last executing test programs: 5.697014448s ago: executing program 3 (id=1054): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000001b40)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x69}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='percpu_alloc_percpu\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.483538716s ago: executing program 3 (id=1057): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={0x0, 0xfffffffc}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @local, 0x5}]}, &(0x7f0000000180)=0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60122d9222363a0000000000000000000000ffffac1414aaff020000"], 0x0) epoll_create(0x9) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r2, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0xf000000, &(0x7f00000003c0)={&(0x7f0000000400)={0x2c, 0xb, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) 5.138980224s ago: executing program 3 (id=1063): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 4.82917664s ago: executing program 3 (id=1072): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) tkill(r1, 0xb) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x21200b5, 0x0) 4.82894105s ago: executing program 1 (id=1073): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={0x0, 0xfffffffc}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @local, 0x5}]}, &(0x7f0000000180)=0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60122d9222363a0000000000000000000000ffffac1414aaff020000"], 0x0) epoll_create(0x9) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r2, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0xf000000, &(0x7f00000003c0)={&(0x7f0000000400)={0x2c, 0xb, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) 4.653273434s ago: executing program 1 (id=1078): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010800000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 4.568211241s ago: executing program 1 (id=1080): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.255565278s ago: executing program 1 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/45, 0x2d, 0x40000140, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r4, &(0x7f00000000c0)={0xa, {0x0, 0x3, 0x11}}, 0xa) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200), &(0x7f0000000940)=0x4) sendmsg$AUDIT_ADD_RULE(r2, 0x0, 0x4000041) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) r5 = dup(0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380), 0xc, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x30}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 4.081334432s ago: executing program 4 (id=1088): r0 = socket$inet(0x2, 0x6, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0xf0, 0x0) 3.822520423s ago: executing program 4 (id=1091): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x200002a3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.62361064s ago: executing program 2 (id=1093): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x2f00, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.49311807s ago: executing program 4 (id=1095): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000001000090400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="00000000000000004800128011000100a8447147afb69ea36c6176650000000030000580050009000000000005000500010000000500040000000000050007000100000005001d000000000004001800"], 0x68}}, 0x800) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000340), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000040), &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0], 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfe3c) r4 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000380)='./bus\x00', 0x101200, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40086602, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket(0x12, 0x1, 0x271a) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0x2010020}, {0xa, 0x0, 0xc5, @mcast2, 0x4}, 0xffffffffffffffff, {[0x0, 0x94b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3]}}, 0x5c) 3.388424409s ago: executing program 2 (id=1097): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x1000080, &(0x7f0000001b80)=ANY=[@ANYBLOB='errors=continue,discard,allow_utime=0000000000000000401,iocharset=iso8859-7,fmask=00000000000000000100001,dmask=00000000000000000000000,namecase=1,utf8,namecase=1,\x00'], 0x1, 0x1515, &(0x7f00000002c0)="$eJzs3Au8jdXWMPAx5pwPm6SV5D7HHA8ruUySJJeEXJIkSZLcEpIkSUJyyy0JScg95B6SW0ju9/s9SY4kSUJCkvn9VOd1ztd7vvrec77Pe949/r/fs/cc+1ljrPGssfZez3p+e+9v2g2sVKdy+VrMDP8U/PVTVwBIAYA+AHAdAEQAUCxTsUyX96fT2PWfuxPxr/Xw1KvdgbiaZP6pm8w/dZP5p24y/9RN5p+6yfxTN5l/6ibzFyI12zot+/Wypd7tz1//d//n3XL9/9+QvP7/j/WnvtNk/qmbzD91k/mnbjL/1E3mn7rJ/FM3mX/qJvMXIjW72tef/w22vz5UV7uPP9ii/1Le1X32CSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYRILc6HKwwA/HV9tfsSQgghhBBCCCHEv05Ie7U7EEIIIYQQQgghxP97CGA0GIggDaSFFEgH6eEayADXQka4DhJwPWSCGyAz3AhZICtkg+yQA3JCLrBA4IAhhtyQB5JwE+SFmyEf5IcCUBA8FILCcAsUgVuhKNwGxWD2QoA7oASUhFJQGu6EMnAXlIVyUB7uhgpQESpBZbgHqsC9UBXug2pwP1SHB6AGPAg14SGoBQ9DbXgE6sCjUBceg3pQHxpAQ2j0X8p/CTrBy9AZukBX6Abd4RXoAT2hF/SGPvAq9IXXoB+8Dv1hAAyEN2AQvAmD4S0YAkNhGLwNw2EEjIRRMBrGwFh4B8bBeJgA78JEmASTYQpMhWkwHd6DGTATZsH7MBs+gDkwF+bBfFgAH8JCWASL4SNYAh/DUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW2AbbYQfshF2wG/aU2wufwD74FPbDZ3AAPv+/zD8Hf5/fHgEBFSo0aDANpsEUTMH0mB4zYAbMiBkxgQnMhJkwM2bGLJgFs2E2zIE50l1+4hASMjLmxtyYxCTmxbyYD/NhASyAHj0WxsJYBG/FolgUi2ExLI7FsQSWxJJYGktjGSyDZbEslr9jLgBWwEpYCe/Be/BerIpVsRpWw+pYHWtgDayJNbEW1sLaWBvrYB2si3WxHtbDBtgAG2EjbIyNsQk2wWbYDJtjc2yBLbAltsRW2ApbY2tsg22wLbbFdtgO22MH7IAv4Uv4Mr6MXbCC6obdsTv2wB7YC3tjb3wV++Jr+Bq+jv1xAA7EN/ANfBMH41kcgkNxGA7DMmoEjsRRyGoMjsWxOA7H4QScgBNxEk7CKTgVp+F0nI4zcCbOxPdxNn6AH+BcnIvzcQEuwIW4CBfjYlyC53ApLsPluAJX4ipciWtwLa7B9bgB1+Mm3IRbcAtuw224A3fgLtyFe3APfoKf4Kf4KfbHA3gAD+JBPISH8DAexiN4BI/i0W3XAOBxPI4n8ASexFN4Gk/hGTyDZ/EcnsfzeAEv4EV8IcdXtffkX9cf1GVGGZVGpVEpKkWlV+lVBpVBZVQZVUIlVCaVSWVWmVUWlUVlU9lUDpVD5VK5FClSrGKVW+VWSZVUeVVelU/lUwVUAeWVV4VVYVVEFVFFVVFVTN2uiqs7VAlVUjX1pVVpVUY182VVOVVelVcVVEVVSVVWlVUVVUVVVVVVNVVNVVfVVQ31oKqpumEvfFhdnkwdNQDrqoFYT9VXDVRD9SY+rhqrwdhENVXN1JNqKA7BFqqxb6meUa3USGytnlOj8HnVVo3BdupF1V51UB3VS6qTauI7qy5qInZT3dUU7KF6ql6qt5qBFdXliVVSr6v+aoAaqN5Q8/FNNVi9pYaooWqYelsNVyPUSDVKjVZj1Fj1jhqnxqsJ6l01UU1Sk9UUNVVNU9PVe2qGmqlmqffVbPWBmqPmqnlqvlqgPlQL1SK1WH2klqiP1VK1TC1XK9RKtUqtVmvUWrVOrVcb1Ea1SW1WW9RWtU1tVzvUTrVL7VZ71F71idqnPlX71WfqgPpcHVR/UYfUF+qw+lIdUV+po+prdUx9o46rb9UJ1UWdVKfUafW9OqN+UGfVOXVe/aguqJ/URfWzuqSCAo1aaa2NjnQanVan6HQ6vb5GZ9DX6oz6Op3Q1+tM+gadWd+os+isOpvOrnPonDqXtpq006xjnVvn0Ul9k86rb9b5dH5dQBfUXhfShfUtuoi+VRfVt+li+nZdXN+hS+iSupQure/UZfRduqwup8vru3UFXVFX0pX1PbqKvldX1ffpavp+XV0/oGvoB3VN/ZCupR/WtfUjuo5+VNfVj+l6ur5uoBvqRvpx3Vg/oZvoprqZflI310/pFvpp3VI/o1vpZ3Vr/Zxuo5/XbfULup1+UbfXHXRH/bO+pIPurLvorrqb7q5f0T10T91L99Z99Ku6r35N99Ov6/56gB6o39CD9Jt6sH5LD9FD9TD9th6uR+iRepQercfosfodPU6P1xP0u3qinqQn6yl6qp6me/1WadafyB//n+T3++Xet+itepvernfonXqX3q336L16r96n9+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqFP6JP6lP5Rf6/P6B/0WX1On9M/6gv6gr7422MABo0y2hgTmTQmrUkx6Ux6c43JYK41Gc11JmGuN5nMDSazudFkMVlNNpPd5DA5TS5jDRln2MQmt8ljkuYmk9fcbPKZ/KaAKWi8KWQKm1v+6fx/0N+Kyb+evJhGppFpbBqbJqaJaWaameamuWlhWpiWpqVpZVqZ1qa1aWPamLamrWln2pn2pr3paDqaTqaT6Yxgupquprt5xfQwPU0v09v0Ma+avqav6Wf6mf6mvxloBppBZpAZbAabIWaIMQAw3Aw3I81IM9qMNmPNWDPOjDMTzAQz0Uw0k81kM9VMNdPNdDPDzDCzzCwz28w2c8wcM8/MMwvMArPQLDSLzWKzxCwxS80ys8ysMCvMKrPKrDFrzDqzzmwwG8wms8ksNVvNVrPdbDc7zU6z2+w2e81es8/sM/vNfnPAHDAHzUFzyBwyh81hc8QcMUfNUXPMHDPHzXFzwpwwJ81Jc9qcNmfMGXPWnDXnzXlzwVwwF81Fc8lcunzaF6lIRSYyUZooTZQSpUTpo/RRhihDlDHKGCWiRJQpyhRljm6MskRZo2xR9ihHlDPKFdmIIhdxFEe5ozxRMropyhvdHOWL8kcFooKRjwpFhaNboiLRrVHR6LaoWHR7VDy6IyoRlYxKRaWjO6My0V1R2ahcVD66O6oQVYwqRZWje6Iq0b1R1ei+qFp0f1Q9eiCqET0Y1YweimpFD0e1o0eiOtGjUd3osaheVD9qEDWMGv1L64dwNusTvrPtYtNCN9vdvmJ72J62l+1t+9hXbV/7mu1nX7f97QA70L5hB9k37WD7lh1ih9ph9m073I6wI+0oO9qOsWPtO3acHW8n2HftRDvJTrZT7FQ7zU6379kZdqadZd+3s+0Hdo6da+fZ+XaB/dAutIvsYvuRXWI/tkvtMrvcrrAr7Sq72q6xa+06u95usBvtJrvZbrFb7Ta73e6wO+0uu9vusXvtJ3af/dTut5/ZA/Zze9Cm/HZ+/6U9Yr+yR+3X9pj9xh6339oT9jt70p6yp+339oz9wZ615+x5+6O9YH+yF+3P9pINl0/uL7+8kyFDaSgNpVAKpaf0lIEyUEbKSAlKUCbKRJkpM2WhLJSNslEOykG5KBddxsSUm3JTkpKUl/JSPspHBagAefJUmApTESpCRakoFaNiVJyKUwkqQaWoFN1Jd9JddBeVo3J0N91NFakiVabKVIWqUFWqStWoGlWn6lSDalBNqkm1qBbVptpUh+pQXapL9ageNaAG1IgaUWNqTE2oCTWjZtScmlMLakEtqSW1olbUmlpTG2pDbakttaN21J7aU0fqSJ2oE3WmztSVulJ36k49qAf1ol7Uh/pQX+pL/agf9af+NJAG0iAaRINpMA2hoTSM3qbhNIJG0igaTWNoLI2lcTSOJtAEmkgTaTJNpqk0labTdJpBM2gWzaLZNJvm0ByaR/NoAS2ghbSQFtNiWkJLaCktpeW0nFbSSlpNq2ktraX1tJ420kbaTJtpK22l7bSddtJO2k27aS/tpX20j/bTfjpAB+ggHaRDdIgO02E6QkfoKB2lY3SMjtNxOkEn6CSdpNN0ms7QGTpLZ+k8nacL9BNdpJ/pEgVKcelceneNy+CudRndde5/j7O57C6Hy+lyOeuyuKx/F5NzLp/L7wq4gs67Qq6wu+V3cQlX0pVypd2droy7y5V1JVzda359vv4aV1m789dfRHf3u8ruHlfF3euquvtcNXe/q+4ecDXco66me8zVcvVdbdfQ1XGPurruMVfP1XcNXEPX3D3lWrinXUv3jGvlnv1dvNAtcmvdOrfebXD73KfuvPvRHXPfuAvuJ9fZdXF93Kuur3vN9XOvu/5uwO/iYe5tN9yNcCPdKDfajfldPNlNcVPdNDfdvedmuJm/ixe4D91st9jNcXPdPDf/l/hyT4vdR26J+9gtdcvccrfCrXSr3Gq35j96XeE2uc1ui9vrPnHb3Q630+1yu92eX+LLx7HffeYOuM/dUfe1O+S+cIfdcXfEffVLfPn4jrtv3Qn3nTvpTrnT7nt3xv3gzrpzvxz/5WP/3v3sLrnggJEVazYccRpOyymcjtPzNZyBr+WMfB0n+HrOxDdwZr6Rs3BWzsbZOQfn5Fxsmdgxc8y5OQ8n+SbOyzdzPs7PBbggey7EhfkWLsK3clG+jYvx7Vyc7+ASXJJLcWm+k8vwXVyWy3F5vpsrcEWuxJX5Hq7C93JVvo+r8f1cnR/gGvwg1+SHuBY/zLX5Ea7Dj3JdfozrcX1uwA25ET/OjfkJbsJNuRk/yc35KW7BT3NLfoZb8bPcmp/jNvw8t+UXuB2/yO25A3fkl7gTv8yduQt35W7cnV/hHtyTe3Fv7sOvcl9+jfvx69yfB/BAfoMH8Zs8mN/iITyUh/HbPJxH8EgexaN5DI/ld3gcj+cJ/C5P5Ek8mafwVJ7G0/k9nsEzeRa/z7P5A57Dc3kez+cF/CEv5EW8mD/iJfwxL+VlvJxX8Epexat5Da/ldbyeN/BG3sSbeQtv5W28nXcw8i7ezXt4L3/C+/hT3s+f8QH+nA/yX/gQf8GH+Us+wl/xUf6aj/E3fJy/5RP8HZ/kU3yav+cz/AOf5XN8nn/kC/wTX+Sf+RIHhhhjFevYxFGcJk4bp8Tp4vTxNXGG+No4Y3xdnIivjzPFN8SZ4xvjLHHWOFucPc4R54xzxTam2MUcx3HuOE+cjG+K88Y3x/ni/HGBuGDs40Jx4fiWuEh8a1w0vi0uFt8eF4/viEvEJeNH7y8d3xmXie+Ky8bl4vLx3XGFuGJcKa4c3xNXie+Nq8b3xdXi++Oi8QNxjfjBuGb8UFwrfjiuHT8S14kfjevGj8X14vpxg7hh3Ch+PG4cPxE3iZvGzeIn4+bxU3GL+Om4ZfxM3Cp+9g/3d427xd3jV+JX4hDu0/OS85MLkh8mFyYXJRcnP0ouSX6cXJpcllyeXJFcmVyVXJ1ck1ybXJdcn9yQ3JjclNyc3JIMoXJa8OiV1974yKfxaX2KT+fT+2t8Bn+tz+iv8wl/vc/kb/CZ/Y0+i8/qs/nsPofP6XN568k7zz72uX0en/Q3+bz+Zp/P5/cFfEHvfSFf2Df0jXwj39g/4Zv4pr6Zf9I/6Z/yT/mn/dP+Gd/KP+tb++d8G/+8b+tf8C/4F31738F39C/5Tv5l39l38V19V9/dd/c9fA/fy/fyfXwf39f39f18P9/f9/cD/UA/yA/yg/1gP8QP8cP8MD/cD/cj/Ug/2o/2Y/1YP86P8xP8BD/RT/ST/WQ/1U/10/10P8PP8LP8LD8732w/x8/x8/w8v8Av8Av9Qr/YL/ZL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv9dr/T7/S7/W6/1+/1+/w+v9/v9wf8AX/QHzwf/CF/2H/pj/iv/FH/tT/mv/HH/bf+hP/On/Sn/Gn/vT/jf/Bn/Tl/3v/oL/if/EX/s7/kgx+beCcxLjE+MSHxbmJiYlJicmJKYmpiWmJ64r3EjMTMxKzE+4nZiQ8ScxJzE/MS8xMLEh8mFiYWJRYnPkosSXycWJpYllieWJFYmViVCCHn9jjkDnlCMtwU8oabQ76QPxQIBYMPhULhcEsoEm4NRcNtoVi4PRQPd4QSoWQoFR4L9UL90CA0DI3C46FxeCI0CU1Ds/BkaB6eCi3C06FleCa0Cs+G1uG50CY8H9qGF0K78GJoHzqEjuGl0Cm8HDoHHbqGbqF7eCX0CD1Dr9A79Amvhr7htdAvvB76hwFhYHgjDApvhsHhrTAkDA3DwttheBgRRoZRYXQYE8aGd8K4MD5MCO+GiWFSmBymhKlhWpge3gszwswwK7wfZocPwpwwN8wL88OC8GFYGBaFxeGjsCR8HJaGZWF5WBEgZVVYHdaEtWFdWB82hI1hU9gctoStYVvYHnaEnWFX2B32hL3hk7AvfBr2h8/CgfB5OBj+Eg6FL8Lh8GU4Er4KR8PX4Vj4JhwP34YT4btwMpwKp8P34Uz4IZwN58L58GO4EH4KF8PP4ZL8zZoQQgghxJ8y/g/2d/u7SP3HR/XbV7oDwLU7sh/521tpANiY5dd1T5WjeQIAnunS7uG/bhUqdO3a9bfbLtUQ5ZkLAIkr+WngSrwMmsFT0BKaQpH/tL+eqsMF/oP6ydsB0v9NTgpcia/Uv/Uf1B8x+w/rzwXIl+dKTjq4El+pX/R3taNf6mdt/Af1030xFqDJ3+RlgCvxlfqF4Ql4Flr+3S2FEEIIIYQQQohf9VSl2vzR+9vL789zmL9mlIC0cCX+o/fnQgghhBBCCCGEuPqe79Dx6cdbtmza5h8syv3jXbJILYs0/z3a+LdfAPy3aOPPLa72TyYhhBBCCCHEv9qVk/6r3YkQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJF6/f/4d2JX+xiFEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIq+1/BQAA//9fYjFa") syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000002200)='./file0/file0/file0\x00', 0x0, &(0x7f0000002400)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0) 3.37823916s ago: executing program 3 (id=1098): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x29, 0xc, 0x1}, {0x1ac, 0xc, 0x1, 0x5}, {0x6, 0x1, 0x0, 0x1}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x12) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r2, r1, 0x12, 0x0, 0x0, @prog_id}, 0x20) syz_mount_image$btrfs(&(0x7f0000000180), &(0x7f0000000140)='./file2\x00', 0x10004, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000000800)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x38, 0x0, "56dbc1e8417fffc3afdcf40c8e13f3151851d4ac3870c5651ff29b7c46af34ae1f337223b9404b26f5de4e01d16c172a5291fff83e4d5a0f58905486fe5e3a89d3a901cddf60835a498bf31954b4f7e2"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x9, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) socket$inet(0x2, 0x3, 0xffffffed) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2000200002) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lstat(0x0, 0x0) read$msr(r4, &(0x7f0000001340)=""/102378, 0x7706c522012798af) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) ustat(0x0, 0x0) 2.397126581s ago: executing program 0 (id=1099): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.391164732s ago: executing program 1 (id=1100): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 2.315705008s ago: executing program 4 (id=1101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x7}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) 2.277233181s ago: executing program 0 (id=1102): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000003c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d63703934392c73657373696f6e3d3078666666666666666666666666666637662c626172726965722c63726561746f723dddf2bd6c2c6e6f6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303037662c63726561746f723d85f194712c626172726965722c63726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c626172726965722c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',nls=default,barrier,uid=', @ANYRESDEC, @ANYRES64=0x0], 0x1, 0x6da, &(0x7f0000004980)="$eJzs3UtoHOcdAPD/rFarXRUcOfEjLYEsMaSlorZkobTqpW4pRYdQQnroebHlWHgtB0kpsimN0se9h5x6Sg+6hR5Keje054ZAyVXHQCGXnHRTmdmZ1Ur7lKzHJv39xMx8M99z/rMzsw/EBPB/a3k2ys8iieXZN7fS9d2dhebEzsJUnt2MiEpElCLKrUUka5Hl3smn+Ha6MS+f9Ovnw9Wltz//aveL1lo5n7LypUH1eqh0b9rOp6hHxES+7DbZp8VPjnZ/qL27fdsbVdLewzRgN4rAxV+eq1V4bvtdttt5H/8nmw+qfpzzFhhTSeu+2WUmYjoiqhGtu35+dSid7+hO3/ZFDwAAAACOq3b8Ki/sxV5sxaWzGA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8U+XP/0/yqVSk65EUz/+v5NsiT4+h4Q9C/GyqtXx29oMBAAAAAAAAgDP36l7sxVZcKtb3k+w3/9c6fuP/VrwXG7ES63EztqIRm7EZ6zEfETMdDVW2Gpub6/NZzYgrA2rejk971Lzdf4x3TnmfAQAAAAAAAGDMVYfkP5zs3vb7WD74/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZBEjHRWmTTlSI9E6VyRFQjopKW2474tEh/TSS9Nj47/3EAAADAc6keXk2qI9R54f3Yi624VKzvJ9ln/mvZ5+VqvBdrsRmrsRnNWIl7+Wfo9FN/aXdnobm7s/Aonbrb/emXxxp61mK0vnvo3fPLWYla3I/VbMvNuBtJ7GdKeSsv7+4spMtHvcf1QTqm5Ce5AaOZ6EjfS2fXP8nSfz78LUL5WLt4QqW+OTNZ7mQ7InP52NIal4sI9I7E0KNTHtjTfJTa3/xcGdxT75h/MLj36SOlen5zcyGORuJ2lNpH6NrgSER89x8f//pBc+3hg/sbs+OzSz29P7TE0UgsdETi+jcoEsPNZZG42l5fjl/Er2I2vpx6K9ZjNX4TjdiMlXqR38hfz+l8ZnCkPpvuXHtr2EjSc7Levn71GlM9Do0p6vHzLNWI17JjeilWI4nHEbESb2R/t2O+fTU4OMJXRzjrSyNcaTvc+F62aIcpav3L/m20Jk9LGtfLHXHtvObOZHmdWw6i9GLPKBX3utHvRx3K38kTaQt/GHh/OG9HIzHfEYmX+r1eWiH9634632iuPVx/0Hh3xP5ez5fpefSnsbpLpEf4xajmO3c5myfZOTWX5b3UvsMejlcl/8WlpdSVd7Vdr3Wm/jIex71DZ+oPYzEWYykrfS0rPdl1x0rzrrdbOnwNT/PSd1rl9g87ne+3Hkez9X4IgPE2/f3pSu2/tX/XPqr9sfag9mb1Z1M/mnqlEpP/mvxxeW7i9dIryd/jo/jdwed/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5DaePH3YaDZX1nsnSr2zksG1Gs394kFiA8ocSiT5o3JGKJxsPHm6P7TBwYmpfHgnrH6aieJpjcML189wGMn20eNVHX4siqc8jdBF0hXwtPKJx1z0fLBlcgwO5dFE/fQaLF6wHVnHf/XWeh2viYjoVXjIhWPiNK4+wEW6tfno3VsbT57+YPVR452Vd1bWJhcXl+aWFt9YuHV/tbky15p3VDiXh98C56Hz7URbJSJeHV53wINaAQAAAAAAAAAAgDN0Hv8LcdH7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHy9Lc9G+VkkMT93cy5d391ZaKZTkT4oWY6IUkQkv41I/hlxJ1pTzHQ0l/Tr58PVpbc//2r3i4O2ykX5UsR233qj2c6nqEfERL48rfbuDm+vcpCc6pGdtCOTBuxGETi4aP8LAAD//7co7JU=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 2.189582679s ago: executing program 1 (id=1103): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100448962b9a74c81f3441800000000000000340000003400000004000000020000000000000800000000000000000000000d00000000010000000000000c02000000020000000000000e0300005027c118e059bdaab4a92a2599f4568aad56fc"], 0x0, 0x50}, 0x20) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @private, @loopback}, &(0x7f0000000300)=0xc) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0xd9, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x24}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0x9}}}}}}}]}}, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x22000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) unshare(0x22020400) r3 