last executing test programs: 21.705021254s ago: executing program 1 (id=121): syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000002180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xccd, 0xb1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7, 0x60, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x8, 0xf5, 0x4, {0x7, 0x25, 0x1, 0xc, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x40, 0xd, 0x75, {0x7, 0x25, 0x1, 0xc, 0x5, 0x9}}}}}}}}]}}, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0}) 18.800842655s ago: executing program 1 (id=128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x3e57}, {0x20, 0x4, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0x9}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x18, 0x2, 0x4, 0x2, 0xf, 0x6, 0x8, 0x1, 0x8, 0x0, 0x10, 0x7], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xc, 0x3, 0x5, 0x6, 0xd, 0x1], [0xfff1, 0x5, 0x2, 0x7, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xa, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff, 0xffff}, {0xb, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 16.981424835s ago: executing program 1 (id=130): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x1) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, 0xffffffffffffffff, 0xc10c3000) mmap(&(0x7f0000089000/0x2000)=nil, 0x2000, 0xa, 0x11012, 0xffffffffffffffff, 0x1000) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0), 0x1, 0x42a, &(0x7f0000000500)="$eJzs3E2IVeUfB/DfOTNX/47j/44RTUWglGgRXvVeq622aNHGhSD0IjTk9QWvTngnShPKAhEiooUkCDEto0UuWhQRRJsIatGiIJKEahGGFdKi3cS955zxomcWjTMenT4fOHOf89w753seDhyeB875BfCftTYitkXEUEQ0IqKe96f5Fq9kW+93x1vn9ve2JGZmdv6RRBIR7da5/cWxkvxzZf5v/4uI27Yl8ejwtbndo8cOTnQ67SP5/qapQ89t6h49tvHAoYl97X3tw62tDzebWx9qPbJwYz0//mo0m9tqH2xYe+rrT9/4rne+o/l3g+NYSMkcndsXI6xCtYF2UnK9ufm8dfrNT6o+BwDgxkvzuf9wf/5fj6HIJm8Xzj99uR4vj1R9fgAAAMD1m5kZyj8BAACApSux9gcAAIAlrngOoN06t7/YbtSzBysfiLi0PSLGsvzi/eLs2+H++8ORv1taW4T8ey8swkH/he7j1eZ/s6va/NXvV5s//UO1+c+srzb/l5+qzV+3ptr805MRn23PCiBce/9L+zUPCssiYnle02DFAuWv+fzK/e/4Nfe/dPb+NxQR1/Mi1qnpiyfL+scfi7h0IuLu4bL8ZDY/yWs6zNfGb0/sLutffSli5t2I9VGeHwP5c9eH2LT3QKe9Oftbnt966cl6Wf+OL7Lxj8yRP5b/bmigTsR8nBnZ/dGqkv5djSz//vvKr/+dA+P/f16bY2we+Wvv6uwo61//epa/Z47xD17/1fPILUz/1v25rP/DrddxUABg3tL+3CZJG7PtNG00svne7TGSdia7Uw/unXz+8J5sDjQWtbSYamXzkVrS29+Sz02K/eZV+618DnGqvqK/33h2srOn6sEDAADAEjca8eNTr308vvKq9f+v9Wz9DwAAANz6euv/e6bfOdtr/1X6dCQAAABwq+ut/y+f/P3LsP4HAACAJcv6HwAAAJa+Yv0/Okf9v1UDtfs25/WHv6rXlhe1/gAAAICbX2/9n37/xIXu0WMHJzqd9hENDQ2N2UbVdygAAGChXZn0V30mAAAAwOJJLyYR0ds21NeN3rHmvfHBb5clf/erAyyLiBfO7nz7xYmpqSNbev1/zvZPncn7m1WNAQAAABhUrNOLdTwAAAAAAAAAAAAAAHDzuxHlxKseIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvnnwAAAP//UuGYiQ==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="15", 0x1}], 0x1, 0x800fff, 0xc, 0x4) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) 14.614227841s ago: executing program 0 (id=137): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@abort}, {@delalloc}, {@nombcache}, {@usrjquota}, {@dioread_nolock}, {@data_err_ignore}, {@delalloc}, {@barrier}]}, 0x1, 0xbd2, &(0x7f0000002f80)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB=',volume=0000000000000006,\x00\x00\x00\x00\x00'], 0x1, 0x489, &(0x7f0000000580)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000100)={[{@barrier_val={'barrier', 0x3d, 0x90ed}}, {@init_itable_val={'init_itable', 0x3d, 0xf8}}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") mkdirat(0xffffffffffffff9c, 0x0, 0x9a) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) 14.242851555s ago: executing program 1 (id=138): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5608, 0x3) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x6, 0x7, 0x10021da0, 0x0, 0xff, "00004020e6137db8cbc19e00", 0xfffffffe, 0x1c67c}) prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe) syz_read_part_table(0x1054, &(0x7f0000000000)="$eJzsz7GtwkAQBNCxT/72l4iowHXQB0WQUQIJfRDTAe0gkdCEkWUbaAAhpPeS087tBBu+qkvS18mQ1WVKNrfr7m3hUJJ1te+e86uXOve2P/7NP9WYNMteOz3/panm5JRkKFnGsbY9f/A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgZjwAAAP//HAEKVg==") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 12.482699564s ago: executing program 2 (id=142): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$FIBMAP(r1, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000b1e000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0xe1}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.008697119s ago: executing program 2 (id=144): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8000000000000008, 0xfffffffffffffffa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 10.252633638s ago: executing program 2 (id=147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x3e57}, {0x20, 0x4, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0x9}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x18, 0x2, 0x4, 0x2, 0xf, 0x6, 0x8, 0x1, 0x8, 0x0, 0x10, 0x7], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xc, 0x3, 0x5, 0x6, 0xd, 0x1], [0xfff1, 0x5, 0x2, 0x7, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xa, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0xb, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 9.934916481s ago: executing program 0 (id=149): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000000)='./file2\x00', 0x4, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=0x0], 0xfd, 0x1501, &(0x7f0000002180)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000200)=""/51, 0x33) getdents(r0, 0xfffffffffffffffd, 0xbb) 8.872500503s ago: executing program 4 (id=150): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(0x0, 0x0) tee(r1, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) 8.767258284s ago: executing program 3 (id=151): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@barrier_val}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@sysvgroups}, {@data_err_ignore}]}, 0x0, 0x586, &(0x7f0000000680)="$eJzs3V1rXGkdAPD/mc6kbZp2suqFLrhb7EpbtJPGsLvBi3UF0asFpd7XmExC6CQpmcluExY3xQ8giKjgld7sjeAHEKTgjZeLsKDXiooi2lVEQXtkZs6kk8yZZNomM9nk96On53k5Z/7Pk5w57zkngFPr9Wx4lKbp9YgoZ+WFbLjSzGxHXI6x+ODh2/PNIYk0vfW3JJKIVlnns9KWs3GhPUvrA4pfifhm0hu3vrl1Z65Wq65n+anGyt2p+ubWjeWVuaXqUnV1Zmb6ldlXZ1+evfks3Vu8kCUuRsRrX/rT97/z7pdf+8Vn3/r97b9c+1bSbvM7sacfu5zvzhTzpsgt7Gh3vRTnusouR8T6E3bkOCtmvXvQXgDSXVV93M8WEQAAhqu5f/+RiPhURFyPcpzZs8vWdwcuiZy9egAAAOA4Sr8wEf9NOtfueozllJX7TAsAAAAcU4WImIikUMnu952IQqFSidY9vB+L8UJtrd74zOLaxupCsy5iMkqFxeVa9WZ2r/BklJJmfrqVzvL/at8EOtlVPxMRz0XE98rnW/nK/FptYdQnPwAAAOCUuLDn+P+f5fbxPwAAAHDCTI66AQAAAMCR23X8Pz66dgAAAABHx/V/AAAAONG++sYbzSHtvP964c3NjTtrb95YqNbvVFY25ivza+t3K0tra6UBPmznZYGrG/emGtV6Y6q+uXV7ZW1jtXF7edcrsAEAAIAheu7FB79NImL78+dbQ9NY61/bf7L3BIyyjcDRKEbsOTE31jvR7y61x38cUqOAoTjTt+bKUNsBDF9xdzYZVTuA4du5rF8fbTuA0Tlow9/35p332qO+xxGl6F7LAAAAI3T1E7nX/1sK+865vX81cOw9/hJfGmk7gOHLztt1bcsH3Kw7pQcfeq3r/zm3/OWyxw8nSmmfOwCB0+HA6//99hHeGzSCvyECAIBRm2gNSaGSnd6biEKhUom42HotQClZXK5Vb2ZXB39TLp1t5qdbcyb+WAgAAAAAAAAAAAAAAAAAAAAAAAAABpSmSaQAAADAiRZR+HPyy/az/K+WX5rYe35gLPl3ObJXhL71o1s/uDfXaKxPN8v/vlPe+OGt26M4dwEAAADkax2/fy4bT4+6NQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcNB88fHu+Mwwz7l+/GBGTefGLca41PheliBj/RxLFrvmSiDhzCPG370fEx/PiJ81m7YTsil/qlJ0/+vgxmf0Uevv/KC4cQnw4zR401z+v533/CnG5Nc7//hUjduWfVv/1X+ys/870Wf9d7Pm0Qm6M59//2VTf+Pcjni/mr3868ZM+8a+0kwf+GL7x9a2tfnXpjyOudrY/7xb2RHicmmqs3J2qb27dWF6ZW6ouVVdnZqZfmX119uXZm1OLy7Vq9n9ujO9+8ueP9uv/eO72r73+3a//Lx3U8cz/3r/38KPtZCkv/rUrOfF/9ZNsit74hWzb9+ks3ay/2klvt9PdXvjpr1/Yr/8Lffp/0O//Wk9v8l3/2rf/MNiUAMAw1De37szVatX1p0mUI+IZZj/URGfXsaeqeZR+LFo4ukTtUsSAE8+cHV1Tz0Wt+GwL5JMm3umtejEGnr25uHWXpGmaNsueoWHJ4NGfMnHAkpDslIx0tQQAAByB7gMDAAAAAAAAAAAAAAAAAAAAYDSe8Cli40/zfLK9Mbd3UslhPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBQ/D8AAP//AaPe5Q==") syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x0, 0x5, 0x90, {0x90, 0x3ea5f6b1e60a842a, "3f903d5f6238a12e8c2e613c053b5dbe19207f90e94296e2e0862ffeac5a87d6c70076e64df1c6e828ef0469970568c0a5a625a2769b4db23fe36689e66c3032e8510ea4b74b2e8c07e84ca271e02aadd4d01facc82e6ca379fa8f8e8f51e5fc32e4f099a319049f6e244a226c384399d6f5ead41fafec2baae2a37e7cabc60ef8df352d67787972f58547e37e50"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000f80)={0x84, &(0x7f0000000300)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x40, 0x1c, 0x1}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x88}, 0x0}) 8.553158016s ago: executing program 0 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000080)='keyring\x00', 0x0, &(0x7f0000000280)='nl80211\x00', r5) accept4(r4, &(0x7f0000000180)=@ax25={{0x3, @bcast}, [@null, @default, @null, @rose, @null, @bcast, @bcast]}, &(0x7f0000000240)=0x80, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r6 = dup(r4) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d1) 7.30536203s ago: executing program 0 (id=153): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) syz_open_pts(r3, 0x80) utime(&(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 6.894471094s ago: executing program 2 (id=154): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = fsopen(0x0, 0x1) fsmount(r5, 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getpgrp(r3) getsockopt$inet_tcp_buf(r6, 0x6, 0xe, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001400add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) 6.076943143s ago: executing program 2 (id=155): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$FIBMAP(r1, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000b1e000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0xe1}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.935327105s ago: executing program 4 (id=156): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x4041}, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x406, r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) shutdown(r0, 0x1) 5.013840585s ago: executing program 0 (id=157): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8000000000000008, 0xfffffffffffffffa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 4.909023976s ago: executing program 3 (id=158): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x10802, &(0x7f0000000040)=ANY=[], 0x1, 0x17f, &(0x7f0000000340)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) listxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x1b) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 4.753947908s ago: executing program 4 (id=159): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x200812, &(0x7f00000000c0)={[{@orlov}]}, 0x4, 0x5b7, &(0x7f00000011c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000080)={{}, {0x1, 0x1}, [], {0x4, 0x2}, [], {0x10, 0x5}}, 0x24, 0x0) 3.854573078s ago: executing program 1 (id=160): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a34096d6d"], 0xa) 3.477118482s ago: executing program 0 (id=161): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000300)) 3.267946894s ago: executing program 3 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x3e57}, {0x20, 0x4, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0x9}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x18, 0x2, 0x4, 0x2, 0xf, 0x6, 0x8, 0x1, 0x8, 0x0, 0x10, 0x7], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xc, 0x3, 0x5, 0x6, 0xd, 0x1], [0xfff1, 0x5, 0x2, 0x7, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xa, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0xb, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 3.179833205s ago: executing program 4 (id=163): unshare(0xa000200) socket$inet6(0xa, 0x800000000000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$inet6_udp(0xa, 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x219, 0x183b, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = creat(0x0, 0x62b266a4c604c0ba) ioctl$KDMKTONE(r2, 0x4b30, 0x2e2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xfffffffc) 2.325943864s ago: executing program 3 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x3e57}, {0x20, 0x4, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0x9}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x18, 0x2, 0x4, 0x2, 0xf, 0x6, 0x8, 0x1, 0x8, 0x0, 0x10, 0x7], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xc, 0x3, 0x5, 0x6, 0xd, 0x1], [0xfff1, 0x5, 0x2, 0x7, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xa, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0xb, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 977.010389ms ago: executing program 4 (id=165): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f00000003c0)=""/84, 0x54}], 0x2}, 0x0) sendto$packet(r1, &(0x7f0000000200)="8ee4f1311c71267a4abdb19f664e65d75685d687b43c788a3befe008152e8f33cf5b8601decc41831fcc09e4d8ecd6705c9e2d94f2735c817b5e247b3541dbd4eb76a5", 0x43, 0x4004004, 0x0, 0x0) 454.763525ms ago: executing program 4 (id=166): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(0x0, 0x0) tee(r1, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) 384.995836ms ago: executing program 