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.362243][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.410989][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.475836][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.520872][ T4553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.551988][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.571379][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.621136][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.666844][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.726392][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.763402][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.785883][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.812963][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.834591][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.856619][ T4840] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 140.876281][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.888354][ T4553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.898726][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.937811][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.950975][ T4553] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.961415][ T4553] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.977567][ T4553] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.048455][ T4553] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.332788][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.373196][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.537051][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.810496][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.821879][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.933299][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.382216][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 142.645571][ T4858] input: syz1 as /devices/virtual/input/input6 [ 144.168110][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 144.177969][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 144.270472][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 144.372894][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 144.578212][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #1c0!!! [ 144.587741][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 144.618117][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 144.627210][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 144.636133][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 144.994094][ T4879] loop5: detected capacity change from 0 to 1024 [ 145.875107][ T4879] EXT4-fs (loop5): Ignoring removed orlov option [ 145.964252][ T4879] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 147.058952][ T21] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 147.448366][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.464187][ T21] usb 6-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 147.497154][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.531009][ T21] usb 6-1: config 0 descriptor?? [ 148.075029][ T21] itetech 0003:258A:6A88.0002: item fetching failed at offset 5/7 [ 148.095019][ T21] itetech: probe of 0003:258A:6A88.0002 failed with error -22 [ 148.333835][ T21] usb 6-1: USB disconnect, device number 2 [ 148.974456][ T4914] +: renamed from syzkaller0 [ 153.733224][ T26] audit: type=1326 audit(1757666134.869:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b03167ba9 code=0x7ffc0000 [ 153.868300][ T4979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.158'. [ 154.179513][ T26] audit: type=1326 audit(1757666134.899:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f9b03167ba9 code=0x7ffc0000 [ 154.988224][ T26] audit: type=1326 audit(1757666134.899:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b03167ba9 code=0x7ffc0000 [ 155.079603][ T26] audit: type=1326 audit(1757666134.909:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b03167ba9 code=0x7ffc0000 [ 155.106856][ T26] audit: type=1326 audit(1757666134.909:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9b03167ba9 code=0x7ffc0000 [ 155.153457][ T26] audit: type=1326 audit(1757666134.909:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b03167ba9 code=0x7ffc0000 [ 155.228743][ T26] audit: type=1326 audit(1757666134.909:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b03167ba9 code=0x7ffc0000 [ 155.342638][ T26] audit: type=1326 audit(1757666134.909:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b03167ba9 code=0x7ffc0000 [ 155.438162][ T4233] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 155.487342][ T26] audit: type=1326 audit(1757666134.909:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b03167ba9 code=0x7ffc0000 [ 155.637982][ T26] audit: type=1326 audit(1757666134.909:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b03167ba9 code=0x7ffc0000 [ 155.868564][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.893881][ T4233] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 155.936268][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.000779][ T4233] usb 4-1: config 0 descriptor?? [ 157.378400][ T4233] usbhid 4-1:0.0: can't add hid device: -71 [ 157.384553][ T4233] usbhid: probe of 4-1:0.0 failed with error -71 [ 157.589222][ T4233] usb 4-1: USB disconnect, device number 2 [ 158.948368][ T4249] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 159.348287][ T4249] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 159.356352][ T4249] usb 1-1: config 0 has no interface number 0 [ 159.558477][ T4249] usb 1-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=51.8f [ 159.586631][ T4249] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.641144][ T4249] usb 1-1: Product: syz [ 159.659995][ T4249] usb 1-1: Manufacturer: syz [ 159.682921][ T4249] usb 1-1: SerialNumber: syz [ 159.725445][ T4249] usb 1-1: config 0 descriptor?? [ 159.956233][ T5055] loop4: detected capacity change from 0 to 128 [ 160.283935][ T4249] gspca_main: spca501-2.14.0 probing 040a:0002 [ 161.778419][ T4249] gspca_spca501: reg write: error -71 [ 161.783875][ T4249] spca501 1-1:0.9: Reg write failed for 0x00,0x00,0x05 [ 161.919412][ T4249] spca501: probe of 1-1:0.9 failed with error -22 [ 161.928701][ T4249] usb 1-1: USB disconnect, device number 2 [ 161.948502][ T4233] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 163.058834][ T4233] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.084611][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 163.084628][ T26] audit: type=1326 audit(1757666144.219:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4a722ba9 code=0x7ffc0000 [ 163.131322][ T4233] usb 6-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 163.178198][ T4233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.234488][ T4233] usb 6-1: config 0 descriptor?? [ 163.263513][ T5100] capability: warning: `syz.0.179' uses 32-bit capabilities (legacy support in use) [ 163.298498][ T26] audit: type=1326 audit(1757666144.259:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4a722ba9 code=0x7ffc0000 [ 163.730216][ T4233] itetech 0003:258A:6A88.0003: item fetching failed at offset 5/7 [ 163.776787][ T4233] itetech: probe of 0003:258A:6A88.0003 failed with error -22 [ 163.935359][ T4233] usb 6-1: USB disconnect, device number 3 [ 167.608279][ T4262] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 168.362639][ T5160] loop2: detected capacity change from 0 to 128 [ 168.633090][ T4262] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.943962][ T4262] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 168.958213][ T4262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.004047][ T4262] usb 5-1: config 0 descriptor?? [ 170.388332][ T4262] usbhid 5-1:0.0: can't add hid device: -71 [ 171.639057][ T4262] usbhid: probe of 5-1:0.0 failed with error -71 [ 171.669029][ T4262] usb 5-1: USB disconnect, device number 3 [ 172.476405][ T5224] loop5: detected capacity change from 0 to 128 [ 175.068759][ T5233] syz.2.206 (5233) used greatest stack depth: 20720 bytes left [ 175.546272][ T5258] loop4: detected capacity change from 0 to 1024 [ 175.578712][ T5258] ======================================================= [ 175.578712][ T5258] WARNING: The mand mount option has been deprecated and [ 175.578712][ T5258] and is ignored by this kernel. Remove the mand [ 175.578712][ T5258] option from the mount to silence this warning. [ 175.578712][ T5258] ======================================================= [ 175.700197][ T5258] EXT4-fs (loop4): Ignoring removed nobh option [ 175.707044][ T156] Bluetooth: hci0: Frame reassembly failed (-84) [ 175.715559][ T5258] EXT4-fs (loop4): Ignoring removed bh option [ 175.727510][ T5258] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 175.987180][ T5258] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,bsddf,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 176.455307][ T5268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.212'. [ 176.589539][ T5268] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3871: comm syz.4.212: Allocating blocks 497-513 which overlap fs metadata [ 176.611741][ T5268] EXT4-fs (loop4): pa ffff88802126ca80: logic 128, phys. 385, len 8 [ 176.620360][ T5268] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 