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_pidfd_open(r3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000000101060000000400000000020000002c00028014000180080001"], 0x40}}, 0x0) pidfd_send_signal(r4, 0x2, 0x0, 0x0) waitid(0x1, r2, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f00000000c0)='id_resolver\x00', 0x0, 0x0, 0xfffffffffffffffd) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.147816732s ago: executing program 4 (id=1104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffc50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYRESHEX], 0x94}}, 0x0) 2.029215802s ago: executing program 2 (id=1105): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x0, @private1}, @in6={0xa, 0x4e24, 0x0, @remote}]}, &(0x7f0000000180)=0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}}, 0x90) 1.919969501s ago: executing program 0 (id=1106): r0 = socket$inet(0x2, 0x0, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f00000023c0)=[{{&(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000004c0)="16905ace44a46d1152", 0x9}], 0x1}}], 0x1, 0x0) 1.861341886s ago: executing program 2 (id=1107): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x2f00, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.509152015s ago: executing program 2 (id=1108): socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) tkill(r1, 0xb) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x21200b5, 0x0) 1.331920119s ago: executing program 0 (id=1109): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a1) 1.152537634s ago: executing program 4 (id=1110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/45, 0x2d, 0x40000140, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r4, &(0x7f00000000c0)={0xa, {0x0, 0x3, 0x11}}, 0xa) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200), &(0x7f0000000940)=0x4) sendmsg$AUDIT_ADD_RULE(r2, 0x0, 0x4000041) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) r5 = dup(0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380), 0xc, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x30}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 1.069049952s ago: executing program 0 (id=1111): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000001000090400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="00000000000000004800128011000100a8447147afb69ea36c6176650000000030000580050009000000000005000500010000000500040000000000050007000100000005001d000000000004001800"], 0x68}}, 0x800) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000340), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000040), &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0], 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfe3c) r4 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000380)='./bus\x00', 0x101200, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40086602, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket(0x12, 0x1, 0x271a) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0x2010020}, {0xa, 0x0, 0xc5, @mcast2, 0x4}, 0xffffffffffffffff, {[0x0, 0x94b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3]}}, 0x5c) 149.512207ms ago: executing program 0 (id=1112): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0], 0xf4240}) 71.376204ms ago: executing program 3 (id=1113): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 0s ago: executing program 2 (id=1114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x7}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): 198.260645][ T32] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 198.386273][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.431791][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.449963][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.473882][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.494196][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.503810][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.521072][ T3874] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.528220][ T3874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.529739][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 198.598330][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.607036][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.626339][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.646697][ T3879] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.653859][ T3879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.666402][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.675755][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.715196][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.720841][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.738562][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.754557][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.778666][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.787019][ T32] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 198.787051][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.811234][ T32] usb 2-1: config 0 descriptor?? [ 198.857460][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.871759][ T32] hub 2-1:0.0: USB hub found [ 198.885427][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.899147][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.924522][ T5928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.950151][ T5928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.961961][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.981661][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.998509][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.090797][ T32] hub 2-1:0.0: 1 port detected [ 199.363308][ T5974] loop1: detected capacity change from 0 to 1024 [ 199.457217][ T5974] hfsplus: extend alloc file! (8192,65536,366) [ 199.571396][ T5974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.585777][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.592699][ T5974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.594624][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.626141][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.640954][ T5974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.658687][ T5974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.687759][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.874688][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 199.907196][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 199.925003][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.091472][ T3558] Bluetooth: hci7: command tx timeout [ 200.211998][ T5928] device veth0_vlan entered promiscuous mode [ 200.312036][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.348674][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.511225][ T5928] device veth1_vlan entered promiscuous mode [ 200.602590][ T5992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.687'. [ 200.628794][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 200.650378][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 200.668608][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.704154][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.720577][ T3792] hub 2-1:0.0: activate --> -90 [ 200.746722][ T5928] device veth0_macvtap entered promiscuous mode [ 200.776549][ T5992] bridge1: port 1(veth1_to_bond) entered blocking state [ 200.792834][ T5992] bridge1: port 1(veth1_to_bond) entered disabled state [ 200.822114][ T5992] device veth1_to_bond entered promiscuous mode [ 200.841850][ T5992] bridge1: port 1(veth1_to_bond) entered blocking state [ 200.848946][ T5992] bridge1: port 1(veth1_to_bond) entered forwarding state [ 200.865586][ T5928] device veth1_macvtap entered promiscuous mode [ 200.910915][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.919257][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 200.977898][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.998050][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.012517][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.024026][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.034735][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.056747][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.080615][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.093955][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.126077][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.138580][ T3558] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 201.148170][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.169833][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.180725][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.194399][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.205498][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.221508][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.235606][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 201.246803][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 201.264259][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.284181][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.296891][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.310528][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.325882][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.338232][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.357994][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.399393][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.417231][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.428300][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.447152][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.467305][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.479814][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.491213][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.518901][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.542424][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 201.555305][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 201.579715][ T3792] usb 2-1: USB disconnect, device number 8 [ 201.590806][ T3785] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 201.609584][ T5928] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.638230][ T5928] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.659624][ T5928] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.683695][ T5928] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.924044][ T4978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.951343][ T4978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.966693][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 202.008836][ T4978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.027301][ T4978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.040599][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 202.170730][ T3558] Bluetooth: hci7: command tx timeout [ 202.363094][ T3558] Bluetooth: hci7: unexpected event 0x06 length: 23 > 3 [ 202.943173][ T3873] libceph: connect (1)[c::]:6789 error -101 [ 202.974198][ T3873] libceph: mon0 (1)[c::]:6789 connect error [ 203.110507][ T32] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 203.260974][ T3874] libceph: connect (1)[c::]:6789 error -101 [ 203.267098][ T3874] libceph: mon0 (1)[c::]:6789 connect error [ 203.642735][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.664702][ T32] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 203.699950][ T32] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.080884][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.330927][ T3873] libceph: connect (1)[c::]:6789 error -101 [ 204.336936][ T3873] libceph: mon0 (1)[c::]:6789 connect error [ 204.381346][ T32] usb 3-1: config 0 descriptor?? [ 204.549116][ T6040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.699'. [ 204.570293][ T6024] ceph: No mds server is up or the cluster is laggy [ 204.612916][ T6040] device veth1_to_bond left promiscuous mode [ 204.620854][ T6040] bridge2: port 1(veth1_to_bond) entered disabled state [ 204.661770][ T6040] bridge3: port 1(veth1_to_bond) entered blocking state [ 204.682385][ T6040] bridge3: port 1(veth1_to_bond) entered disabled state [ 204.702106][ T6040] device veth1_to_bond entered promiscuous mode [ 204.709381][ T6040] bridge3: port 1(veth1_to_bond) entered blocking state [ 204.716442][ T6040] bridge3: port 1(veth1_to_bond) entered forwarding state [ 205.017245][ T6048] 9pnet_fd: Insufficient options for proto=fd [ 205.332038][ T6053] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 205.387751][ T3558] Bluetooth: hci7: unexpected event 0x06 length: 23 > 3 [ 205.830629][ T6047] loop1: detected capacity change from 0 to 32768 [ 205.868783][ T6047] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.702 (6047) [ 205.898225][ T6047] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 205.909821][ T6047] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 205.918812][ T6047] BTRFS info (device loop1): using free space tree [ 206.010345][ T6047] BTRFS info (device loop1): enabling ssd optimizations [ 206.068220][ T3562] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.326520][ T3570] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 206.342845][ T3570] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 206.359728][ T3570] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 206.368102][ T3570] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 206.461860][ T3570] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 206.470393][ T3570] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 206.483765][ T3873] usb 3-1: USB disconnect, device number 10 [ 207.251109][ T6093] netlink: 20 bytes leftover after parsing attributes in process `syz.2.711'. [ 207.413398][ T6095] bridge1: port 1(veth1_to_bond) entered blocking state [ 207.460669][ T6095] bridge1: port 1(veth1_to_bond) entered disabled state [ 207.491897][ T6095] device veth1_to_bond entered promiscuous mode [ 207.499103][ T6095] bridge1: port 1(veth1_to_bond) entered blocking state [ 207.506192][ T6095] bridge1: port 1(veth1_to_bond) entered forwarding state [ 207.531373][ T3874] libceph: connect (1)[c::]:6789 error -101 [ 207.537417][ T3874] libceph: mon0 (1)[c::]:6789 connect error [ 207.639868][ T3558] Bluetooth: hci1: unexpected event 0x06 length: 23 > 3 [ 207.734193][ T3558] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 207.752609][ T6114] 9pnet_fd: Insufficient options for proto=fd [ 207.870992][ T3879] libceph: connect (1)[c::]:6789 error -101 [ 207.877172][ T3879] libceph: mon0 (1)[c::]:6789 connect error [ 207.932140][ T6087] chnl_net:caif_netlink_parms(): no params data found [ 208.292327][ T6099] ceph: No mds server is up or the cluster is laggy [ 208.303440][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.314515][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.331606][ T6087] device bridge_slave_0 entered promiscuous mode [ 208.399512][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.410272][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.440580][ T6087] device bridge_slave_1 entered promiscuous mode [ 208.570890][ T3558] Bluetooth: hci8: command tx timeout [ 208.575820][ T6087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.646054][ T6087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.778832][ T6087] team0: Port device team_slave_0 added [ 208.828046][ T6087] team0: Port device team_slave_1 added [ 208.985279][ T6087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.011929][ T6087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.117863][ T6087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.140882][ T6087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.147879][ T6087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.174297][ T6087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.868554][ T6087] device hsr_slave_0 entered promiscuous mode [ 209.899862][ T6087] device hsr_slave_1 entered promiscuous mode [ 209.930744][ T6087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.990118][ T6087] Cannot create hsr debugfs directory [ 210.113414][ T6149] loop2: detected capacity change from 0 to 512 [ 210.153061][ T6149] EXT4-fs: Ignoring removed bh option [ 210.168477][ T6151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.725'. [ 210.192349][ T6149] EXT4-fs error (device loop2): __ext4_iget:5044: inode #12: block 2: comm syz.2.727: invalid block [ 210.213587][ T6156] 9pnet_fd: Insufficient options for proto=fd [ 210.220108][ T6149] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.727: couldn't read orphan inode 12 (err -117) [ 210.263540][ T6149] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 210.441634][ T6087] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.537111][ T3558] Bluetooth: hci7: Ignoring connect complete event for invalid link type [ 210.651018][ T3558] Bluetooth: hci8: command tx timeout [ 210.680074][ T6087] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.900272][ T6087] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.029330][ T3557] EXT4-fs (loop2): unmounting filesystem. [ 211.154765][ T6087] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.280827][ T3785] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 211.449130][ T3874] libceph: connect (1)[c::]:6789 error -101 [ 211.455392][ T3874] libceph: mon0 (1)[c::]:6789 connect error [ 211.540583][ T3785] usb 5-1: Using ep0 maxpacket: 16 [ 211.691408][ T3785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 211.710675][ T3785] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 211.719931][ T3785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.731077][ T3874] libceph: connect (1)[c::]:6789 error -101 [ 211.739497][ T6087] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.748476][ T3874] libceph: mon0 (1)[c::]:6789 connect error [ 211.755494][ T3785] usb 5-1: config 0 descriptor?? [ 211.788352][ T6087] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.856813][ T6087] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.901562][ T6087] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.012318][ T6169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.036466][ T6169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.303124][ T6087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.326557][ T6189] netlink: 20 bytes leftover after parsing attributes in process `syz.4.730'. [ 212.414633][ T3874] libceph: connect (1)[c::]:6789 error -101 [ 212.421187][ T3874] libceph: mon0 (1)[c::]:6789 connect error [ 212.429694][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.440767][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.730'. [ 212.449667][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.730'. [ 212.459430][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.589213][ T6173] ceph: No mds server is up or the cluster is laggy [ 212.704738][ T6169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.731642][ T3558] Bluetooth: hci8: command tx timeout [ 212.915840][ T6169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.356898][ T6087] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.369922][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.381876][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.390491][ T3792] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.397624][ T3792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.412494][ T3785] hid-generic 0003:0158:0100.000E: unknown main item tag 0x1 [ 213.421328][ T3785] hid-generic 0003:0158:0100.000E: unexpected long global item [ 213.429383][ T3785] hid-generic: probe of 0003:0158:0100.000E failed with error -22 [ 213.482084][ T6200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.738'. [ 213.533464][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.542436][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.569496][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.586770][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.594018][ T3604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.617543][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.627748][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.637796][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.648494][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.657937][ T6201] device veth1_to_bond left promiscuous mode [ 213.687942][ T6201] bridge3: port 1(veth1_to_bond) entered disabled state [ 213.716855][ T6201] bridge4: port 1(veth1_to_bond) entered blocking state [ 213.730629][ T6201] bridge4: port 1(veth1_to_bond) entered disabled state [ 213.748126][ T6201] device veth1_to_bond entered promiscuous mode [ 213.755594][ T6201] bridge4: port 1(veth1_to_bond) entered blocking state [ 213.762733][ T6201] bridge4: port 1(veth1_to_bond) entered forwarding state [ 213.805351][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.832746][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.850954][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.868823][ T6087] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.900982][ T6087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.943826][ T6206] loop1: detected capacity change from 0 to 512 [ 213.957907][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.981355][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.990294][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.021015][ T6206] EXT4-fs: Ignoring removed bh option [ 214.041295][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.082628][ T6206] EXT4-fs error (device loop1): __ext4_iget:5044: inode #12: block 2: comm syz.1.740: invalid block [ 214.103161][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.137950][ T6206] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.740: couldn't read orphan inode 12 (err -117) [ 214.161623][ T6206] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 214.173307][ T3604] usb 5-1: USB disconnect, device number 13 [ 214.663148][ T3558] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 214.810519][ T3558] Bluetooth: hci8: command tx timeout [ 214.948300][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.965637][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.997557][ T6087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.005612][ T3562] EXT4-fs (loop1): unmounting filesystem. [ 215.106026][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 215.126008][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.397510][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.416958][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.427795][ T6087] device veth0_vlan entered promiscuous mode [ 216.454034][ T6087] device veth1_vlan entered promiscuous mode [ 216.587990][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.597163][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.570184][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.585999][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.661121][ T6247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.750'. [ 217.735231][ T6087] device veth0_macvtap entered promiscuous mode [ 217.774016][ T6251] device veth1_to_bond left promiscuous mode [ 217.790735][ T6251] bridge4: port 1(veth1_to_bond) entered disabled state [ 217.823774][ T6251] bridge5: port 1(veth1_to_bond) entered blocking state [ 217.840662][ T6251] bridge5: port 1(veth1_to_bond) entered disabled state [ 217.859701][ T6251] device veth1_to_bond entered promiscuous mode [ 217.877289][ T6251] bridge5: port 1(veth1_to_bond) entered blocking state [ 217.884399][ T6251] bridge5: port 1(veth1_to_bond) entered forwarding state [ 217.949001][ T6087] device veth1_macvtap entered promiscuous mode [ 218.028696][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.070112][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.095738][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.116533][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.129687][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.188128][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.241587][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.270023][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.290294][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.312747][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.340555][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.400535][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.450555][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.525103][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.960524][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.003084][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.056871][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.126924][ T6260] netlink: 16 bytes leftover after parsing attributes in process `syz.1.751'. [ 219.137551][ T6260] netlink: 64 bytes leftover after parsing attributes in process `syz.1.751'. [ 219.146878][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.165418][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.197849][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.272901][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.306537][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.329368][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.359620][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.386719][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.396836][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.407465][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.417431][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.429737][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.439763][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.450338][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.462496][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.473018][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.482910][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.493417][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.503280][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.513783][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.526556][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.586924][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.596255][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.632372][ T6087] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.658546][ T6087] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.710541][ T6087] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.719288][ T6087] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.723308][ T6270] loop1: detected capacity change from 0 to 512 [ 219.791971][ T6270] EXT4-fs: Ignoring removed bh option [ 219.881724][ T6270] EXT4-fs error (device loop1): __ext4_iget:5044: inode #12: block 2: comm syz.1.756: invalid block [ 219.908501][ T6270] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.756: couldn't read orphan inode 12 (err -117) [ 220.071067][ T6270] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 221.031229][ T4013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.066168][ T4013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.007925][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 222.035760][ T4013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.039974][ T6290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.761'. [ 222.069054][ T4013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.109552][ T3562] EXT4-fs (loop1): unmounting filesystem. [ 222.204462][ T6290] device veth1_to_bond left promiscuous mode [ 222.259724][ T6290] bridge1: port 1(veth1_to_bond) entered disabled state [ 222.348494][ T6290] bridge2: port 1(veth1_to_bond) entered blocking state [ 222.368640][ T6290] bridge2: port 1(veth1_to_bond) entered disabled state [ 222.404182][ T6290] device veth1_to_bond entered promiscuous mode [ 222.451395][ T6290] bridge2: port 1(veth1_to_bond) entered blocking state [ 222.458473][ T6290] bridge2: port 1(veth1_to_bond) entered forwarding state [ 222.532916][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 222.548533][ T6293] device bridge_slave_1 left promiscuous mode [ 222.561720][ T6293] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.996265][ T6308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.763'. [ 223.070631][ T6308] netlink: 64 bytes leftover after parsing attributes in process `syz.1.763'. [ 223.811186][ T6294] loop0: detected capacity change from 0 to 32768 [ 223.890493][ T3573] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 223.899717][ T3632] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (3632) [ 224.180808][ T3573] usb 4-1: Using ep0 maxpacket: 16 [ 224.311053][ T3573] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 224.342872][ T3573] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 224.403705][ T3573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.459816][ T3573] usb 4-1: config 0 descriptor?? [ 225.308649][ T6315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.450939][ T6315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.315468][ T3570] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 226.325766][ T3570] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 226.334933][ T3570] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 226.342952][ T3570] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 226.351807][ T3570] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 226.359097][ T3570] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 226.670726][ T3573] usbhid 4-1:0.0: can't add hid device: -71 [ 226.676878][ T3573] usbhid: probe of 4-1:0.0 failed with error -71 [ 226.717741][ T3573] usb 4-1: USB disconnect, device number 14 [ 226.998258][ T6356] netlink: 'syz.3.778': attribute type 10 has an invalid length. [ 227.209396][ T6356] batman_adv: batadv0: Adding interface: team0 [ 227.215713][ T6356] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.240976][ T6356] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 227.659037][ T6355] netlink: 'syz.3.778': attribute type 10 has an invalid length. [ 227.685290][ T6355] netlink: 2 bytes leftover after parsing attributes in process `syz.3.778'. [ 227.732584][ T6338] loop2: detected capacity change from 0 to 32768 [ 227.736661][ T6355] device team0 entered promiscuous mode [ 227.779492][ T6338] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 227.792264][ T6355] device team_slave_0 entered promiscuous mode [ 227.801418][ T6355] device team_slave_1 entered promiscuous mode [ 227.810966][ T6355] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.820816][ T6355] batman_adv: batadv0: Interface activated: team0 [ 227.827309][ T6355] batman_adv: batadv0: Interface deactivated: team0 [ 227.834700][ T6355] batman_adv: batadv0: Removing interface: team0 [ 227.842172][ T6355] bridge0: port 3(team0) entered blocking state [ 227.849110][ T6355] bridge0: port 3(team0) entered disabled state [ 227.869526][ T6338] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 227.881310][ T6355] bridge0: port 3(team0) entered blocking state [ 227.887643][ T6355] bridge0: port 3(team0) entered forwarding state [ 227.901525][ T6338] BTRFS info (device loop2): using free space tree [ 228.186726][ T6341] chnl_net:caif_netlink_parms(): no params data found [ 228.410539][ T3570] Bluetooth: hci4: command tx timeout [ 228.470653][ T6338] BTRFS info (device loop2): enabling ssd optimizations [ 229.106204][ T3557] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 229.254696][ T4011] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.610246][ T4011] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.851294][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.869813][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.884101][ T6341] device bridge_slave_0 entered promiscuous mode [ 229.911491][ T4011] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.996951][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.006419][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.024521][ T6341] device bridge_slave_1 entered promiscuous mode [ 230.040808][ T3600] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 230.115910][ T4011] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.169579][ T6417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.786'. [ 230.203295][ T6417] netlink: 64 bytes leftover after parsing attributes in process `syz.0.786'. [ 230.292937][ T6341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.302668][ T3600] usb 2-1: Using ep0 maxpacket: 16 [ 230.332068][ T6341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.421080][ T3600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 230.440045][ T3600] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 230.458822][ T3600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.473253][ T6341] team0: Port device team_slave_0 added [ 230.493361][ T3558] Bluetooth: hci4: command tx timeout [ 230.505514][ T3600] usb 2-1: config 0 descriptor?? [ 230.632269][ T6341] team0: Port device team_slave_1 added [ 230.740812][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.747857][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.804988][ T6341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.843514][ T6410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.854204][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.873952][ T6410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.874612][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.962505][ T6341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.239915][ T6425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.787'. [ 231.260885][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'. [ 231.269694][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'. [ 231.466121][ T6341] device hsr_slave_0 entered promiscuous mode [ 231.491684][ T6341] device hsr_slave_1 entered promiscuous mode [ 231.511179][ T6341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.518819][ T6341] Cannot create hsr debugfs directory [ 231.525762][ T6410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.540814][ T6410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.585400][ T3600] hid-generic 0003:0158:0100.000F: unknown main item tag 0x1 [ 231.600765][ T3600] hid-generic 0003:0158:0100.000F: unexpected long global item [ 231.621075][ T3600] hid-generic: probe of 0003:0158:0100.000F failed with error -22 [ 232.209052][ T6431] loop2: detected capacity change from 0 to 32768 [ 232.260355][ T3632] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (3632) [ 232.371805][ T3878] usb 2-1: USB disconnect, device number 9 [ 232.570512][ T3558] Bluetooth: hci4: command tx timeout [ 234.700575][ T3570] Bluetooth: hci4: command tx timeout [ 235.212033][ T3573] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 235.295147][ T3558] Bluetooth: hci1: unexpected event 0x06 length: 23 > 3 [ 235.470528][ T3573] usb 1-1: Using ep0 maxpacket: 32 [ 235.650899][ T3573] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.680499][ T3573] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.736503][ T3573] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 235.760477][ T3573] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.786017][ T3573] usb 1-1: config 0 descriptor?? [ 235.822096][ T6498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.801'. [ 235.832651][ T3573] hub 1-1:0.0: USB hub found [ 235.870802][ T6498] netlink: 64 bytes leftover after parsing attributes in process `syz.1.801'. [ 235.904148][ T4011] device veth1_to_bond left promiscuous mode [ 235.922468][ T4011] bridge1: port 1(veth1_to_bond) entered disabled state [ 235.975311][ T4011] device hsr_slave_0 left promiscuous mode [ 235.991669][ T4011] device hsr_slave_1 left promiscuous mode [ 236.001227][ T4011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.018978][ T4011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.040977][ T4011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.048431][ T4011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.068825][ T4011] bridge0: port 2(team0) entered disabled state [ 236.094772][ T4011] device bridge_slave_0 left promiscuous mode [ 236.110883][ T4011] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.181468][ T3573] hub 1-1:0.0: 1 port detected [ 236.207776][ T4011] device veth1_macvtap left promiscuous mode [ 236.215358][ T4011] device veth0_macvtap left promiscuous mode [ 236.222827][ T4011] device veth1_vlan left promiscuous mode [ 236.228881][ T4011] device veth0_vlan left promiscuous mode [ 236.876298][ T6508] loop0: detected capacity change from 0 to 1024 [ 236.949202][ T6508] hfsplus: extend alloc file! (8192,65536,366) [ 237.078723][ T6483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.114181][ T6483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.145891][ T6483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.194173][ T6483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.870786][ T3788] hub 1-1:0.0: activate --> -90 [ 238.452320][ T14] usb 1-1: USB disconnect, device number 12 [ 238.839258][ T3558] Bluetooth: hci2: unexpected event 0x06 length: 23 > 3 [ 238.890379][ T4011] device team_slave_1 left promiscuous mode [ 238.938058][ T4011] team0 (unregistering): Port device team_slave_1 removed [ 239.043967][ T4011] device team_slave_0 left promiscuous mode [ 239.052361][ T4011] team0 (unregistering): Port device team_slave_0 removed [ 239.304245][ T4011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.396665][ T4011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.473520][ T3570] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 240.489897][ T3570] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 240.498718][ T3570] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 240.522514][ T3570] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 240.533516][ T3570] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 240.541828][ T3570] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 242.374029][ T4011] bond0 (unregistering): Released all slaves [ 242.495506][ T6565] loop1: detected capacity change from 0 to 32768 [ 242.515052][ T6552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.819'. [ 242.529034][ T6565] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 242.545868][ T6552] netlink: 64 bytes leftover after parsing attributes in process `syz.2.819'. [ 242.564990][ T6565] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 242.581451][ T3573] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 242.581457][ T3558] Bluetooth: hci9: command tx timeout [ 242.598376][ T6565] BTRFS info (device loop1): using free space tree [ 242.673497][ T6341] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 242.730224][ T6341] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 242.791043][ T6341] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 242.840500][ T3573] usb 1-1: Using ep0 maxpacket: 32 [ 242.891228][ T6341] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 242.926882][ T6565] BTRFS info (device loop1): enabling ssd optimizations [ 242.980880][ T3573] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.012219][ T3573] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.096555][ T3573] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 243.129531][ T3562] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 243.150373][ T3573] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.165248][ T6547] chnl_net:caif_netlink_parms(): no params data found [ 243.208286][ T3573] usb 1-1: config 0 descriptor?? [ 243.417050][ T6341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.431718][ T3573] hub 1-1:0.0: USB hub found [ 243.640741][ T3573] hub 1-1:0.0: 1 port detected [ 244.102744][ T6600] loop0: detected capacity change from 0 to 1024 [ 244.172875][ T6600] hfsplus: extend alloc file! (8192,65536,366) [ 244.285852][ T6568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.311494][ T6568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.401596][ T6568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.411191][ T6568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.436878][ T6341] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.472129][ T3558] Bluetooth: hci1: unexpected event 0x06 length: 23 > 3 [ 244.588727][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.621436][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.638143][ T6547] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.650611][ T3558] Bluetooth: hci9: command tx timeout [ 244.650718][ T6547] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.685403][ T6547] device bridge_slave_0 entered promiscuous mode [ 244.708299][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.719937][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.757168][ T3792] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.764406][ T3792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.793568][ T6547] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.803922][ T6547] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.840550][ T6547] device bridge_slave_1 entered promiscuous mode [ 244.879492][ T5346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.889022][ T5346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.923822][ T5346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.964104][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.971335][ T5346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.010299][ T5346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.141189][ T3573] hub 1-1:0.0: activate --> -90 [ 245.149678][ T6547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.186187][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.244387][ T6547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.261487][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.281820][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.311153][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.351204][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.380984][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.410020][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.439851][ T6341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.472415][ T6341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.607419][ T6547] team0: Port device team_slave_0 added [ 245.640769][ T5346] usb 1-1: USB disconnect, device number 13 [ 245.648811][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.662214][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.693281][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.873730][ T6547] team0: Port device team_slave_1 added [ 246.642690][ T6547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.651097][ T6547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.730875][ T3570] Bluetooth: hci9: command tx timeout [ 246.794403][ T6547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.866431][ T6547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.897394][ T6547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.930890][ T6547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.140238][ T6645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.834'. [ 247.191679][ T6649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.834'. [ 247.238360][ T6547] device hsr_slave_0 entered promiscuous mode [ 247.257238][ T6547] device hsr_slave_1 entered promiscuous mode [ 247.277252][ T6547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.291782][ T6547] Cannot create hsr debugfs directory [ 247.309944][ T6651] bridge1: port 1(veth1_to_bond) entered blocking state [ 247.322002][ T6651] bridge1: port 1(veth1_to_bond) entered disabled state [ 247.346125][ T6651] device veth1_to_bond entered promiscuous mode [ 247.366691][ T6651] bridge1: port 1(veth1_to_bond) entered blocking state [ 247.373793][ T6651] bridge1: port 1(veth1_to_bond) entered forwarding state [ 247.437217][ T5346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.457167][ T5346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.568529][ T6341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.835529][ T6662] 9pnet_fd: Insufficient options for proto=fd [ 247.978641][ T6547] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.597215][ T6547] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.810954][ T3570] Bluetooth: hci9: command tx timeout [ 249.100872][ T3570] Bluetooth: hci7: unexpected event 0x06 length: 23 > 3 [ 249.209338][ T6547] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.358530][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 249.381233][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.492970][ T6547] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.617036][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 249.642301][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 249.682479][ T6341] device veth0_vlan entered promiscuous mode [ 249.703430][ T3878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 249.721218][ T3878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 249.747363][ T6341] device veth1_vlan entered promiscuous mode [ 249.985703][ T6547] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 250.039512][ T6341] device veth0_macvtap entered promiscuous mode [ 250.151365][ T6547] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 250.180939][ T6547] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 250.200722][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 250.208977][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 250.237605][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 250.257633][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 250.316132][ T6691] loop0: detected capacity change from 0 to 32768 [ 250.316487][ T6547] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 250.343260][ T6341] device veth1_macvtap entered promiscuous mode [ 250.382367][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 250.384901][ T3632] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (3632) [ 250.411234][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 250.494570][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.525677][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.552130][ T3599] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 250.553096][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.590545][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.610462][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.637137][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.663746][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.690587][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.788675][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.799544][ T3599] usb 2-1: Using ep0 maxpacket: 32 [ 250.850193][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.887060][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.898723][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.908649][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.919221][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.920776][ T3599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.929080][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.951554][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.967643][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.774173][ T3599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.784652][ T3599] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 251.785623][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 251.793724][ T3599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.811409][ T3599] usb 2-1: config 0 descriptor?? [ 251.840864][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.851775][ T3599] hub 2-1:0.0: USB hub found [ 251.867786][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.878387][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.891487][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.902041][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.911975][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.924029][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.934338][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.945177][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.955414][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.966059][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.975983][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.987669][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.997857][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.008437][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.019052][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.029651][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.041447][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.068071][ T6702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.843'. [ 252.077332][ T3599] hub 2-1:0.0: 1 port detected [ 252.102130][ T6703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.843'. [ 252.112036][ T6704] device veth1_to_bond left promiscuous mode [ 252.118271][ T6704] bridge1: port 1(veth1_to_bond) entered disabled state [ 252.128261][ T6704] bridge2: port 1(veth1_to_bond) entered blocking state [ 252.136134][ T6704] bridge2: port 1(veth1_to_bond) entered disabled state [ 252.146383][ T6704] device veth1_to_bond entered promiscuous mode [ 252.154020][ T6704] bridge2: port 1(veth1_to_bond) entered blocking state [ 252.161121][ T6704] bridge2: port 