177.700351][ T4390] Bluetooth: hci0: command 0x1003 tx timeout [ 177.708474][ T4199] Bluetooth: hci0: sending frame failed (-49) [ 179.788580][ T4262] Bluetooth: hci0: command 0x1001 tx timeout [ 179.795434][ T4199] Bluetooth: hci0: sending frame failed (-49) [ 180.088225][ T4236] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 181.369550][ T4236] usb 5-1: Using ep0 maxpacket: 32 [ 182.492480][ T4253] Bluetooth: hci0: command 0x1009 tx timeout [ 182.538381][ T4236] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 182.562239][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.598252][ T4236] usb 5-1: Product: syz [ 182.603808][ T4236] usb 5-1: Manufacturer: syz [ 182.618215][ T4236] usb 5-1: SerialNumber: syz [ 182.649675][ T4236] usb 5-1: config 0 descriptor?? [ 182.844204][ T4236] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 182.869010][ T4236] RobotFuzz Open Source InterFace, OSIF: probe of 5-1:0.0 failed with error -71 [ 182.949149][ T4262] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 182.949813][ T4236] usb 5-1: USB disconnect, device number 4 [ 183.142283][ T5352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'. [ 184.068377][ T4262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.099840][ T4262] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 185.109194][ T4262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.198151][ T4262] usb 4-1: config 0 descriptor?? [ 185.258283][ T4262] usb 4-1: can't set config #0, error -71 [ 186.021769][ T4262] usb 4-1: USB disconnect, device number 3 [ 191.548523][ T4390] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 191.794711][ T4253] Bluetooth: hci3: command 0x0406 tx timeout [ 191.802293][ T4253] Bluetooth: hci1: command 0x0406 tx timeout [ 191.819265][ T4253] Bluetooth: hci4: command 0x0406 tx timeout [ 191.828412][ T4253] Bluetooth: hci2: command 0x0406 tx timeout [ 192.159261][ T4390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.182138][ T4390] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 192.214018][ T4390] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.288770][ T4390] usb 1-1: config 0 descriptor?? [ 192.869775][ T4390] itetech 0003:258A:6A88.0004: item fetching failed at offset 5/7 [ 193.491499][ T4390] itetech: probe of 0003:258A:6A88.0004 failed with error -22 [ 193.542890][ T4390] usb 1-1: USB disconnect, device number 3 [ 194.891763][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.907187][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.032564][ T5475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.259'. [ 197.126160][ T5477] netlink: 12 bytes leftover after parsing attributes in process `syz.5.263'. [ 197.225647][ T5477] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.411062][ T5481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.481165][ T5481] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 197.538506][ T5481] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 197.685147][ T5477] device macvlan2 entered promiscuous mode [ 197.727829][ T5477] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 200.116665][ T5537] loop5: detected capacity change from 0 to 128 [ 201.543312][ T5577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'. [ 203.275853][ T5577] team0 (unregistering): Port device team_slave_0 removed [ 203.375805][ T5577] team0 (unregistering): Port device team_slave_1 removed [ 203.717870][ T5604] loop2: detected capacity change from 0 to 1024 [ 204.043055][ T5604] EXT4-fs (loop2): Ignoring removed orlov option [ 204.328493][ T5604] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 206.121056][ T5617] loop4: detected capacity change from 0 to 128 [ 211.331594][ T5682] loop4: detected capacity change from 0 to 128 [ 212.588248][ T4325] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 212.898308][ T4325] usb 1-1: Using ep0 maxpacket: 16 [ 213.162543][ T4325] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.173112][ T4325] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.128298][ T4325] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.218225][ T4325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.245750][ T4325] usb 1-1: Product: syz [ 214.374695][ T4325] usb 1-1: Manufacturer: syz [ 214.380011][ T4325] usb 1-1: SerialNumber: syz [ 214.438201][ T4325] usb 1-1: can't set config #1, error -71 [ 214.460622][ T4325] usb 1-1: USB disconnect, device number 4 [ 224.226086][ T5791] netlink: 108 bytes leftover after parsing attributes in process `syz.5.322'. [ 224.518154][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 224.908476][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 225.798383][ T13] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 225.815236][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.782164][ T13] usb 5-1: config 0 descriptor?? [ 227.119215][ T13] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 230.728246][ T13] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 230.794885][ T13] asix: probe of 5-1:0.0 failed with error -71 [ 230.856567][ T13] usb 5-1: USB disconnect, device number 5 [ 231.014031][ T5840] binder: 5838:5840 ioctl c0306201 200000000080 returned -14 [ 231.560302][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 231.848325][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 232.008408][ T13] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 232.021062][ T13] usb 5-1: config 0 has no interface number 0 [ 232.041987][ T13] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 232.068310][ T13] usb 5-1: config 0 interface 196 has no altsetting 0 [ 232.201827][ T154] Bluetooth: hci0: Frame reassembly failed (-84) [ 232.227830][ T154] Bluetooth: hci0: Frame reassembly failed (-84) [ 232.258483][ T13] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 232.321343][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.423542][ T13] usb 5-1: Product: syz [ 232.427805][ T13] usb 5-1: Manufacturer: syz [ 232.478192][ T13] usb 5-1: SerialNumber: syz [ 232.573717][ T13] usb 5-1: config 0 descriptor?? [ 232.589202][ T4262] Bluetooth: hci5: command 0x0406 tx timeout [ 233.384033][ T5843] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 234.258320][ T4262] Bluetooth: hci0: command 0x1003 tx timeout [ 234.733941][ T4198] Bluetooth: hci0: sending frame failed (-49) [ 234.764530][ T13] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 236.505690][ T4390] usb 5-1: USB disconnect, device number 6 [ 236.819299][ T4262] Bluetooth: hci0: command 0x1001 tx timeout [ 236.825460][ T4198] Bluetooth: hci0: sending frame failed (-49) [ 236.948995][ T4390] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 238.327482][ T5914] tmpfs: Unknown parameter 'usrquota' [ 238.977599][ T4390] Bluetooth: hci0: command 0x1009 tx timeout [ 239.088896][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'. [ 244.768339][ T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 244.978456][ T4390] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 245.379679][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.511542][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.588174][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.621883][ T4390] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 245.634727][ T5985] process 'syz.2.369' launched './file1' with NULL argv: empty string added [ 245.647156][ T13] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.654317][ T4390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.678158][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.688193][ T4390] usb 4-1: Product: syz [ 245.692415][ T4390] usb 4-1: Manufacturer: syz [ 245.729097][ T4390] usb 4-1: SerialNumber: syz [ 245.742120][ T13] usb 5-1: config 0 descriptor?? [ 246.231026][ T13] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 248.195285][ T13] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 248.197971][ T4390] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 248.203222][ T13] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 248.222971][ T13] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 248.230680][ T13] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 248.246138][ T13] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 248.253683][ T13] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 248.949730][ T13] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 248.958253][ T13] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 248.966622][ T13] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 248.974133][ T13] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 248.976851][ T4390] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 248.981805][ T13] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 248.981834][ T13] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 248.981857][ T13] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 249.013728][ T13] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 249.026737][ T13] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 249.201394][ T4390] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 249.211126][ T4390] lan78xx: probe of 4-1:1.0 failed with error -32 [ 249.398203][ T13] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 249.461340][ T13] usb 5-1: USB disconnect, device number 7 [ 249.627834][ T4249] usb 4-1: USB disconnect, device number 4 [ 249.761109][ T6011] fido_id[6011]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 251.268281][ T13] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 253.738177][ T4249] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 256.133999][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.140408][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.032630][ T4249] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 257.780103][ T4249] usb 3-1: can't read configurations, error -71 [ 264.841670][ T26] audit: type=1326 audit(1757666245.359:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.4.402" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe49915bba9 code=0x0 [ 271.908224][ T4287] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 272.168513][ T4287] usb 4-1: Using ep0 maxpacket: 8 [ 272.328447][ T4287] usb 4-1: unable to get BOS descriptor or descriptor too short [ 272.448410][ T4287] usb 4-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 272.488219][ T4287] usb 4-1: config 12 has 1 interface, different from the descriptor's value: 2 [ 272.698204][ T4287] usb 4-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=f6.1b [ 272.727697][ T4287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.778292][ T4287] usb 4-1: Product: syz [ 272.798074][ T4287] usb 4-1: Manufacturer: syz [ 272.828057][ T4287] usb 4-1: SerialNumber: syz [ 272.909645][ T4287] belkin_sa 4-1:12.0: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 272.953764][ T4287] usb 4-1: bcdDevice: f61b, bfc: 0 [ 272.999351][ T4287] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 273.123740][ T1108] usb 4-1: USB disconnect, device number 5 [ 273.198553][ T1108] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 273.245868][ T1108] belkin_sa 4-1:12.0: device disconnected [ 275.218154][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 275.567397][ T6163] chnl_net:caif_netlink_parms(): no params data found [ 275.849343][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.916519][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.969354][ T6163] device bridge_slave_0 entered promiscuous mode [ 275.978778][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.986190][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.995008][ T6163] device bridge_slave_1 entered promiscuous mode [ 276.008154][ T4262] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 276.089805][ T6163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.143611][ T6163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.273926][ T6163] team0: Port device team_slave_0 added [ 276.364292][ T6163] team0: Port device team_slave_1 added [ 276.834932][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.884516][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.956719][ T6163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.970092][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.977172][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.014604][ T6163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.025649][ T4262] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 277.036149][ T4262] usb 6-1: config 1 has no interface number 0 [ 277.045129][ T4262] usb 6-1: config 1 interface 105 has no altsetting 0 [ 277.149471][ T6163] device hsr_slave_0 entered promiscuous mode [ 277.187970][ T6163] device hsr_slave_1 entered promiscuous mode [ 277.214136][ T6163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.232288][ T6163] Cannot create hsr debugfs directory [ 277.268366][ T4262] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 277.295089][ T4262] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.323511][ T4262] usb 6-1: Product: syz [ 277.346555][ T4262] usb 6-1: Manufacturer: syz [ 277.396858][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.418227][ T4262] usb 6-1: SerialNumber: syz [ 277.456528][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 277.533280][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.618758][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.752901][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.088118][ T6163] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 278.154450][ T6163] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 278.205711][ T6163] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 278.227104][ T6163] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 278.380313][ T6225] IPVS: length: 139 != 8 [ 278.388203][ T4262] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 278.488898][ T4262] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 278.692120][ T4262] aqc111 6-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f [ 279.610840][ T4227] Bluetooth: hci0: command 0x040f tx timeout [ 279.618987][ T6053] usb 6-1: USB disconnect, device number 4 [ 279.625919][ T6053] aqc111 6-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 279.746830][ T6163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.801166][ T6053] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 279.820623][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.833028][ T6053] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 279.852384][ T6053] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 279.863673][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.945622][ T6163] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.971181][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.997510][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.033301][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.040464][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.068210][ T4272] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 280.111696][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.182245][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.234139][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.441282][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.448480][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.478298][ T4272] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 280.492252][ T4272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.553230][ T4272] usb 4-1: config 0 descriptor?? [ 280.589804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 280.611991][ T4272] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 280.689289][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.709331][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.814825][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.910316][ T9] device hsr_slave_0 left promiscuous mode [ 280.929342][ T9] device hsr_slave_1 left promiscuous mode [ 280.949504][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.973156][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.997567][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.005681][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.015004][ T9] device bridge_slave_1 left promiscuous mode [ 281.021942][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.033987][ T9] device bridge_slave_0 left promiscuous mode [ 281.038372][ T4272] gspca_cpia1: usb_control_msg 03, error -71 [ 281.040878][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.088312][ T4272] gspca_cpia1: usb_control_msg 01, error -71 [ 281.094420][ T4272] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 281.108917][ T9] device veth1_macvtap left promiscuous mode [ 281.149131][ T4272] usb 4-1: USB disconnect, device number 6 [ 281.163430][ T9] device veth0_macvtap left promiscuous mode [ 281.190870][ T9] device veth1_vlan left promiscuous mode [ 281.198366][ T9] device veth0_vlan left promiscuous mode [ 281.618338][ T4272] Bluetooth: hci0: command 0x0419 tx timeout [ 282.921920][ T9] team0 (unregistering): Port device team_slave_1 removed [ 282.959665][ T9] team0 (unregistering): Port device team_slave_0 removed [ 282.998554][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.038933][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.490831][ T9] bond0 (unregistering): Released all slaves [ 283.562263][ T6277] tmpfs: Unknown parameter 'usrquota' [ 284.470837][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 284.484310][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.272534][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.282798][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 285.292568][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.470778][ T6163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.526091][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 285.545511][ T6286] syz.3.444 uses obsolete (PF_INET,SOCK_PACKET) [ 285.598432][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 285.625920][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.621862][ T6306] trusted_key: encrypted_key: insufficient parameters specified [ 287.775257][ T6163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.797427][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 287.813776][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 292.630484][ T6327] tipc: Started in network mode [ 292.655991][ T6327] tipc: Node identity ae4c402a2c6f, cluster identity 4711 [ 292.688762][ T6327] tipc: Enabled bearer , priority 0 [ 292.853207][ T6314] tipc: Resetting bearer [ 293.719841][ T4253] tipc: Node number set to 2183348266 [ 293.765887][ T6314] tipc: Disabling bearer [ 295.681174][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.712528][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.897150][ T6163] device veth0_vlan entered promiscuous mode [ 295.943396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 295.998698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.059365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.084941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.119733][ T6163] device veth1_vlan entered promiscuous mode [ 296.211735][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 296.308735][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 296.415784][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 296.435063][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 296.554616][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 297.046963][ T6163] device veth0_macvtap entered promiscuous mode [ 297.061099][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 297.084632][ T6163] device veth1_macvtap entered promiscuous mode [ 297.179320][ T6163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.204530][ T6163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.258114][ T6163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.328870][ T6163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.378267][ T6163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.438094][ T6163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.502918][ T6163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.522802][ T6163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.534793][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.752723][ T6163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.414480][ T6163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.468111][ T6163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.550812][ T6163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.643204][ T6163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.745869][ T6163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.827810][ T6163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.898231][ T6163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.964117][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.038869][ T6163] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.144280][ T6163] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.199073][ T6163] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.208580][ T6163] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.229931][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 299.314312][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.468768][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 299.547670][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 299.956767][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.975121][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.067673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 300.130185][ T4323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.219209][ T4323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.299114][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 302.832251][ T6421] loop5: detected capacity change from 0 to 1024 [ 302.925914][ T6427] netlink: 244 bytes leftover after parsing attributes in process `syz.6.468'. [ 302.925940][ T6421] EXT4-fs (loop5): Ignoring removed orlov option [ 303.002465][ T6421] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 303.113615][ T6435] Zero length message leads to an empty skb [ 309.137723][ T6492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.483'. [ 309.225400][ T6497] loop4: detected capacity change from 0 to 1024 [ 309.280996][ T6497] EXT4-fs (loop4): Ignoring removed orlov option [ 309.353911][ T6497] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 313.520881][ T6520] loop4: detected capacity change from 0 to 128 [ 313.768928][ T6522] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 314.600107][ T6535] tmpfs: Unknown parameter 'usrquota' [ 315.507555][ T6543] comedi comedi1: s526: I/O port conflict (0x4f27,64) [ 315.928144][ T4262] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 316.198104][ T4262] usb 7-1: Using ep0 maxpacket: 16 [ 316.338575][ T4262] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.372909][ T4262] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.465220][ T4262] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 316.518031][ T4262] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.571971][ T4262] usb 7-1: config 0 descriptor?? [ 316.592499][ T6573] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 317.926082][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.940727][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.972806][ T4262] corsair 0003:1B1C:1B02.0006: item fetching failed at offset 1/5 [ 318.192058][ T4262] corsair 0003:1B1C:1B02.0006: parse failed [ 318.199029][ T4262] corsair: probe of 0003:1B1C:1B02.0006 failed with error -22 [ 318.211225][ T4262] usb 7-1: USB disconnect, device number 2 [ 318.647081][ T6597] tmpfs: Unknown parameter 'usrquota' [ 319.856394][ T4227] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 319.877949][ T4227] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 319.900244][ T4198] Bluetooth: hci0: link tx timeout [ 319.906401][ T4198] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.916893][ T4198] Bluetooth: hci0: link tx timeout [ 319.922456][ T4198] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.938932][ T4227] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 319.946936][ T4227] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 319.955895][ T4227] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 319.964154][ T4227] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 319.972309][ T4227] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 319.980745][ T4227] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 319.988549][ T4227] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 319.997202][ T4227] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 320.005371][ T4227] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 320.015172][ T4227] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 320.023137][ T4227] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 320.031235][ T4227] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 320.039791][ T4227] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 320.047700][ T4227] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 320.055716][ T4227] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 320.063897][ T4227] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 320.126014][ T4227] hid-generic 0003:0004:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 320.324740][ T6633] fido_id[6633]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 320.478687][ T6642] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 320.485767][ T6642] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 320.564211][ T6642] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 320.570711][ T6642] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 320.674050][ T6642] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 320.680700][ T6642] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 320.739540][ T6642] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 320.746028][ T6642] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 320.828040][ T6642] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 320.834946][ T6642] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 321.689091][ T6657] loop3: detected capacity change from 0 to 1024 [ 321.781264][ T6657] EXT4-fs (loop3): Ignoring removed orlov option [ 322.055256][ T6657] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 322.080761][ T4253] Bluetooth: hci0: command 0x0406 tx timeout [ 324.102734][ T6678] tipc: Enabled bearer , priority 0 [ 324.114276][ T6678] device syzkaller0 entered promiscuous mode [ 325.140384][ T6685] tipc: Resetting bearer [ 325.180351][ T6675] tipc: Resetting bearer [ 325.530264][ T6675] tipc: Disabling bearer [ 327.664103][ T6727] loop6: detected capacity change from 0 to 1024 [ 327.755076][ T6727] EXT4-fs (loop6): Ignoring removed orlov option [ 327.848612][ T6727] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 329.395807][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'. [ 330.690771][ T6784] loop6: detected capacity change from 0 to 1024 [ 330.957937][ T6784] EXT4-fs (loop6): Ignoring removed orlov option [ 331.291246][ T6784] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 332.858987][ T7] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 333.428093][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 335.296772][ T7] usb 6-1: config 0 has no interfaces? [ 335.317280][ T7] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 335.502498][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.555294][ T7] usb 6-1: config 0 descriptor?? [ 335.592132][ T6829] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 335.725455][ T7] usb 6-1: can't set config #0, error -71 [ 336.005666][ T7] usb 6-1: USB disconnect, device number 5 [ 336.485869][ T6847] loop4: detected capacity change from 0 to 1024 [ 336.688792][ T6847] EXT4-fs (loop4): Ignoring removed orlov option [ 337.578995][ T6847] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 337.605053][ T6858] netlink: 180 bytes leftover after parsing attributes in process `syz.5.563'. [ 338.906305][ T6877] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 340.195445][ T6889] binder: 6888:6889 ioctl c0306201 0 returned -14 [ 342.470648][ T6915] smc: net device bond0 applied user defined pnetid SYZ2 [ 342.615416][ T6918] smc: net device bond0 erased user defined pnetid SYZ2 [ 346.897761][ T6937] block device autoloading is deprecated and will be removed. [ 349.843831][ T6922] syz.5.578 (6922): drop_caches: 2 [ 350.007254][ T6974] 9pnet: Insufficient options for proto=fd [ 356.542315][ T4198] Bluetooth: hci0: link tx timeout [ 356.547861][ T4198] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 356.608249][ T4198] Bluetooth: hci0: link tx timeout [ 356.613734][ T4198] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 356.700190][ T4198] Bluetooth: hci0: link tx timeout [ 356.705449][ T4198] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 356.818672][ T4198] Bluetooth: hci0: link tx timeout [ 356.824492][ T4198] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 357.781828][ T4198] Bluetooth: hci0: link tx timeout [ 357.788411][ T4198] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 357.865420][ T4198] Bluetooth: hci0: link tx timeout [ 357.872157][ T4198] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 357.897476][ T4198] Bluetooth: hci0: link tx timeout [ 357.902999][ T4198] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 358.020963][ T4198] Bluetooth: hci0: link tx timeout [ 358.026293][ T4198] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 359.538235][ T6029] Bluetooth: hci0: command 0x0405 tx timeout [ 359.744380][ T4872] Bluetooth: hci4: Frame reassembly failed (-84) [ 359.760484][ T4872] Bluetooth: hci4: Frame reassembly failed (-84) [ 359.798204][ T4390] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 360.708316][ T4390] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 360.731272][ T4390] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.785745][ T4390] usb 6-1: Product: syz [ 360.865881][ T4390] usb 6-1: Manufacturer: syz [ 360.947084][ T4390] usb 6-1: SerialNumber: syz [ 360.993618][ T4390] usb 6-1: config 0 descriptor?? [ 361.278323][ T4390] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 361.851182][ T4194] Bluetooth: hci0: link tx timeout [ 361.856416][ T4194] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 361.866723][ T4194] Bluetooth: hci0: link tx timeout [ 361.871934][ T4194] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 362.199242][ T6907] Bluetooth: hci4: command 0x1003 tx timeout [ 362.205500][ T4194] Bluetooth: hci4: sending frame failed (-49) [ 363.366790][ T4194] Bluetooth: hci0: link tx timeout [ 363.372170][ T4194] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.675575][ T4390] usb 6-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 363.685919][ T4390] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 363.695700][ T4390] usb 6-1: media controller created [ 363.703932][ T4390] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 363.761599][ T4390] dvb_usb_rtl28xxu 6-1:0.0: unknown tuner MAX3543 [ 363.904066][ T4390] usb 6-1: USB disconnect, device number 6 [ 364.259316][ T4243] Bluetooth: hci4: command 0x1001 tx timeout [ 364.270546][ T4194] Bluetooth: hci4: sending frame failed (-49) [ 364.602278][ T4194] Bluetooth: hci0: link tx timeout [ 364.607697][ T4194] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 365.708097][ T4194] Bluetooth: hci0: link tx timeout [ 365.714576][ T4194] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 365.724035][ T4194] Bluetooth: hci0: link tx timeout [ 365.729236][ T4194] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 365.929052][ T4194] Bluetooth: hci0: link tx timeout [ 365.934579][ T4194] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 365.947041][ T4194] Bluetooth: hci0: link tx timeout [ 365.952292][ T4194] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 366.158125][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 366.338302][ T4243] Bluetooth: hci4: command 0x1009 tx timeout [ 366.408048][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 366.528303][ T7] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 366.546822][ T7] usb 5-1: config 0 has no interface number 0 [ 366.572257][ T7] usb 5-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 366.604892][ T7] usb 5-1: config 0 interface 1 has no altsetting 0 [ 366.791726][ T7] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 366.812948][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.851197][ T7] usb 5-1: Product: syz [ 366.870486][ T7] usb 5-1: Manufacturer: syz [ 366.892446][ T7] usb 5-1: SerialNumber: syz [ 366.922954][ T7] usb 5-1: config 0 descriptor?? [ 367.212091][ T7] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 367.238236][ T7] cx231xx 5-1:0.1: Failed to read PCB config [ 367.244918][ T7] cx231xx: probe of 5-1:0.1 failed with error -71 [ 367.273001][ T7] usb 5-1: USB disconnect, device number 9 [ 367.716962][ T4194] Bluetooth: hci0: link tx timeout [ 367.722321][ T4194] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 367.730471][ T4194] Bluetooth: hci0: link tx timeout [ 367.735790][ T4194] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 367.858473][ T6907] Bluetooth: hci0: command 0x0406 tx timeout [ 369.120435][ T7203] device vlan1 entered promiscuous mode [ 373.462286][ T7246] hub 6-0:1.0: USB hub found [ 373.469248][ T7246] hub 6-0:1.0: 1 port detected [ 375.211240][ T7271] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 377.660588][ T7272] syz.6.656 (7272): drop_caches: 2 [ 378.602294][ T7305] syz.4.663 (7305) used greatest stack depth: 17632 bytes left [ 378.740793][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.747178][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.815040][ T7312] capability: warning: `syz.6.666' uses deprecated v2 capabilities in a way that may be insecure [ 379.391991][ T7321] loop6: detected capacity change from 0 to 32768 [ 379.488125][ T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 380.048995][ T7321] JBD2: Ignoring recovery information on journal [ 380.243999][ T7321] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 380.377542][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 380.519817][ T7] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 380.669955][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 380.799599][ T6163] ocfs2: Unmounting device (7,6) on (node local) [ 380.963630][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 381.004823][ T7] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.115723][ T7] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 381.162897][ T7341] loop6: detected capacity change from 0 to 512 [ 381.188130][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.325074][ T7341] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 381.444013][ T7341] EXT4-fs (loop6): mount failed [ 381.478209][ T7] usb 5-1: GET_CAPABILITIES returned 0 [ 381.486882][ T7] usbtmc 5-1:16.0: can't read capabilities [ 381.721987][ T7] usb 5-1: USB disconnect, device number 10 [ 383.018694][ T7373] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 383.025821][ T7373] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 383.241727][ T7373] vhci_hcd vhci_hcd.0: Device attached [ 383.489074][ T6907] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 383.568487][ T4390] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 383.583913][ T7381] vhci_hcd: connection reset by peer [ 383.612035][ T4323] vhci_hcd: stop threads [ 383.625796][ T4323] vhci_hcd: release socket [ 383.632306][ T4323] vhci_hcd: disconnect device [ 383.841288][ T7415] loop4: detected capacity change from 0 to 40427 [ 383.930000][ T21] Bluetooth: hci0: command 0x0405 tx timeout [ 383.971921][ T7415] F2FS-fs (loop4): invalid crc value [ 384.009737][ T7415] F2FS-fs (loop4): Found nat_bits in checkpoint [ 384.057615][ T7415] F2FS-fs (loop4): Start checkpoint disabled! [ 384.088761][ T7415] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 384.186292][ T4390] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.223835][ T4390] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 384.262726][ T4390] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 384.335826][ T4390] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.393372][ T4390] usb 6-1: config 0 descriptor?? [ 384.480736][ T144] attempt to access beyond end of device [ 384.480736][ T144] loop4: rw=2049, want=45112, limit=40427 [ 385.420237][ T7441] device syzkaller1 entered promiscuous mode [ 385.499416][ T7441] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 385.505327][ T7441] syzkaller1: Linktype set failed because interface is up [ 386.662281][ T4249] usb 6-1: USB disconnect, device number 7 [ 386.746490][ T7469] loop3: detected capacity change from 0 to 512 [ 387.080535][ T7469] EXT4-fs (loop3): can't mount with commit=13, fs mounted w/o journal [ 388.675683][ T7487] loop4: detected capacity change from 0 to 2048 [ 388.698286][ T6907] vhci_hcd: vhci_device speed not set [ 388.718710][ T7493] loop5: detected capacity change from 0 to 1024 [ 388.976668][ T7493] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 388.997747][ T7507] loop3: detected capacity change from 0 to 128 [ 389.017220][ T7493] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.265612][ T7507] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 389.768357][ T26] audit: type=1800 audit(1757666370.899:38): pid=7493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.706" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 390.056930][ T7487] hpfs: filesystem error: improperly stopped; already mounted read-only [ 390.086975][ T7487] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 390.142286][ T7487] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 7b318cc4 [ 390.174394][ T5569] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 390.787696][ T5569] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 390.914127][ T5569] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 390.966783][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.716'. [ 391.002759][ T7528] loop5: detected capacity change from 0 to 1024 [ 393.471059][ T26] audit: type=1800 audit(1757666374.329:39): pid=7528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.712" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 393.573433][ T9] hfsplus: b-tree write err: -5, ino 4 [ 393.809897][ T7565] loop4: detected capacity change from 0 to 40427 [ 393.954588][ T7565] F2FS-fs (loop4): invalid crc value [ 393.970880][ T7565] F2FS-fs (loop4): Found nat_bits in checkpoint [ 394.014310][ T7565] F2FS-fs (loop4): Start checkpoint disabled! [ 394.188422][ T7565] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 394.264013][ T7573] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 395.000204][ T7563] attempt to access beyond end of device [ 395.000204][ T7563] loop4: rw=10241, want=45104, limit=40427 [ 395.032148][ T7565] attempt to access beyond end of device [ 395.032148][ T7565] loop4: rw=2049, want=45104, limit=40427 [ 396.165292][ T4323] attempt to access beyond end of device [ 396.165292][ T4323] loop4: rw=2049, want=40976, limit=40427 [ 396.283135][ T4198] Bluetooth: hci0: link tx timeout [ 396.290489][ T4198] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 396.298757][ T4198] Bluetooth: hci0: link tx timeout [ 396.303901][ T4198] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 396.312009][ T4198] Bluetooth: hci0: link tx timeout [ 396.317159][ T4198] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 396.325289][ T4198] Bluetooth: hci0: link tx timeout [ 396.330549][ T4198] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 396.495598][ T7595] loop6: detected capacity change from 0 to 128 [ 396.580711][ T7600] loop5: detected capacity change from 0 to 512 [ 396.731182][ T7600] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 397.018796][ T7600] EXT4-fs (loop5): 1 truncate cleaned up [ 397.033662][ T7600] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,discard,journal_ioprio=0x0000000000000003,nobarrier,lazytime,minixdf,errors=continue,usrjquota=,,errors=continue. Quota mode: none. [ 397.758858][ T7615] attempt to access beyond end of device [ 397.758858][ T7615] loop6: rw=2049, want=689, limit=128 [ 399.336183][ T7632] loop6: detected capacity change from 0 to 32768 [ 399.547645][ T7632] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 399.572437][ T7636] loop5: detected capacity change from 0 to 32768 [ 399.604708][ T26] audit: type=1800 audit(1757666380.739:40): pid=7632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.740" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 399.648288][ T7636] (syz.5.742,7636,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 399.664817][ T7636] (syz.5.742,7636,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 399.686931][ T7632] (syz.6.740,7632,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 399.737771][ T7636] JBD2: Ignoring recovery information on journal [ 399.880383][ T7636] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 400.215777][ T7655] loop3: detected capacity change from 0 to 256 [ 400.856494][ T6163] ocfs2: Unmounting device (7,6) on (node local) [ 400.893275][ T7655] FAT-fs (loop3): Directory bread(block 64) failed [ 400.930187][ T7655] FAT-fs (loop3): Directory bread(block 65) failed [ 400.937748][ T7655] FAT-fs (loop3): Directory bread(block 66) failed [ 400.988271][ T7655] FAT-fs (loop3): Directory bread(block 67) failed [ 401.020196][ T7655] FAT-fs (loop3): Directory bread(block 68) failed [ 401.057662][ T7655] FAT-fs (loop3): Directory bread(block 69) failed [ 401.079774][ T4553] ocfs2: Unmounting device (7,5) on (node local) [ 401.086795][ T7655] FAT-fs (loop3): Directory bread(block 70) failed [ 401.108117][ T7655] FAT-fs (loop3): Directory bread(block 71) failed [ 401.114826][ T7655] FAT-fs (loop3): Directory bread(block 72) failed [ 401.160287][ T7655] FAT-fs (loop3): Directory bread(block 73) failed [ 401.184961][ T7662] loop4: detected capacity change from 0 to 4096 [ 401.272674][ T7662] ntfs3: Unknown parameter 'windows_names' [ 401.480924][ T7671] loop3: detected capacity change from 0 to 1024 [ 402.346577][ T7677] loop5: detected capacity change from 0 to 64 [ 402.536195][ T144] hfsplus: b-tree write err: -5, ino 4 [ 402.599845][ T7675] loop4: detected capacity change from 0 to 32768 [ 402.927528][ T7675] XFS (loop4): Mounting V5 Filesystem [ 403.206925][ T7675] XFS (loop4): Ending clean mount [ 403.224886][ T7675] XFS (loop4): Quotacheck needed: Please wait. [ 403.490786][ T7675] XFS (loop4): Quotacheck: Done. [ 404.604738][ T4183] XFS (loop4): Unmounting Filesystem [ 406.357184][ T7735] loop3: detected capacity change from 0 to 4096 [ 407.180949][ T7743] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 407.363900][ T7735] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 407.382011][ T7745] loop6: detected capacity change from 0 to 128 [ 407.404544][ T7735] NILFS (loop3): mounting fs with errors [ 407.474007][ T13] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 407.519101][ T7735] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 407.536308][ T7735] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 408.977683][ T13] usb 6-1: Using ep0 maxpacket: 16 [ 409.108238][ T13] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 409.122535][ T13] usb 6-1: config 0 has no interface number 0 [ 409.298713][ T13] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 409.357722][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.412188][ T13] usb 6-1: Product: syz [ 409.436773][ T13] usb 6-1: config 0 descriptor?? [ 409.498224][ T13] usb 6-1: can't set config #0, error -71 [ 409.520476][ T13] usb 6-1: USB disconnect, device number 8 [ 411.407125][ T7784] loop3: detected capacity change from 0 to 32768 [ 411.502552][ T7784] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 411.511309][ T7784] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 411.555560][ T7784] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 411.555560][ T7784] inode = 1 19 [ 411.555560][ T7784] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 411.574136][ T7784] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 411.582061][ T7784] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 411.591107][ T7784] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 411.600697][ T7784] gfs2: fsid=syz:syz.s: File system withdrawn [ 411.607051][ T7784] CPU: 1 PID: 7784 Comm: syz.3.782 Not tainted syzkaller #0 [ 411.614383][ T7784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 411.624664][ T7784] Call Trace: [ 411.627981][ T7784] [ 411.630939][ T7784] dump_stack_lvl+0x168/0x230 [ 411.635745][ T7784] ? kobject_uevent_env+0x371/0x890 [ 411.641079][ T7784] ? show_regs_print_info+0x20/0x20 [ 411.646324][ T7784] ? load_image+0x3b0/0x3b0 [ 411.651057][ T7784] ? kobject_uevent_env+0x371/0x890 [ 411.656535][ T7784] ? preempt_schedule_thunk+0x16/0x18 [ 411.661977][ T7784] gfs2_withdraw+0x111b/0x1460 [ 411.666830][ T7784] ? gfs2_lm+0x220/0x220 [ 411.671100][ T7784] ? make_kgid+0x1aa/0x640 [ 411.675660][ T7784] ? from_kuid_munged+0x690/0x690 [ 411.681020][ T7784] ? gfs2_consist_inode_i+0xc0/0xe0 [ 411.686361][ T7784] gfs2_inode_refresh+0xb5e/0xfe0 [ 411.691514][ T7784] ? gfs2_inode_metasync+0xf0/0xf0 [ 411.696659][ T7784] ? __lock_acquire+0x7c60/0x7c60 [ 411.701816][ T7784] inode_go_lock+0x127/0x470 [ 411.706463][ T7784] do_promote+0x741/0xab0 [ 411.710889][ T7784] finish_xmote+0x514/0xb70 [ 411.715526][ T7784] do_xmote+0x7b6/0x1120 [ 411.720112][ T7784] gfs2_glock_nq+0xc7a/0x1550 [ 411.725106][ T7784] check_journal_clean+0x115/0x300 [ 411.730621][ T7784] ? gfs2_trans_remove_revoke+0x370/0x370 [ 411.736372][ T7784] ? check_journal_clean+0x10d/0x300 [ 411.741689][ T7784] ? __rwlock_init+0x140/0x140 [ 411.746486][ T7784] ? do_raw_spin_unlock+0x11d/0x230 [ 411.751710][ T7784] ? _raw_spin_unlock+0x24/0x40 [ 411.756599][ T7784] ? gfs2_jdesc_find+0xa7/0xc0 [ 411.761391][ T7784] init_journal+0x179c/0x2220 [ 411.766113][ T7784] ? end_bio_io_page+0x100/0x100 [ 411.771078][ T7784] ? vsnprintf+0x1905/0x1a00 [ 411.775802][ T7784] ? snprintf+0xd7/0x120 [ 411.780081][ T7784] ? init_journal+0x710/0x2220 [ 411.784880][ T7784] ? vscnprintf+0x80/0x80 [ 411.789249][ T7784] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 