1(veth1_to_bond) entered forwarding state [ 252.170376][ T5346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 252.179736][ T5346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 252.205797][ T6341] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.239648][ T6341] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.248661][ T6341] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.258700][ T6341] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.333170][ T6694] loop1: detected capacity change from 0 to 1024 [ 252.366440][ T6694] hfsplus: extend alloc file! (8192,65536,366) [ 252.479363][ T6694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.499602][ T6694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.523106][ T6694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.567616][ T6694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.679354][ T4490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.702106][ T4490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.718230][ T6547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.789322][ T6710] 9pnet_fd: Insufficient options for proto=fd [ 252.848895][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 252.879016][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.901745][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.943541][ T6547] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.955468][ T3639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.967283][ T3639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.043102][ T3878] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 253.058106][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.079015][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.101245][ T3792] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.108425][ T3792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.140671][ T3599] hub 2-1:0.0: activate --> -90 [ 253.188826][ T4011] device hsr_slave_0 left promiscuous mode [ 253.234617][ T6716] loop4: detected capacity change from 0 to 512 [ 253.260920][ T6716] EXT4-fs: Ignoring removed bh option [ 253.273860][ T4011] device hsr_slave_1 left promiscuous mode [ 253.280792][ T4011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.288364][ T4011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.305749][ T4011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.313746][ T4011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.323017][ T4011] bridge0: port 3(team0) entered disabled state [ 253.332874][ T4011] device bridge_slave_1 left promiscuous mode [ 253.339173][ T4011] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.348457][ T4011] device bridge_slave_0 left promiscuous mode [ 253.355072][ T4011] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.395580][ T4011] device veth1_macvtap left promiscuous mode [ 253.396139][ T6716] EXT4-fs error (device loop4): __ext4_iget:5044: inode #12: block 2: comm syz.4.771: invalid block [ 253.409686][ T4011] device veth0_macvtap left promiscuous mode [ 253.414289][ T6716] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.771: couldn't read orphan inode 12 (err -117) [ 253.419481][ T4011] device veth1_vlan left promiscuous mode [ 253.435503][ T6716] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 253.446970][ T4011] device veth0_vlan left promiscuous mode [ 254.204990][ T3570] Bluetooth: hci7: unexpected event 0x06 length: 23 > 3 [ 254.673188][ T14] usb 2-1: USB disconnect, device number 10 [ 254.686245][ T3599] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 254.954701][ T6736] loop0: detected capacity change from 0 to 32768 [ 254.957917][ T4011] device team_slave_1 left promiscuous mode [ 254.983754][ T4011] team0 (unregistering): Port device team_slave_1 removed [ 255.005384][ T6736] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 255.030762][ T6736] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 255.039420][ T6736] BTRFS info (device loop0): using free space tree [ 255.047073][ T4011] device team_slave_0 left promiscuous mode [ 255.058699][ T4011] team0 (unregistering): Port device team_slave_0 removed [ 255.101872][ T4011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.233411][ T4011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.242663][ T6736] BTRFS info (device loop0): enabling ssd optimizations [ 255.496841][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.503205][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.596193][ T5928] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 256.353578][ T6770] 9pnet_fd: Insufficient options for proto=fd [ 256.699910][ T4011] bond0 (unregistering): Released all slaves [ 256.801973][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.817710][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.828312][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.837617][ T3573] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.844771][ T3573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.863818][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 256.885751][ T6758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.852'. [ 256.918232][ T6761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.852'. [ 256.938236][ T6762] netlink: 'syz.2.851': attribute type 10 has an invalid length. [ 256.969711][ T6762] batman_adv: batadv0: Adding interface: team0 [ 256.984005][ T6341] EXT4-fs (loop4): unmounting filesystem. [ 257.003764][ T6762] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.042445][ T6762] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 257.076283][ T6763] device veth1_to_bond left promiscuous mode [ 257.091008][ T6763] bridge5: port 1(veth1_to_bond) entered disabled state [ 257.112526][ T6763] bridge6: port 1(veth1_to_bond) entered blocking state [ 257.132605][ T6763] bridge6: port 1(veth1_to_bond) entered disabled state [ 257.172357][ T6763] device veth1_to_bond entered promiscuous mode [ 257.183716][ T6763] bridge6: port 1(veth1_to_bond) entered blocking state [ 257.190734][ T6763] bridge6: port 1(veth1_to_bond) entered forwarding state [ 257.200441][ T6764] netlink: 'syz.2.851': attribute type 10 has an invalid length. [ 257.218628][ T6764] netlink: 2 bytes leftover after parsing attributes in process `syz.2.851'. [ 257.247663][ T6764] device team0 entered promiscuous mode [ 257.265017][ T6764] device team_slave_0 entered promiscuous mode [ 257.276045][ T6764] device team_slave_1 entered promiscuous mode [ 257.284915][ T6764] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.293590][ T6764] batman_adv: batadv0: Interface activated: team0 [ 257.300230][ T6764] batman_adv: batadv0: Interface deactivated: team0 [ 257.439092][ T6764] batman_adv: batadv0: Removing interface: team0 [ 257.447179][ T6764] bridge0: port 2(team0) entered blocking state [ 257.453690][ T6764] bridge0: port 2(team0) entered disabled state [ 257.462812][ T6764] bridge0: port 2(team0) entered blocking state [ 257.469162][ T6764] bridge0: port 2(team0) entered forwarding state [ 257.530679][ T3570] Bluetooth: hci5: command 0x0406 tx timeout [ 258.349302][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.384560][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.417112][ T3570] Bluetooth: hci7: unexpected event 0x06 length: 23 > 3 [ 258.431561][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.479772][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.509542][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.529307][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.538550][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.551955][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.560066][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.569057][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.618123][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.981838][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.989780][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.010732][ T6547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.036321][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.045939][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.078346][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.087713][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.099034][ T6547] device veth0_vlan entered promiscuous mode [ 259.106983][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.116194][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.125555][ T3634] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 259.150314][ T6547] device veth1_vlan entered promiscuous mode [ 259.202551][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 259.214118][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 259.241340][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.300300][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.343356][ T6547] device veth0_macvtap entered promiscuous mode [ 259.380576][ T3634] usb 1-1: Using ep0 maxpacket: 32 [ 259.386385][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 259.401414][ T6799] netlink: 48 bytes leftover after parsing attributes in process `syz.1.863'. [ 259.415050][ T6547] device veth1_macvtap entered promiscuous mode [ 259.502794][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.520889][ T3634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.550526][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.552231][ T3634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.566787][ T6803] loop1: detected capacity change from 0 to 512 [ 259.585076][ T6802] 9pnet_fd: Insufficient options for proto=fd [ 259.590484][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.621136][ T6803] EXT4-fs: Ignoring removed bh option [ 259.630771][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.640482][ T3634] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 259.670605][ T3634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.683128][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.701660][ T6803] EXT4-fs error (device loop1): __ext4_iget:5044: inode #12: block 2: comm syz.1.865: invalid block [ 259.712717][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.723738][ T3634] usb 1-1: config 0 descriptor?? [ 259.740225][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.751507][ T6803] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.865: couldn't read orphan inode 12 (err -117) [ 259.760015][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.776383][ T3634] hub 1-1:0.0: USB hub found [ 259.790980][ T6803] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 259.826304][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.852045][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.872439][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.891434][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.911713][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.933552][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.952283][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.972832][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.995771][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.009229][ T3634] hub 1-1:0.0: 1 port detected [ 260.019153][ T6807] netlink: 20 bytes leftover after parsing attributes in process `syz.2.866'. [ 260.064254][ T6808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.866'. [ 260.084704][ T6809] device veth1_to_bond left promiscuous mode [ 260.100331][ T6809] bridge2: port 1(veth1_to_bond) entered disabled state [ 260.124149][ T6809] bridge3: port 1(veth1_to_bond) entered blocking state [ 260.148043][ T6809] bridge3: port 1(veth1_to_bond) entered disabled state [ 260.178084][ T6809] device veth1_to_bond entered promiscuous mode [ 260.194294][ T6809] bridge3: port 1(veth1_to_bond) entered blocking state [ 260.201356][ T6809] bridge3: port 1(veth1_to_bond) entered forwarding state [ 260.225070][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.247280][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.283782][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.296129][ T6794] loop0: detected capacity change from 0 to 1024 [ 260.320432][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.362398][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.431015][ T6794] hfsplus: extend alloc file! (8192,65536,366) [ 260.437424][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.624011][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.663045][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.741468][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.855282][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.049324][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.160733][ T3634] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 261.175031][ T3634] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 261.250438][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.310725][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.360613][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.371067][ T3634] usbhid 1-1:0.0: can't add hid device: -32 [ 261.377053][ T3634] usbhid: probe of 1-1:0.0 failed with error -32 [ 261.420712][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.503226][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.550685][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.571444][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.601747][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.662256][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.703137][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.738439][ T6547] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.780111][ T6547] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.789014][ T6794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.811393][ T6547] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.831189][ T6794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.831709][ T6547] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.934271][ T3562] EXT4-fs (loop1): unmounting filesystem. [ 261.973175][ T6794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.990988][ T6794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.350718][ T6828] netlink: 'syz.1.869': attribute type 10 has an invalid length. [ 262.358541][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.420433][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.965503][ T3570] Bluetooth: hci1: unexpected event 0x06 length: 23 > 3 [ 262.980587][ T6828] batman_adv: batadv0: Adding interface: team0 [ 263.022881][ T6828] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.072183][ T6828] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 263.121093][ T6827] netlink: 'syz.1.869': attribute type 10 has an invalid length. [ 263.161385][ T6827] netlink: 2 bytes leftover after parsing attributes in process `syz.1.869'. [ 263.171555][ T6827] device team0 entered promiscuous mode [ 263.184244][ T6827] device team_slave_0 entered promiscuous mode [ 263.196293][ T6827] device team_slave_1 entered promiscuous mode [ 263.211989][ T6827] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.234242][ T6827] bridge0: port 2(vlan4) entered blocking state [ 263.240736][ T6827] bridge0: port 2(vlan4) entered forwarding state [ 263.249375][ T6827] batman_adv: batadv0: Interface activated: team0 [ 263.279130][ T6827] batman_adv: batadv0: Interface deactivated: team0 [ 263.289210][ T6827] batman_adv: batadv0: Removing interface: team0 [ 263.309982][ T6827] bridge0: port 3(team0) entered blocking state [ 263.318408][ T6827] bridge0: port 3(team0) entered disabled state [ 263.327842][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 263.380870][ T3599] usb 1-1: USB disconnect, device number 14 [ 263.387376][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.423001][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.507054][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 266.105293][ T3785] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 266.117367][ T3570] Bluetooth: hci1: unexpected event 0x06 length: 23 > 3 [ 266.212050][ T6876] netlink: 'syz.4.884': attribute type 10 has an invalid length. [ 266.288442][ T6861] loop1: detected capacity change from 0 to 8192 [ 266.340545][ T6876] batman_adv: batadv0: Adding interface: team0 [ 266.346797][ T6876] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.420552][ T3785] usb 1-1: Using ep0 maxpacket: 32 [ 266.612703][ T6876] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 