411.794714][ T7784] init_inodes+0xdb/0x320 [ 411.799267][ T7784] gfs2_fill_super+0x1701/0x1f50 [ 411.804263][ T7784] ? gfs2_reconfigure+0xcd0/0xcd0 [ 411.809510][ T7784] ? gfs2_glock_nq_num+0x82/0x1b0 [ 411.814695][ T7784] ? preempt_count_add+0x8d/0x190 [ 411.819857][ T7784] ? sb_set_blocksize+0xa5/0xe0 [ 411.824862][ T7784] get_tree_bdev+0x3f1/0x610 [ 411.829502][ T7784] ? gfs2_reconfigure+0xcd0/0xcd0 [ 411.834575][ T7784] gfs2_get_tree+0x4d/0x1e0 [ 411.839109][ T7784] vfs_get_tree+0x88/0x270 [ 411.843571][ T7784] do_new_mount+0x24a/0xa40 [ 411.848126][ T7784] __se_sys_mount+0x2d6/0x3c0 [ 411.852836][ T7784] ? __x64_sys_mount+0xc0/0xc0 [ 411.857805][ T7784] ? lockdep_hardirqs_on+0x94/0x140 [ 411.863029][ T7784] ? __x64_sys_mount+0x1c/0xc0 [ 411.867825][ T7784] do_syscall_64+0x4c/0xa0 [ 411.872265][ T7784] ? clear_bhb_loop+0x30/0x80 [ 411.876980][ T7784] ? clear_bhb_loop+0x30/0x80 [ 411.881689][ T7784] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 411.887624][ T7784] RIP: 0033:0x7f1f4a72434a [ 411.892062][ T7784] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.912043][ T7784] RSP: 002b:00007f1f48989e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 411.920487][ T7784] RAX: ffffffffffffffda RBX: 00007f1f48989ef0 RCX: 00007f1f4a72434a [ 411.928489][ T7784] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f1f48989eb0 [ 411.936477][ T7784] RBP: 0000200000000400 R08: 00007f1f48989ef0 R09: 0000000000200001 [ 411.944467][ T7784] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 411.952468][ T7784] R13: 00007f1f48989eb0 R14: 00000000000125d5 R15: 0000200000000240 [ 411.960497][ T7784] [ 411.963588][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.969904][ T7784] gfs2: fsid=syz:syz.s: Error -5 locking journal for spectator mount. [ 411.985816][ T4198] Bluetooth: hci0: link tx timeout [ 411.991161][ T4198] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 412.020926][ T4198] Bluetooth: hci0: link tx timeout [ 412.026520][ T4198] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 413.519007][ T7817] loop5: detected capacity change from 0 to 40427 [ 413.599475][ T7817] F2FS-fs (loop5): invalid crc value [ 414.010160][ T7817] F2FS-fs (loop5): Found nat_bits in checkpoint [ 414.054355][ T7817] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 414.263331][ T7817] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 414.305894][ T7829] loop4: detected capacity change from 0 to 128 [ 414.419682][ T7825] loop6: detected capacity change from 0 to 40427 [ 414.497831][ T7825] F2FS-fs (loop6): invalid crc value [ 414.576774][ T7825] F2FS-fs (loop6): Found nat_bits in checkpoint [ 414.621448][ T7825] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 414.636365][ T7825] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 414.810813][ T7838] overlayfs: failed to resolve './file0': -2 [ 415.138767][ T7825] attempt to access beyond end of device [ 415.138767][ T7825] loop6: rw=2049, want=53256, limit=40427 [ 415.319896][ T6163] attempt to access beyond end of device [ 415.319896][ T6163] loop6: rw=2049, want=45104, limit=40427 [ 416.803931][ T7870] loop6: detected capacity change from 0 to 32768 [ 416.888930][ T7870] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.806 (7870) [ 416.924120][ T7870] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 416.933651][ T7870] BTRFS info (device loop6): using free space tree [ 416.940300][ T7870] BTRFS info (device loop6): has skinny extents [ 417.417250][ T7870] BTRFS info (device loop6): enabling ssd optimizations [ 421.311059][ T7938] overlayfs: failed to resolve './file0': -2 [ 421.860332][ T7949] loop5: detected capacity change from 0 to 128 [ 431.557997][ T8025] overlayfs: failed to resolve './file0': -2 [ 440.499529][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.514592][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.763202][ T8087] loop5: detected capacity change from 0 to 128 [ 443.412050][ T4198] Bluetooth: hci0: link tx timeout [ 443.417253][ T4198] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 443.427981][ T4198] Bluetooth: hci0: link tx timeout [ 443.433457][ T4198] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 452.346513][ T8181] loop5: detected capacity change from 0 to 128 [ 457.635168][ T8219] overlayfs: failed to resolve './file1': -2 [ 466.059591][ T8285] loop3: detected capacity change from 0 to 128 [ 466.250599][ T8289] overlayfs: failed to resolve './file1': -2 [ 469.960799][ T8336] overlayfs: failed to resolve './file1': -2 [ 471.347282][ T8341] loop3: detected capacity change from 0 to 128 [ 480.129299][ T8421] loop4: detected capacity change from 0 to 128 [ 491.856361][ T8503] loop3: detected capacity change from 0 to 128 [ 502.668499][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.675453][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.782349][ T8591] loop6: detected capacity change from 0 to 128 [ 508.556574][ T4198] Bluetooth: hci0: link tx timeout [ 508.562227][ T4198] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 508.575340][ T4198] Bluetooth: hci0: link tx timeout [ 508.580747][ T4198] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 513.072202][ T8678] loop3: detected capacity change from 0 to 128 [ 521.704710][ T8750] loop3: detected capacity change from 0 to 40427 [ 522.010331][ T8750] F2FS-fs (loop3): invalid crc value [ 522.367181][ T8750] F2FS-fs (loop3): Found nat_bits in checkpoint [ 522.388686][ T8762] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 522.539525][ T8750] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 522.575880][ T8750] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 523.670223][ T4185] attempt to access beyond end of device [ 523.670223][ T4185] loop3: rw=2049, want=45104, limit=40427 [ 525.092654][ T8789] loop4: detected capacity change from 0 to 32768 [ 525.195467][ T8794] loop5: detected capacity change from 0 to 4096 [ 525.330456][ T8794] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 525.390146][ T8789] XFS (loop4): Mounting V5 Filesystem [ 525.408663][ T8803] tmpfs: Unknown parameter 'usrquota' [ 526.032127][ T8789] XFS (loop4): Ending clean mount [ 526.040719][ T8789] XFS (loop4): Quotacheck needed: Please wait. [ 526.198406][ T8789] XFS (loop4): Quotacheck: Done. [ 527.098921][ T4183] XFS (loop4): Unmounting Filesystem [ 531.758735][ T8849] kvm: pic: non byte write [ 531.830415][ T7947] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 532.004170][ T8856] loop5: detected capacity change from 0 to 256 [ 532.070585][ T8856] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 532.083827][ T7947] usb 5-1: Using ep0 maxpacket: 32 [ 532.208094][ T7947] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 532.216538][ T7947] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 532.228189][ T7947] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 532.248106][ T7947] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 532.272889][ T7947] usb 5-1: config 0 interface 0 has no altsetting 0 [ 532.491108][ T8863] tap0: tun_chr_ioctl cmd 35111 [ 533.318259][ T7947] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 533.327470][ T7947] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 533.347957][ T7947] usb 5-1: Product: syz [ 533.352197][ T7947] usb 5-1: Manufacturer: syz [ 533.356829][ T7947] usb 5-1: SerialNumber: syz [ 533.397367][ T7947] usb 5-1: config 0 descriptor?? [ 533.439698][ T7947] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 533.481188][ T7947] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 534.455130][ T8885] tmpfs: Unknown parameter 'usrquota' [ 535.074304][ T8896] loop6: detected capacity change from 0 to 64 [ 535.429210][ T8902] loop3: detected capacity change from 0 to 32768 [ 535.489872][ T8904] tmpfs: Unknown parameter 'usrquota' [ 535.670808][ T8902] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1089 (8902) [ 536.188607][ T13] usb 5-1: USB disconnect, device number 11 [ 536.209025][ T8902] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 536.217860][ T8902] BTRFS info (device loop3): enabling ssd optimizations [ 536.225197][ T8902] BTRFS info (device loop3): using spread ssd allocation scheme [ 536.232915][ T8902] BTRFS info (device loop3): setting nodatacow, compression disabled [ 536.241168][ T8902] BTRFS info (device loop3): not using ssd optimizations [ 536.248276][ T8902] BTRFS info (device loop3): not using spread ssd allocation scheme [ 536.256339][ T8902] BTRFS info (device loop3): max_inline at 0 [ 536.262423][ T8902] BTRFS info (device loop3): using free space tree [ 536.268988][ T8902] BTRFS info (device loop3): has skinny extents [ 536.294287][ T13] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 536.295139][ T8911] netlink: 'syz.0.1092': attribute type 21 has an invalid length. [ 536.359299][ T8911] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1092'. [ 536.403959][ T8911] netlink: 'syz.0.1092': attribute type 21 has an invalid length. [ 536.479821][ T8911] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1092'. [ 536.648564][ T8930] overlayfs: missing 'lowerdir' [ 539.293356][ T8972] tmpfs: Unknown parameter 'usrquota' [ 539.973411][ T8978] loop3: detected capacity change from 0 to 128 [ 540.519889][ T8985] overlayfs: missing 'lowerdir' [ 541.391447][ T8994] overlayfs: failed to clone upperpath [ 543.440679][ T9019] loop5: detected capacity change from 0 to 128 [ 544.021974][ T9023] loop4: detected capacity change from 0 to 40427 [ 544.043862][ T9027] overlayfs: missing 'lowerdir' [ 544.824321][ T9023] F2FS-fs (loop4): invalid crc value [ 545.122360][ T9023] F2FS-fs (loop4): Found nat_bits in checkpoint [ 545.157731][ T9023] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 545.183900][ T9023] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 545.277385][ T4198] Bluetooth: hci5: Unknown advertising packet type: 0xfa [ 545.277487][ T4198] Bluetooth: hci5: Unknown advertising packet type: 0x20 [ 545.285971][ T4198] ================================================================== [ 545.302092][ T4198] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12c0/0x3b80 [ 545.310217][ T4198] Read of size 1 at addr ffff88802ace4c0a by task kworker/u5:6/4198 [ 545.318443][ T4198] [ 545.320775][ T4198] CPU: 0 PID: 4198 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 545.328839][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 545.339118][ T4198] Workqueue: hci5 hci_rx_work [ 545.343942][ T4198] Call Trace: [ 545.347242][ T4198] [ 545.350208][ T4198] dump_stack_lvl+0x168/0x230 [ 545.354985][ T4198] ? show_regs_print_info+0x20/0x20 [ 545.360294][ T4198] ? load_image+0x3b0/0x3b0 [ 545.364804][ T4198] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 545.370342][ T4198] print_address_description+0x60/0x2d0 [ 545.375920][ T4198] ? hci_le_meta_evt+0x12c0/0x3b80 [ 545.381156][ T4198] kasan_report+0xdf/0x130 [ 545.385694][ T4198] ? hci_le_meta_evt+0x12c0/0x3b80 [ 545.390864][ T4198] hci_le_meta_evt+0x12c0/0x3b80 [ 545.396027][ T4198] ? hci_event_packet+0x2d0/0x12f0 [ 545.401191][ T4198] ? hci_remote_host_features_evt+0x280/0x280 [ 545.407627][ T4198] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 545.413290][ T4198] ? mark_lock+0x94/0x320 [ 545.417644][ T4198] ? mutex_unlock+0x10/0x10 [ 545.422161][ T4198] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 545.428262][ T4198] ? lock_chain_count+0x20/0x20 [ 545.433134][ T4198] ? __rwlock_init+0x140/0x140 [ 545.437925][ T4198] hci_event_packet+0xe05/0x12f0 [ 545.442936][ T4198] ? lockdep_hardirqs_on+0x94/0x140 [ 545.448337][ T4198] ? rcu_lock_release+0x20/0x20 [ 545.453214][ T4198] ? hci_send_to_monitor+0x9c/0x4a0 [ 545.458628][ T4198] hci_rx_work+0x255/0xa10 [ 545.463246][ T4198] process_one_work+0x863/0x1000 [ 545.468215][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 545.473874][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 545.479557][ T4198] ? _raw_spin_lock_irq+0xab/0xe0 [ 545.484914][ T4198] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 545.490513][ T4198] ? wq_worker_running+0x97/0x170 [ 545.495565][ T4198] worker_thread+0xaa8/0x12a0 [ 545.500412][ T4198] kthread+0x436/0x520 [ 545.504504][ T4198] ? rcu_lock_release+0x20/0x20 [ 545.509374][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 545.514015][ T4198] ret_from_fork+0x1f/0x30 [ 545.518494][ T4198] [ 545.521529][ T4198] [ 545.523856][ T4198] Allocated by task 9045: [ 545.528198][ T4198] __kasan_kmalloc+0xb5/0xf0 [ 545.532809][ T4198] __alloc_skb+0x22c/0x750 [ 545.537308][ T4198] vhci_write+0xbc/0x450 [ 545.541553][ T4198] vfs_write+0x712/0xd00 [ 545.545837][ T4198] ksys_write+0x14d/0x250 [ 545.550190][ T4198] do_syscall_64+0x4c/0xa0 [ 545.554658][ T4198] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 545.560562][ T4198] [ 545.562887][ T4198] The buggy address belongs to the object at ffff88802ace4800 [ 545.562887][ T4198] which belongs to the cache kmalloc-1k of size 1024 [ 545.576937][ T4198] The buggy address is located 10 bytes to the right of [ 545.576937][ T4198] 1024-byte region [ffff88802ace4800, ffff88802ace4c00) [ 545.590771][ T4198] The buggy address belongs to the page: [ 545.596493][ T4198] page:ffffea0000ab3800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802ace5800 pfn:0x2ace0 [ 545.608085][ T4198] head:ffffea0000ab3800 order:3 compound_mapcount:0 compound_pincount:0 [ 545.616560][ T4198] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 545.624591][ T4198] raw: 00fff00000010200 ffffea0001d95200 0000000500000005 ffff888016841dc0 [ 545.633491][ T4198] raw: ffff88802ace5800 000000008010000a 00000001ffffffff 0000000000000000 [ 545.642662][ T4198] page dumped because: kasan: bad access detected [ 545.649504][ T4198] page_owner tracks the page as allocated [ 545.655662][ T4198] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 1481, ts 275753226938, free_ts 275722937050 [ 545.674759][ T4198] get_page_from_freelist+0x1b77/0x1c60 [ 545.680604][ T4198] __alloc_pages+0x1e1/0x470 [ 545.685231][ T4198] new_slab+0xc0/0x4b0 [ 545.689554][ T4198] ___slab_alloc+0x81e/0xdf0 [ 545.694180][ T4198] __kmalloc+0x1cd/0x330 [ 545.698645][ T4198] ieee802_11_parse_elems_crc+0xab/0x10c0 [ 545.704378][ T4198] ieee80211_bss_info_update+0x75d/0xaa0 [ 545.710036][ T4198] ieee80211_ibss_rx_queued_mgmt+0x16d0/0x29c0 [ 545.716354][ T4198] ieee80211_iface_work+0x70e/0xc60 [ 545.721592][ T4198] process_one_work+0x863/0x1000 [ 545.726548][ T4198] worker_thread+0xaa8/0x12a0 [ 545.731246][ T4198] kthread+0x436/0x520 [ 545.735319][ T4198] ret_from_fork+0x1f/0x30 [ 545.739738][ T4198] page last free stack trace: [ 545.744402][ T4198] free_unref_page_prepare+0x637/0x6c0 [ 545.749954][ T4198] free_unref_page+0x94/0x280 [ 545.754652][ T4198] __unfreeze_partials+0x1a5/0x200 [ 545.759804][ T4198] put_cpu_partial+0x12d/0x190 [ 545.764597][ T4198] qlist_free_all+0x35/0x90 [ 545.769115][ T4198] kasan_quarantine_reduce+0x150/0x160 [ 545.774661][ T4198] __kasan_slab_alloc+0x2f/0xd0 [ 545.779646][ T4198] slab_post_alloc_hook+0x4c/0x380 [ 545.785136][ T4198] kmem_cache_alloc_node+0x12d/0x2d0 [ 545.790455][ T4198] __alloc_skb+0xf4/0x750 [ 545.795206][ T4198] __ip_append_data+0x2050/0x3230 [ 545.800400][ T4198] ip_append_data+0x132/0x1a0 [ 545.805118][ T4198] raw_sendmsg+0x131a/0x1890 [ 545.809728][ T4198] ____sys_sendmsg+0x5a2/0x8c0 [ 545.814673][ T4198] ___sys_sendmsg+0x1f0/0x260 [ 545.819595][ T4198] __sys_sendmmsg+0x27c/0x4a0 [ 545.824294][ T4198] [ 545.826678][ T4198] Memory state around the buggy address: [ 545.832596][ T4198] ffff88802ace4b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.840665][ T4198] ffff88802ace4b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.848733][ T4198] >ffff88802ace4c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 545.856973][ T4198] ^ [ 545.861470][ T4198] ffff88802ace4c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 545.869555][ T4198] ffff88802ace4d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 545.877620][ T4198] ================================================================== [ 545.885703][ T4198] Disabling lock debugging due to kernel taint [ 545.900210][ T4198] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 545.907462][ T4198] CPU: 0 PID: 4198 Comm: kworker/u5:6 Tainted: G B syzkaller #0 [ 545.916634][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 545.926709][ T4198] Workqueue: hci5 hci_rx_work [ 545.931405][ T4198] Call Trace: [ 545.934690][ T4198] [ 545.937653][ T4198] dump_stack_lvl+0x168/0x230 [ 545.942338][ T4198] ? show_regs_print_info+0x20/0x20 [ 545.947537][ T4198] ? load_image+0x3b0/0x3b0 [ 545.952055][ T4198] panic+0x2c9/0x7f0 [ 545.956068][ T4198] ? bpf_jit_dump+0xd0/0xd0 [ 545.960805][ T4198] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 545.966716][ T4198] ? _raw_spin_unlock+0x40/0x40 [ 545.971604][ T4198] ? hci_le_meta_evt+0x12c0/0x3b80 [ 545.976722][ T4198] check_panic_on_warn+0x80/0xa0 [ 545.981903][ T4198] ? hci_le_meta_evt+0x12c0/0x3b80 [ 545.987222][ T4198] end_report+0x6d/0xf0 [ 545.991642][ T4198] kasan_report+0x102/0x130 [ 545.996287][ T4198] ? hci_le_meta_evt+0x12c0/0x3b80 [ 546.001613][ T4198] hci_le_meta_evt+0x12c0/0x3b80 [ 546.006564][ T4198] ? hci_event_packet+0x2d0/0x12f0 [ 546.011690][ T4198] ? hci_remote_host_features_evt+0x280/0x280 [ 546.017771][ T4198] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 546.023500][ T4198] ? mark_lock+0x94/0x320 [ 546.027902][ T4198] ? mutex_unlock+0x10/0x10 [ 546.032532][ T4198] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 546.038527][ T4198] ? lock_chain_count+0x20/0x20 [ 546.043381][ T4198] ? __rwlock_init+0x140/0x140 [ 546.048161][ T4198] hci_event_packet+0xe05/0x12f0 [ 546.053191][ T4198] ? lockdep_hardirqs_on+0x94/0x140 [ 546.058398][ T4198] ? rcu_lock_release+0x20/0x20 [ 546.063537][ T4198] ? hci_send_to_monitor+0x9c/0x4a0 [ 546.068853][ T4198] hci_rx_work+0x255/0xa10 [ 546.073543][ T4198] process_one_work+0x863/0x1000 [ 546.078545][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 546.084198][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 546.089502][ T4198] ? _raw_spin_lock_irq+0xab/0xe0 [ 546.094732][ T4198] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 546.100360][ T4198] ? wq_worker_running+0x97/0x170 [ 546.105429][ T4198] worker_thread+0xaa8/0x12a0 [ 546.110239][ T4198] kthread+0x436/0x520 [ 546.114338][ T4198] ? rcu_lock_release+0x20/0x20 [ 546.119292][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 546.123892][ T4198] ret_from_fork+0x1f/0x30 [ 546.128320][ T4198] [ 546.131617][ T4198] Kernel Offset: disabled [ 546.136078][ T4198] Rebooting in 86400 seconds..