266.635509][ T6859] loop3: detected capacity change from 0 to 32768 [ 266.652149][ T6859] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.880 (6859) [ 266.660668][ T3785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.676880][ T6861] REISERFS warning (device loop1): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 266.696636][ T6878] netlink: 'syz.4.884': attribute type 10 has an invalid length. [ 266.706339][ T6878] netlink: 2 bytes leftover after parsing attributes in process `syz.4.884'. [ 266.717052][ T6878] device team0 entered promiscuous mode [ 266.722869][ T6878] device team_slave_0 entered promiscuous mode [ 266.730766][ T6878] device team_slave_1 entered promiscuous mode [ 266.739625][ T6878] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.747133][ T6878] batman_adv: batadv0: Interface activated: team0 [ 266.757722][ T6878] batman_adv: batadv0: Interface deactivated: team0 [ 266.764636][ T6878] batman_adv: batadv0: Removing interface: team0 [ 266.982646][ T3785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.996724][ T3785] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 267.006984][ T3785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.032402][ T6859] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 267.043361][ T3785] usb 1-1: config 0 descriptor?? [ 267.051857][ T6878] bridge0: port 3(team0) entered blocking state [ 267.068515][ T6878] bridge0: port 3(team0) entered disabled state [ 267.082068][ T3785] hub 1-1:0.0: USB hub found [ 267.112877][ T6878] bridge0: port 3(team0) entered blocking state [ 267.119201][ T6878] bridge0: port 3(team0) entered forwarding state [ 267.128669][ T6859] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 267.188085][ T6859] BTRFS info (device loop3): using free space tree [ 267.300932][ T3785] hub 1-1:0.0: 1 port detected [ 267.415997][ T6859] BTRFS info (device loop3): enabling ssd optimizations [ 267.494733][ T6547] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 267.582957][ T6868] loop0: detected capacity change from 0 to 1024 [ 267.662742][ T3599] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 267.720022][ T6868] hfsplus: extend alloc file! (8192,65536,366) [ 268.810354][ T6868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.830573][ T3785] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 268.836962][ T3785] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 268.895516][ T6868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.957785][ T6868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.019061][ T6868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.027561][ T3785] usbhid 1-1:0.0: can't add hid device: -32 [ 269.040500][ T3785] usbhid: probe of 1-1:0.0 failed with error -32 [ 269.140559][ T3599] usb 3-1: Using ep0 maxpacket: 16 [ 269.271276][ T3599] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 269.959639][ T3599] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 269.969740][ T3599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.979689][ T3599] usb 3-1: config 0 descriptor?? [ 270.139243][ T3570] Bluetooth: hci2: unexpected event 0x06 length: 23 > 3 [ 270.223322][ T6904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.303977][ T6904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.538212][ T3785] usb 1-1: USB disconnect, device number 15 [ 270.572497][ T6945] netlink: 'syz.3.896': attribute type 10 has an invalid length. [ 270.696572][ T6945] batman_adv: batadv0: Adding interface: team0 [ 270.703056][ T6945] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.730302][ T6945] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 272.417733][ T6949] netlink: 'syz.3.896': attribute type 10 has an invalid length. [ 272.491753][ T6949] netlink: 2 bytes leftover after parsing attributes in process `syz.3.896'. [ 272.506728][ T6949] device team0 entered promiscuous mode [ 272.520801][ T6949] device team_slave_0 entered promiscuous mode [ 272.527608][ T6949] device team_slave_1 entered promiscuous mode [ 272.537188][ T6949] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.544428][ T6949] batman_adv: batadv0: Interface activated: team0 [ 272.551176][ T6949] batman_adv: batadv0: Interface deactivated: team0 [ 272.558027][ T6949] batman_adv: batadv0: Removing interface: team0 [ 272.790592][ T3599] usbhid 3-1:0.0: can't add hid device: -71 [ 273.566650][ T3599] usbhid: probe of 3-1:0.0 failed with error -71 [ 273.574809][ T3599] usb 3-1: USB disconnect, device number 11 [ 273.586268][ T6949] bridge0: port 3(team0) entered blocking state [ 273.595461][ T6949] bridge0: port 3(team0) entered disabled state [ 273.610641][ T6949] bridge0: port 3(team0) entered blocking state [ 273.617005][ T6949] bridge0: port 3(team0) entered forwarding state [ 273.686969][ T6965] loop1: detected capacity change from 0 to 512 [ 273.717613][ T6965] EXT4-fs: Ignoring removed bh option [ 273.948158][ T6965] EXT4-fs error (device loop1): __ext4_iget:5044: inode #12: block 2: comm syz.1.904: invalid block [ 273.969872][ T6965] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.904: couldn't read orphan inode 12 (err -117) [ 274.002381][ T6965] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 274.653660][ T6956] loop0: detected capacity change from 0 to 32768 [ 274.769673][ T6956] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.900 (6956) [ 274.789336][ T6956] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 274.807410][ T6956] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 274.817815][ T6956] BTRFS info (device loop0): using free space tree [ 275.030594][ T3602] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 275.094698][ T6956] BTRFS info (device loop0): enabling ssd optimizations [ 275.141404][ T5928] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 275.194940][ T3562] EXT4-fs (loop1): unmounting filesystem. [ 275.224261][ T6963] loop4: detected capacity change from 0 to 32768 [ 275.280503][ T3602] usb 4-1: Using ep0 maxpacket: 32 [ 275.292941][ T3677] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (3677) [ 275.401326][ T3602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.448521][ T3602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.479249][ T3602] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 275.496704][ T3602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.506496][ T3570] Bluetooth: hci2: unexpected event 0x06 length: 23 > 3 [ 275.529486][ T3602] usb 4-1: config 0 descriptor?? [ 275.703417][ T3602] hub 4-1:0.0: USB hub found [ 275.915738][ T3602] hub 4-1:0.0: 1 port detected [ 276.211270][ T6976] loop3: detected capacity change from 0 to 1024 [ 276.260806][ T6976] hfsplus: extend alloc file! (8192,65536,366) [ 276.390523][ T936] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 276.669885][ T6976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.680589][ T936] usb 5-1: Using ep0 maxpacket: 16 [ 276.812272][ T936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 276.933179][ T6976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.945921][ T7026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.916'. [ 276.980781][ T936] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 277.013297][ T6976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.039798][ T936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.060552][ T3602] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 277.070466][ T3602] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 277.091009][ T6976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.110683][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.916'. [ 277.121644][ T936] usb 5-1: config 0 descriptor?? [ 277.235288][ T7026] device veth1_to_bond left promiscuous mode [ 277.319690][ T7026] bridge2: port 1(veth1_to_bond) entered disabled state [ 277.534142][ T7026] bridge3: port 1(veth1_to_bond) entered blocking state [ 277.607471][ T7026] bridge3: port 1(veth1_to_bond) entered disabled state [ 277.614895][ T3602] usbhid 4-1:0.0: can't add hid device: -32 [ 277.627667][ T3602] usbhid: probe of 4-1:0.0 failed with error -32 [ 277.635572][ T7026] device veth1_to_bond entered promiscuous mode [ 277.703296][ T7015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.725712][ T7015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.729846][ T7026] bridge3: port 1(veth1_to_bond) entered blocking state [ 277.740564][ T7026] bridge3: port 1(veth1_to_bond) entered forwarding state [ 277.770760][ T7034] netlink: 'syz.2.918': attribute type 10 has an invalid length. [ 278.010548][ T3558] Bluetooth: hci6: command 0x0406 tx timeout [ 278.016944][ T7034] bridge0: port 2(team0) entered disabled state [ 278.060878][ T7034] device team0 left promiscuous mode [ 278.066958][ T7034] device team_slave_0 left promiscuous mode [ 278.073329][ T7034] device team_slave_1 left promiscuous mode [ 278.079522][ T7034] bridge0: port 2(team0) entered disabled state [ 278.104265][ T7034] batman_adv: batadv0: Adding interface: team0 [ 278.111315][ T5346] libceph: connect (1)[c::]:6789 error -101 [ 278.118443][ T7043] ceph: No mds server is up or the cluster is laggy [ 278.125168][ T7034] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.155366][ T5346] libceph: mon0 (1)[c::]:6789 connect error [ 278.170038][ T5346] usb 4-1: USB disconnect, device number 15 [ 278.214969][ T7034] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 278.270555][ T7036] netlink: 'syz.2.918': attribute type 10 has an invalid length. [ 278.294590][ T7036] netlink: 2 bytes leftover after parsing attributes in process `syz.2.918'. [ 278.307042][ T7036] device team0 entered promiscuous mode [ 278.323635][ T7036] device team_slave_0 entered promiscuous mode [ 278.334371][ T7036] device team_slave_1 entered promiscuous mode [ 278.357482][ T7036] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.368220][ T7036] batman_adv: batadv0: Interface activated: team0 [ 278.380707][ T7036] batman_adv: batadv0: Interface deactivated: team0 [ 278.388587][ T7036] batman_adv: batadv0: Removing interface: team0 [ 278.402314][ T7036] bridge0: port 2(team0) entered blocking state [ 278.415225][ T7036] bridge0: port 2(team0) entered disabled state [ 278.429571][ T7036] bridge0: port 2(team0) entered blocking state [ 278.435918][ T7036] bridge0: port 2(team0) entered forwarding state [ 278.664475][ T7054] loop2: detected capacity change from 0 to 8192 [ 278.724861][ T7054] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 278.754159][ T3558] Bluetooth: hci9: unexpected event 0x06 length: 23 > 3 [ 278.980628][ T936] usbhid 5-1:0.0: can't add hid device: -71 [ 279.018762][ T936] usbhid: probe of 5-1:0.0 failed with error -71 [ 279.050675][ T936] usb 5-1: USB disconnect, device number 14 [ 280.314686][ T7079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.930'. [ 280.383207][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.930'. [ 280.654853][ T7087] netlink: 'syz.3.932': attribute type 10 has an invalid length. [ 280.807719][ T7087] bridge0: port 3(team0) entered disabled state [ 281.063499][ T7087] device team0 left promiscuous mode [ 281.067094][ T7061] loop2: detected capacity change from 0 to 32768 [ 281.093824][ T7061] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.923 (7061) [ 281.125347][ T7061] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 281.141294][ T7087] device team_slave_0 left promiscuous mode [ 281.143255][ T7061] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 281.162060][ T7061] BTRFS info (device loop2): using free space tree [ 281.181271][ T7087] device team_slave_1 left promiscuous mode [ 281.187688][ T7087] bridge0: port 3(team0) entered disabled state [ 281.452531][ T7087] batman_adv: batadv0: Adding interface: team0 [ 281.458713][ T7087] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.603899][ T7061] BTRFS info (device loop2): enabling ssd optimizations [ 281.630625][ T7087] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 281.672935][ T7088] netlink: 'syz.3.932': attribute type 10 has an invalid length. [ 281.721005][ T3557] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 281.740513][ T7088] netlink: 2 bytes leftover after parsing attributes in process `syz.3.932'. [ 281.759689][ T7088] device team0 entered promiscuous mode [ 281.765535][ T7088] device team_slave_0 entered promiscuous mode [ 281.780602][ T7088] device team_slave_1 entered promiscuous mode [ 281.824251][ T3785] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 281.845479][ T7088] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.915193][ T7088] batman_adv: batadv0: Interface activated: team0 [ 281.942582][ T7088] batman_adv: batadv0: Interface deactivated: team0 [ 281.949203][ T7088] batman_adv: batadv0: Removing interface: team0 [ 281.992300][ T7088] bridge0: port 3(team0) entered blocking state [ 282.018109][ T7088] bridge0: port 3(team0) entered disabled state [ 282.036005][ T7088] bridge0: port 3(team0) entered blocking state [ 282.042485][ T7088] bridge0: port 3(team0) entered forwarding state [ 282.130539][ T3785] usb 1-1: Using ep0 maxpacket: 32 [ 282.250682][ T3785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.270427][ T3785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.287290][ T3785] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 282.299688][ T7116] loop3: detected capacity change from 0 to 8192 [ 282.304524][ T3785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.340676][ T7116] REISERFS warning (device loop3): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 282.376770][ T3785] usb 1-1: config 0 descriptor?? [ 282.416707][ T7121] loop4: detected capacity change from 0 to 1024 [ 282.602858][ T3785] hub 1-1:0.0: USB hub found [ 282.615760][ T3632] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 282.670483][ T7112] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 284.406415][ T3785] hub 1-1:0.0: 1 port detected [ 284.680523][ T3558] Bluetooth: hci9: unexpected event 0x06 length: 23 > 3 [ 284.791512][ T7128] loop0: detected capacity change from 0 to 1024 [ 284.822778][ T7128] hfsplus: extend alloc file! (8192,65536,366) [ 284.839120][ T7106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.892790][ T7106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.923502][ T7106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.941706][ T7106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.976962][ T14] libceph: connect (1)[c::]:6789 error -101 [ 284.980737][ T7112] usb 3-1: Using ep0 maxpacket: 16 [ 284.986050][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 284.995863][ T7132] ceph: No mds server is up or the cluster is laggy [ 285.120674][ T7112] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 285.147576][ T7112] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 285.164900][ T7112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.359997][ T7112] usb 3-1: config 0 descriptor?? [ 285.380569][ T7112] usb 3-1: can't set config #0, error -71 [ 285.403601][ T7112] usb 3-1: USB disconnect, device number 12 [ 285.711048][ T3792] hub 1-1:0.0: activate --> -90 [ 286.018563][ T7145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.942'. [ 286.136397][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'. [ 286.242950][ T7145] device veth1_to_bond left promiscuous mode [ 286.250641][ T7145] bridge3: port 1(veth1_to_bond) entered disabled state [ 286.262479][ T7145] bridge4: port 1(veth1_to_bond) entered blocking state [ 286.269562][ T7145] bridge4: port 1(veth1_to_bond) entered disabled state [ 286.279093][ T7145] device veth1_to_bond entered promiscuous mode [ 286.290509][ T7145] bridge4: port 1(veth1_to_bond) entered blocking state [ 286.297528][ T7145] bridge4: port 1(veth1_to_bond) entered forwarding state [ 286.340906][ T3792] usb 1-1: USB disconnect, device number 16 [ 286.494311][ T7154] netlink: 'syz.4.945': attribute type 10 has an invalid length. [ 286.590744][ T7154] bridge0: port 3(team0) entered disabled state [ 286.771510][ T7154] device team0 left promiscuous mode [ 286.777709][ T7154] device team_slave_0 left promiscuous mode [ 286.783962][ T7154] device team_slave_1 left promiscuous mode [ 286.790287][ T7154] bridge0: port 3(team0) entered disabled state [ 287.029449][ T7154] batman_adv: batadv0: Adding interface: team0 [ 287.046956][ T7154] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.146419][ T7154] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 287.157846][ T7157] netlink: 'syz.4.945': attribute type 10 has an invalid length. [ 287.165744][ T7157] netlink: 2 bytes leftover after parsing attributes in process `syz.4.945'. [ 287.174933][ T7157] device team0 entered promiscuous mode [ 287.180701][ T7157] device team_slave_0 entered promiscuous mode [ 287.187154][ T7157] device team_slave_1 entered promiscuous mode [ 287.195743][ T7157] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.202965][ T7157] batman_adv: batadv0: Interface activated: team0 [ 287.210926][ T7157] batman_adv: batadv0: Interface deactivated: team0 [ 287.217685][ T7157] batman_adv: batadv0: Removing interface: team0 [ 287.563593][ T7157] bridge0: port 3(team0) entered blocking state [ 287.572370][ T7157] bridge0: port 3(team0) entered disabled state [ 287.635159][ T7157] bridge0: port 3(team0) entered blocking state [ 287.641604][ T7157] bridge0: port 3(team0) entered forwarding state [ 287.704770][ T7151] loop3: detected capacity change from 0 to 32768 [ 287.759197][ T7151] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.944 (7151) [ 287.861199][ T7151] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 287.913005][ T7151] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 287.990522][ T7151] BTRFS info (device loop3): using free space tree [ 288.072103][ T7172] loop4: detected capacity change from 0 to 512 [ 288.083962][ T7170] loop1: detected capacity change from 0 to 8192 [ 288.104243][ T7172] EXT4-fs: Ignoring removed bh option [ 288.113965][ T7170] REISERFS warning (device loop1): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 288.521569][ T7172] EXT4-fs error (device loop4): __ext4_iget:5044: inode #12: block 2: comm syz.4.948: invalid block [ 288.658905][ T7172] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.948: couldn't read orphan inode 12 (err -117) [ 288.882485][ T7172] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 288.935615][ T3558] Bluetooth: hci2: unexpected event 0x06 length: 23 > 3 [ 288.985398][ T7151] BTRFS info (device loop3): enabling ssd optimizations [ 289.209330][ T6547] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 289.292017][ T6341] EXT4-fs (loop4): unmounting filesystem. [ 289.474782][ T5347] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 289.659990][ T14] libceph: connect (1)[c::]:6789 error -101 [ 289.670843][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 289.683532][ T7208] ceph: No mds server is up or the cluster is laggy [ 289.714526][ T7217] netlink: 32 bytes leftover after parsing attributes in process `syz.1.956'. [ 289.900886][ T5347] usb 1-1: Using ep0 maxpacket: 16 [ 290.051010][ T5347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 290.234560][ T5347] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 290.400461][ T5347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.425761][ T14] libceph: connect (1)[c::]:6789 error -101 [ 290.431866][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 290.479773][ T5347] usb 1-1: config 0 descriptor?? [ 290.584318][ T7225] netlink: 'syz.3.958': attribute type 10 has an invalid length. [ 290.835091][ T7225] bridge0: port 3(team0) entered disabled state [ 291.022624][ T7225] device team0 left promiscuous mode [ 291.028058][ T7225] device team_slave_0 left promiscuous mode [ 291.034384][ T7225] device team_slave_1 left promiscuous mode [ 291.040751][ T7225] bridge0: port 3(team0) entered disabled state [ 292.594175][ T7225] batman_adv: batadv0: Adding interface: team0 [ 292.600356][ T7225] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.745080][ T7225] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 292.760913][ T5347] usbhid 1-1:0.0: can't add hid device: -71 [ 292.780138][ T5347] usbhid: probe of 1-1:0.0 failed with error -71 [ 292.795758][ T7227] netlink: 'syz.3.958': attribute type 10 has an invalid length. [ 292.830860][ T5347] usb 1-1: USB disconnect, device number 17 [ 292.941792][ T7227] netlink: 2 bytes leftover after parsing attributes in process `syz.3.958'. [ 292.983272][ T7227] device team0 entered promiscuous mode [ 293.727073][ T7227] device team_slave_0 entered promiscuous mode [ 293.780962][ T7227] device team_slave_1 entered promiscuous mode [ 293.795121][ T7227] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.808793][ T7227] batman_adv: batadv0: Interface activated: team0 [ 293.830585][ T7227] batman_adv: batadv0: Interface deactivated: team0 [ 293.893636][ T7248] loop0: detected capacity change from 0 to 8192 [ 293.910563][ T7227] batman_adv: batadv0: Removing interface: team0 [ 293.917111][ T7248] REISERFS warning (device loop0): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 293.949236][ T7227] bridge0: port 3(team0) entered blocking state [ 293.992914][ T3632] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 294.022635][ T7227] bridge0: port 3(team0) entered disabled state [ 294.058880][ T7227] bridge0: port 3(team0) entered blocking state [ 294.065255][ T7227] bridge0: port 3(team0) entered forwarding state [ 294.272408][ T3558] Bluetooth: hci4: unexpected event 0x06 length: 23 > 3 [ 295.715261][ T3633] libceph: connect (1)[c::]:6789 error -101 [ 295.738804][ T7276] ceph: No mds server is up or the cluster is laggy [ 295.790493][ T936] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 295.841143][ T3633] libceph: mon0 (1)[c::]:6789 connect error [ 296.169675][ T936] usb 3-1: Using ep0 maxpacket: 16 [ 296.310951][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 296.431689][ T936] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 296.610784][ T936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.687411][ T7284] loop1: detected capacity change from 0 to 8192 [ 296.700357][ T7253] loop0: detected capacity change from 0 to 32768 [ 296.757582][ T936] usb 3-1: config 0 descriptor?? [ 296.784314][ T7284] REISERFS warning (device loop1): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 296.806327][ T7253] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.965 (7253) [ 296.840152][ T7253] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 296.851592][ T7253] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 296.860676][ T7253] BTRFS info (device loop0): using free space tree [ 297.250870][ T7253] BTRFS error (device loop0): open_ctree failed [ 297.350640][ T7314] netlink: 'syz.1.978': attribute type 10 has an invalid length. [ 297.769393][ T7314] device team0 left promiscuous mode [ 297.775407][ T7314] device team_slave_0 left promiscuous mode [ 297.781696][ T7314] device team_slave_1 left promiscuous mode [ 297.791353][ T7314] bridge0: port 2(vlan4) entered disabled state [ 298.211760][ T7271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.972'. [ 298.232717][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.972'. [ 298.241953][ T7314] batman_adv: batadv0: Adding interface: team0 [ 298.248358][ T7314] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.275274][ T7314] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 298.286285][ T7315] netlink: 'syz.1.978': attribute type 10 has an invalid length. [ 298.294090][ T7315] netlink: 2 bytes leftover after parsing attributes in process `syz.1.978'. [ 298.303177][ T7315] device team0 entered promiscuous mode [ 298.308773][ T7315] device team_slave_0 entered promiscuous mode [ 298.315199][ T7315] device team_slave_1 entered promiscuous mode [ 298.323775][ T7315] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.333600][ T7315] bridge0: port 2(vlan4) entered blocking state [ 298.340148][ T7315] bridge0: port 2(vlan4) entered forwarding state [ 298.347542][ T7315] batman_adv: batadv0: Interface activated: team0 [ 298.354203][ T7315] batman_adv: batadv0: Interface deactivated: team0 [ 298.360989][ T7315] batman_adv: batadv0: Removing interface: team0 [ 299.202265][ T7315] bridge0: port 3(team0) entered blocking state [ 299.208752][ T7315] bridge0: port 3(team0) entered disabled state [ 299.255237][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.972'. [ 300.390552][ T936] usbhid 3-1:0.0: can't add hid device: -71 [ 300.396560][ T936] usbhid: probe of 3-1:0.0 failed with error -71 [ 300.475693][ T3570] Bluetooth: hci8: sending frame failed (-49) [ 300.483489][ T3558] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 300.540610][ T936] usb 3-1: USB disconnect, device number 13 [ 300.701104][ T7340] overlayfs: statfs failed on './file0' [ 301.061757][ T3790] libceph: connect (1)[c::]:6789 error -101 [ 301.067762][ T3790] libceph: mon0 (1)[c::]:6789 connect error [ 301.477409][ T3790] libceph: connect (1)[c::]:6789 error -101 [ 301.538251][ T3790] libceph: mon0 (1)[c::]:6789 connect error [ 301.850025][ T7357] ceph: No mds server is up or the cluster is laggy [ 302.420889][ T3790] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 302.740598][ T3790] usb 5-1: Using ep0 maxpacket: 16 [ 302.885642][ T3790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 303.000514][ T3790] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 303.060754][ T3790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.122619][ T3790] usb 5-1: config 0 descriptor?? [ 303.284909][ T7347] loop2: detected capacity change from 0 to 40427 [ 303.355534][ T7347] F2FS-fs (loop2): invalid crc value [ 303.419713][ T7347] F2FS-fs (loop2): Found nat_bits in checkpoint [ 303.487240][ T7351] loop0: detected capacity change from 0 to 32768 [ 303.536201][ T7351] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.989 (7351) [ 303.649801][ T7383] netlink: 'syz.1.996': attribute type 10 has an invalid length. [ 303.727901][ T7351] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 303.800994][ T7367] netlink: 20 bytes leftover after parsing attributes in process `syz.4.993'. [ 303.810824][ T7351] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 303.850085][ T7351] BTRFS info (device loop0): using free space tree [ 303.896848][ T7383] device team0 left promiscuous mode [ 303.903922][ T7383] device team_slave_0 left promiscuous mode [ 303.910133][ T7383] device team_slave_1 left promiscuous mode [ 303.919795][ T7383] bridge0: port 2(vlan4) entered disabled state [ 303.977457][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 303.987879][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 304.096895][ T7383] batman_adv: batadv0: Adding interface: team0 [ 304.120674][ T7383] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.146301][ T7383] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 304.157458][ T7387] netlink: 'syz.1.996': attribute type 10 has an invalid length. [ 304.165353][ T7387] netlink: 2 bytes leftover after parsing attributes in process `syz.1.996'. [ 304.174749][ T7387] device team0 entered promiscuous mode [ 304.180347][ T7387] device team_slave_0 entered promiscuous mode [ 304.186780][ T7387] device team_slave_1 entered promiscuous mode [ 304.195142][ T7387] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.203771][ T7387] bridge0: port 2(vlan4) entered blocking state [ 304.210148][ T7387] bridge0: port 2(vlan4) entered forwarding state [ 304.218726][ T7387] batman_adv: batadv0: Interface activated: team0 [ 304.230130][ T7387] batman_adv: batadv0: Interface deactivated: team0 [ 304.237004][ T7387] batman_adv: batadv0: Removing interface: team0 [ 304.238758][ T7351] BTRFS error (device loop0): open_ctree failed [ 304.320111][ T7387] bridge0: port 3(team0) entered blocking state [ 304.327042][ T7387] bridge0: port 3(team0) entered disabled state [ 304.481634][ T7367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.517381][ T7367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.571894][ T3790] hid-generic 0003:0158:0100.0010: unknown main item tag 0x1 [ 304.610598][ T3790] hid-generic 0003:0158:0100.0010: unexpected long global item [ 304.660172][ T3790] hid-generic: probe of 0003:0158:0100.0010 failed with error -22 [ 304.912725][ T7324] Bluetooth: hci8: Frame reassembly failed (-84) [ 304.960353][ T7420] overlayfs: statfs failed on './file0' [ 305.300065][ T3873] usb 5-1: USB disconnect, device number 15 [ 307.028425][ T3558] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 307.266272][ T7448] netlink: 'syz.4.1009': attribute type 10 has an invalid length. [ 307.492119][ T7448] bridge0: port 3(team0) entered disabled state [ 307.635257][ T3881] libceph: connect (1)[c::]:6789 error -101 [ 307.642335][ T3881] libceph: mon0 (1)[c::]:6789 connect error [ 307.650809][ T7441] ceph: No mds server is up or the cluster is laggy [ 307.693156][ T7448] device team0 left promiscuous mode [ 307.723303][ T7448] device team_slave_0 left promiscuous mode [ 307.750818][ T7448] device team_slave_1 left promiscuous mode [ 307.757192][ T7448] bridge0: port 3(team0) entered disabled state [ 307.883212][ T7448] batman_adv: batadv0: Adding interface: team0 [ 307.927834][ T7448] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.170333][ T7438] loop3: detected capacity change from 0 to 32768 [ 308.214144][ T7448] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 308.229298][ T7438] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1007 (7438) [ 308.289876][ T7438] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 308.362632][ T7438] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 308.402293][ T7438] BTRFS info (device loop3): using free space tree [ 308.412540][ T7452] netlink: 'syz.4.1009': attribute type 10 has an invalid length. [ 308.429984][ T7452] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1009'. [ 308.472676][ T7452] device team0 entered promiscuous mode [ 308.493328][ T7452] device team_slave_0 entered promiscuous mode [ 308.510304][ T7452] device team_slave_1 entered promiscuous mode [ 308.582804][ T7452] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.589592][ T7452] batman_adv: batadv0: Interface activated: team0 [ 308.627310][ T7452] batman_adv: batadv0: Interface deactivated: team0 [ 308.636943][ T7452] batman_adv: batadv0: Removing interface: team0 [ 308.660926][ T7447] loop0: detected capacity change from 0 to 32768 [ 308.692845][ T7452] bridge0: port 3(team0) entered blocking state [ 308.751755][ T3632] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (3632) [ 308.760620][ T7452] bridge0: port 3(team0) entered disabled state [ 308.779489][ T7438] BTRFS info (device loop3): enabling ssd optimizations [ 308.793635][ T7452] bridge0: port 3(team0) entered blocking state [ 308.799999][ T7452] bridge0: port 3(team0) entered forwarding state [ 308.905911][ T6547] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 309.236997][ T7493] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1015'. [ 309.363876][ T7497] bridge1: port 1(veth1_to_bond) entered blocking state [ 309.427573][ T7497] bridge1: port 1(veth1_to_bond) entered disabled state [ 310.201578][ T7497] device veth1_to_bond entered promiscuous mode [ 310.269439][ T7497] bridge1: port 1(veth1_to_bond) entered blocking state [ 310.276525][ T7497] bridge1: port 1(veth1_to_bond) entered forwarding state [ 310.547948][ T3876] libceph: connect (1)[c::]:6789 error -101 [ 310.555651][ T3876] libceph: mon0 (1)[c::]:6789 connect error [ 310.576044][ T7516] ceph: No mds server is up or the cluster is laggy [ 310.719682][ T7524] netlink: 'syz.0.1025': attribute type 10 has an invalid length. [ 310.819542][ T7524] batman_adv: batadv0: Adding interface: team0 [ 310.826226][ T7524] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.851874][ T7524] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 310.880562][ T7527] netlink: 'syz.0.1025': attribute type 10 has an invalid length. [ 310.888521][ T7527] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1025'. [ 310.897718][ T7527] device team0 entered promiscuous mode [ 310.903364][ T7527] device team_slave_0 entered promiscuous mode [ 310.909799][ T7527] device team_slave_1 entered promiscuous mode [ 310.918743][ T7527] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.925976][ T7527] batman_adv: batadv0: Interface activated: team0 [ 310.932762][ T7527] batman_adv: batadv0: Interface deactivated: team0 [ 310.939619][ T7527] batman_adv: batadv0: Removing interface: team0 [ 311.724585][ T7527] bridge0: port 3(team0) entered blocking state [ 311.733065][ T7527] bridge0: port 3(team0) entered disabled state [ 311.741786][ T7527] bridge0: port 3(team0) entered blocking state [ 311.748164][ T7527] bridge0: port 3(team0) entered forwarding state [ 312.281171][ T3792] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 312.550549][ T3792] usb 4-1: Using ep0 maxpacket: 16 [ 312.685331][ T3792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 312.696825][ T3792] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 312.709354][ T3792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.745998][ T3792] usb 4-1: config 0 descriptor?? [ 313.006498][ T7538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.017660][ T7538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.138580][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1030'. [ 313.147820][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 313.157251][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 313.449188][ T7538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.459407][ T7538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.476599][ T3792] hid (null): unknown global tag 0x83 [ 313.482460][ T3792] hid (null): unknown global tag 0xc [ 313.489831][ T3792] hid-generic 0003:0158:0100.0011: unknown main item tag 0x1 [ 313.497685][ T3792] hid-generic 0003:0158:0100.0011: unexpected long global item [ 313.505891][ T3792] hid-generic: probe of 0003:0158:0100.0011 failed with error -22 [ 314.095325][ T7544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1033'. [ 314.108587][ T7549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1033'. [ 314.117938][ T7554] device veth1_to_bond left promiscuous mode [ 314.124639][ T7554] bridge1: port 1(veth1_to_bond) entered disabled state [ 314.133789][ T7554] bridge2: port 1(veth1_to_bond) entered blocking state [ 314.144139][ T7554] bridge2: port 1(veth1_to_bond) entered disabled state [ 314.153853][ T7554] device veth1_to_bond entered promiscuous mode [ 314.167532][ T7554] bridge2: port 1(veth1_to_bond) entered blocking state [ 314.174601][ T7554] bridge2: port 1(veth1_to_bond) entered forwarding state [ 314.194438][ T7552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1034'. [ 314.203632][ T7552] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1034'. [ 314.465309][ T3633] usb 4-1: USB disconnect, device number 16 [ 314.623333][ T7565] device pim6reg1 entered promiscuous mode [ 315.200616][ T3570] Bluetooth: hci4: unexpected event 0x06 length: 23 > 3 [ 315.409591][ T3602] libceph: connect (1)[c::]:6789 error -101 [ 315.437926][ T3602] libceph: mon0 (1)[c::]:6789 connect error [ 315.447072][ T7580] ceph: No mds server is up or the cluster is laggy [ 315.855503][ T7594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1048'. [ 315.864589][ T7594] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1048'. [ 315.909250][ T7598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1050'. [ 316.080661][ T7601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1050'. [ 316.153703][ T7602] device veth1_to_bond left promiscuous mode [ 316.201765][ T7602] bridge6: port 1(veth1_to_bond) entered disabled state [ 316.224658][ T7602] bridge7: port 1(veth1_to_bond) entered blocking state [ 316.269409][ T7602] bridge7: port 1(veth1_to_bond) entered disabled state [ 316.299678][ T7602] device veth1_to_bond entered promiscuous mode [ 316.342449][ T7602] bridge7: port 1(veth1_to_bond) entered blocking state [ 316.349490][ T7602] bridge7: port 1(veth1_to_bond) entered forwarding state [ 316.572766][ T7611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.715814][ T7620] 9pnet_fd: Insufficient options for proto=fd [ 316.744489][ T3570] Bluetooth: hci4: unexpected event 0x06 length: 23 > 3 [ 316.756061][ T7623] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1060'. [ 316.900550][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.906877][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.937183][ T7628] process 'syz.1.1061' launched './file1' with NULL argv: empty string added [ 317.261788][ T7649] 9pnet_fd: Insufficient options for proto=fd [ 317.350213][ T3633] libceph: connect (1)[c::]:6789 error -101 [ 317.388553][ T3633] libceph: mon0 (1)[c::]:6789 connect error [ 317.426261][ T7651] ceph: No mds server is up or the cluster is laggy [ 317.596663][ T7672] netlink: 'syz.1.1080': attribute type 10 has an invalid length. [ 317.640529][ T7672] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1080'. [ 317.652334][ T7672] bridge0: port 3(team0) entered blocking state [ 317.659897][ T7672] bridge0: port 3(team0) entered disabled state [ 317.685686][ T7672] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 317.974101][ T7687] 9pnet_fd: Insufficient options for proto=fd [ 318.097002][ T7689] netlink: 'syz.1.1084': attribute type 10 has an invalid length. [ 318.150660][ T7689] device team0 left promiscuous mode [ 318.156010][ T7689] device team_slave_0 left promiscuous mode [ 318.162357][ T7689] device team_slave_1 left promiscuous mode [ 318.170211][ T7689] bridge0: port 2(vlan4) entered disabled state [ 318.261616][ T7689] batman_adv: batadv0: Adding interface: team0 [ 318.267779][ T7689] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.292971][ T7689] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 318.310731][ T7699] capability: warning: `syz.4.1091' uses deprecated v2 capabilities in a way that may be insecure [ 318.344959][ T7693] netlink: 'syz.1.1084': attribute type 10 has an invalid length. [ 318.407454][ T7693] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1084'. [ 318.437887][ T7693] device team0 entered promiscuous mode [ 318.447980][ T7693] device team_slave_0 entered promiscuous mode [ 318.455282][ T7693] device team_slave_1 entered promiscuous mode [ 318.466693][ T7693] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.489258][ T7693] bridge0: port 2(vlan4) entered blocking state [ 318.495610][ T7693] bridge0: port 2(vlan4) entered forwarding state [ 318.503502][ T7693] batman_adv: batadv0: Interface activated: team0 [ 318.523066][ T7693] batman_adv: batadv0: Interface deactivated: team0 [ 318.530049][ T7693] batman_adv: batadv0: Removing interface: team0 [ 318.538239][ T7693] bridge0: port 3(team0) entered blocking state [ 318.545937][ T7693] bridge0: port 3(team0) entered disabled state [ 318.875596][ T7719] loop2: detected capacity change from 0 to 256 [ 318.981537][ T3570] Bluetooth: hci7: command 0x0406 tx timeout [ 319.663696][ T7719] exfat: Deprecated parameter 'namecase' [ 319.669354][ T7719] exfat: Deprecated parameter 'utf8' [ 319.750805][ T7719] exfat: Deprecated parameter 'namecase' [ 319.817051][ T7726] 9pnet_fd: Insufficient options for proto=fd [ 319.827026][ T7719] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 319.927676][ T7730] loop0: detected capacity change from 0 to 1024 [ 320.205237][ T56] hfsplus: b-tree write err: -5, ino 4 [ 320.290515][ T3601] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 320.376172][ T7745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1104'. [ 320.385355][ T7745] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1104'. [ 320.540604][ T3601] usb 2-1: Using ep0 maxpacket: 16 [ 320.661244][ T3601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 320.696778][ T7720] loop3: detected capacity change from 0 to 32768 [ 320.705199][ T3601] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 320.707255][ T7720] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1098 (7720) [ 320.717543][ T7749] ceph: No mds server is up or the cluster is laggy [ 320.789614][ T3601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.833184][ T3601] usb 2-1: config 0 descriptor?? [ 320.845292][ T3881] libceph: connect (1)[c::]:6789 error -101 [ 320.852761][ T3881] libceph: mon0 (1)[c::]:6789 connect error [ 320.988542][ T7720] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 321.000179][ T7720] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 321.069673][ T7720] BTRFS info (device loop3): using free space tree [ 321.114430][ T7761] netlink: 'syz.4.1110': attribute type 10 has an invalid length. [ 321.166369][ T7733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.197628][ T7733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.232927][ T7761] bridge0: port 3(team0) entered disabled state [ 321.429384][ T7761] device team0 left promiscuous mode [ 321.435112][ T7761] device team_slave_0 left promiscuous mode [ 321.443209][ T7761] device team_slave_1 left promiscuous mode [ 321.449555][ T7761] bridge0: port 3(team0) entered disabled state [ 321.696233][ T7733] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1103'. [ 321.713832][ T7761] batman_adv: batadv0: Adding interface: team0 [ 321.721420][ T7761] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.746657][ T7761] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 321.916567][ T7770] netlink: 'syz.4.1110': attribute type 10 has an invalid length. [ 321.941604][ T7720] BTRFS error (device loop3): open_ctree failed [ 321.955466][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'. [ 322.005876][ T7770] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1110'. [ 322.059268][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'. [ 322.097632][ T7790] ------------[ cut here ]------------ [ 322.103269][ T7790] WARNING: CPU: 0 PID: 7790 at mm/page_alloc.c:5527 __alloc_pages+0x3b7/0x770 [ 322.112306][ T7790] Modules linked in: [ 322.116223][ T7790] CPU: 0 PID: 7790 Comm: syz.0.1112 Not tainted 6.1.99-syzkaller #0 [ 322.124293][ T7790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 322.135165][ T7790] RIP: 0010:__alloc_pages+0x3b7/0x770 [ 322.140850][ T7790] Code: fc ff df 0f 85 fa 00 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cd 41 89 cd e9 ea 00 00 00 c6 05 48 4d 89 0c 01 <0f> 0b 41 83 fc 0a 0f 86 1e fd ff ff 45 31 e4 48 c7 44 24 20 0e 36 [ 322.160507][ T7790] RSP: 0018:ffffc900054af8a0 EFLAGS: 00010246 [ 322.166596][ T7790] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 322.174627][ T7790] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc900054af928 [ 322.182666][ T7790] RBP: ffffc900054af9b8 R08: dffffc0000000000 R09: ffffc900054af900 [ 322.190712][ T7790] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000000000000b [ 322.198707][ T7790] R13: 0000000000040dc0 R14: 1ffff92000a95f1c R15: 1ffff92000a95f18 [ 322.206781][ T7790] FS: 00007f0867d8e6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 322.215762][ T7790] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.222483][ T7790] CR2: 00000000203d0000 CR3: 00000000680eb000 CR4: 00000000003506f0 [ 322.230505][ T7790] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 322.238494][ T7790] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 322.246514][ T7790] Call Trace: [ 322.249819][ T7790] [ 322.252790][ T7790] ? __warn+0x15a/0x520 [ 322.256969][ T7790] ? __alloc_pages+0x3b7/0x770 [ 322.261791][ T7790] ? report_bug+0x2af/0x500 [ 322.266316][ T7790] ? __alloc_pages+0x3b7/0x770 [ 322.271130][ T7790] ? handle_bug+0x3d/0x70 [ 322.275473][ T7790] ? exc_invalid_op+0x16/0x40 [ 322.280177][ T7790] ? asm_exc_invalid_op+0x16/0x20 [ 322.285287][ T7790] ? __alloc_pages+0x3b7/0x770 [ 322.290073][ T7790] ? zone_statistics+0x160/0x160 [ 322.295144][ T7790] ? lockdep_hardirqs_on+0x94/0x130 [ 322.300423][ T7790] __kmalloc_large_node+0x91/0x1d0 [ 322.305559][ T7790] ? drm_mode_create_lease_ioctl+0x988/0x1960 [ 322.311856][ T7790] __kmalloc+0x118/0x230 [ 322.316127][ T7790] drm_mode_create_lease_ioctl+0x988/0x1960 [ 322.321887][ T7733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.322075][ T7790] ? _drm_lease_revoke+0x3c0/0x3c0 [ 322.335507][ T7790] ? drm_is_current_master+0x1a6/0x200 [ 322.341030][ T7790] ? do_raw_spin_unlock+0x137/0x8a0 [ 322.346257][ T7790] ? _raw_spin_unlock+0x24/0x40 [ 322.349276][ T7733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.351172][ T7790] drm_ioctl_kernel+0x345/0x4f0 [ 322.363745][ T7790] ? _drm_lease_revoke+0x3c0/0x3c0 [ 322.368881][ T7790] ? drm_copy_field+0x170/0x170 [ 322.373794][ T7790] ? __might_fault+0xbd/0x110 [ 322.378499][ T7790] drm_ioctl+0x618/0x9f0 [ 322.382826][ T7790] ? _drm_lease_revoke+0x3c0/0x3c0 [ 322.388005][ T7790] ? drm_ioctl_kernel+0x4f0/0x4f0 [ 322.393118][ T7790] ? bpf_lsm_file_ioctl+0x5/0x10 [ 322.398086][ T7790] ? security_file_ioctl+0x7d/0xa0 [ 322.403260][ T7790] ? drm_ioctl_kernel+0x4f0/0x4f0 [ 322.408346][ T7790] __se_sys_ioctl+0xf1/0x160 [ 322.413016][ T7790] do_syscall_64+0x3b/0xb0 [ 322.417469][ T7790] ? clear_bhb_loop+0x45/0xa0 [ 322.422241][ T7790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.428160][ T7790] RIP: 0033:0x7f0866f75ad9 [ 322.432646][ T7790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.452298][ T7790] RSP: 002b:00007f0867d8e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.460773][ T7790] RAX: ffffffffffffffda RBX: 00007f0867103f60 RCX: 00007f0866f75ad9 [ 322.468759][ T7790] RDX: 0000000020000040 RSI: 00000000c01864c6 RDI: 0000000000000003 [ 322.476910][ T7790] RBP: 00007f0866fe4e5d R08: 0000000000000000 R09: 0000000000000000 [ 322.484932][ T7790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.492960][ T7790] R13: 000000000000000b R14: 00007f0867103f60 R15: 00007ffe9c32d8a8 [ 322.500991][ T7790] [ 322.504035][ T7790] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 322.511313][ T7790] CPU: 0 PID: 7790 Comm: syz.0.1112 Not tainted 6.1.99-syzkaller #0 [ 322.519293][ T7790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 322.529355][ T7790] Call Trace: [ 322.532652][ T7790] [ 322.535587][ T7790] dump_stack_lvl+0x1e3/0x2cb [ 322.540290][ T7790] ? nf_tcp_handle_invalid+0x642/0x642 [ 322.545773][ T7790] ? panic+0x764/0x764 [ 322.549858][ T7790] ? vscnprintf+0x59/0x80 [ 322.554205][ T7790] panic+0x318/0x764 [ 322.558117][ T7790] ? __warn+0x169/0x520 [ 322.562290][ T7790] ? memcpy_page_flushcache+0xfc/0xfc [ 322.567691][ T7790] __warn+0x348/0x520 [ 322.571684][ T7790] ? __alloc_pages+0x3b7/0x770 [ 322.576465][ T7790] report_bug+0x2af/0x500 [ 322.580806][ T7790] ? __alloc_pages+0x3b7/0x770 [ 322.585587][ T7790] handle_bug+0x3d/0x70 [ 322.589749][ T7790] exc_invalid_op+0x16/0x40 [ 322.594266][ T7790] asm_exc_invalid_op+0x16/0x20 [ 322.599137][ T7790] RIP: 0010:__alloc_pages+0x3b7/0x770 [ 322.604545][ T7790] Code: fc ff df 0f 85 fa 00 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cd 41 89 cd e9 ea 00 00 00 c6 05 48 4d 89 0c 01 <0f> 0b 41 83 fc 0a 0f 86 1e fd ff ff 45 31 e4 48 c7 44 24 20 0e 36 [ 322.624252][ T7790] RSP: 0018:ffffc900054af8a0 EFLAGS: 00010246 [ 322.630338][ T7790] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 322.638325][ T7790] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc900054af928 [ 322.646292][ T7790] RBP: ffffc900054af9b8 R08: dffffc0000000000 R09: ffffc900054af900 [ 322.654259][ T7790] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000000000000b [ 322.662225][ T7790] R13: 0000000000040dc0 R14: 1ffff92000a95f1c R15: 1ffff92000a95f18 [ 322.670206][ T7790] ? zone_statistics+0x160/0x160 [ 322.675188][ T7790] ? lockdep_hardirqs_on+0x94/0x130 [ 322.680395][ T7790] __kmalloc_large_node+0x91/0x1d0 [ 322.685522][ T7790] ? drm_mode_create_lease_ioctl+0x988/0x1960 [ 322.691594][ T7790] __kmalloc+0x118/0x230 [ 322.695867][ T7790] drm_mode_create_lease_ioctl+0x988/0x1960 [ 322.701775][ T7790] ? _drm_lease_revoke+0x3c0/0x3c0 [ 322.706891][ T7790] ? drm_is_current_master+0x1a6/0x200 [ 322.712355][ T7790] ? do_raw_spin_unlock+0x137/0x8a0 [ 322.717553][ T7790] ? _raw_spin_unlock+0x24/0x40 [ 322.722402][ T7790] drm_ioctl_kernel+0x345/0x4f0 [ 322.727253][ T7790] ? _drm_lease_revoke+0x3c0/0x3c0 [ 322.732366][ T7790] ? drm_copy_field+0x170/0x170 [ 322.737216][ T7790] ? __might_fault+0xbd/0x110 [ 322.741901][ T7790] drm_ioctl+0x618/0x9f0 [ 322.746235][ T7790] ? _drm_lease_revoke+0x3c0/0x3c0 [ 322.751355][ T7790] ? drm_ioctl_kernel+0x4f0/0x4f0 [ 322.756405][ T7790] ? bpf_lsm_file_ioctl+0x5/0x10 [ 322.761340][ T7790] ? security_file_ioctl+0x7d/0xa0 [ 322.766496][ T7790] ? drm_ioctl_kernel+0x4f0/0x4f0 [ 322.771519][ T7790] __se_sys_ioctl+0xf1/0x160 [ 322.776135][ T7790] do_syscall_64+0x3b/0xb0 [ 322.780567][ T7790] ? clear_bhb_loop+0x45/0xa0 [ 322.785252][ T7790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.791150][ T7790] RIP: 0033:0x7f0866f75ad9 [ 322.795582][ T7790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.815194][ T7790] RSP: 002b:00007f0867d8e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.823602][ T7790] RAX: ffffffffffffffda RBX: 00007f0867103f60 RCX: 00007f0866f75ad9 [ 322.831572][ T7790] RDX: 0000000020000040 RSI: 00000000c01864c6 RDI: 0000000000000003 [ 322.839543][ T7790] RBP: 00007f0866fe4e5d R08: 0000000000000000 R09: 0000000000000000 [ 322.847515][ T7790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.855481][ T7790] R13: 000000000000000b R14: 00007f0867103f60 R15: 00007ffe9c32d8a8 [ 322.863454][ T7790] [ 322.866774][ T7790] Kernel Offset: disabled [ 322.871093][ T7790] Rebooting in 86400 seconds..