3 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0xa, 0x4, 0x4, 0xc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0xffffffff85010014, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='x'], 0x0, 0x0, 0x0, 0x0}) getdents(r4, 0x0, 0x0) 145.027138ms ago: executing program 2 (id=168): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 131.462378ms ago: executing program 3 (id=169): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b0efc268cbd67279c5e0f19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a1c6261571866a21a54d762495480"], 0xf, 0x2a4, &(0x7f0000000480)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) 0s ago: executing program 1 (id=170): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x4041}, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x406, r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. syzkaller login: [ 62.552499][ T4177] cgroup: Unknown subsys name 'net' [ 62.713203][ T4177] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.203803][ T4177] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.110866][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 66.160379][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 66.206933][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 66.225075][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 66.318797][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.326482][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.334639][ T4190] device bridge_slave_0 entered promiscuous mode [ 66.357037][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.364944][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.372945][ T4190] device bridge_slave_1 entered promiscuous mode [ 66.419553][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 66.431421][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.444297][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.461221][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.469213][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.478628][ T4189] device bridge_slave_0 entered promiscuous mode [ 66.512134][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.520281][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.528952][ T4195] device bridge_slave_0 entered promiscuous mode [ 66.536450][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.543830][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.551648][ T4189] device bridge_slave_1 entered promiscuous mode [ 66.577590][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.584803][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.593801][ T4195] device bridge_slave_1 entered promiscuous mode [ 66.606139][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.614193][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.622603][ T4197] device bridge_slave_0 entered promiscuous mode [ 66.640992][ T4190] team0: Port device team_slave_0 added [ 66.654941][ T4190] team0: Port device team_slave_1 added [ 66.679192][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.686439][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.694925][ T4197] device bridge_slave_1 entered promiscuous mode [ 66.717152][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.729143][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.754569][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.761828][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.788971][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.803408][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.814099][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.843158][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.850722][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.877420][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.910253][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.917609][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.926156][ T4201] device bridge_slave_0 entered promiscuous mode [ 66.936533][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.953823][ T4195] team0: Port device team_slave_0 added [ 66.966928][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.974434][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.983187][ T4201] device bridge_slave_1 entered promiscuous mode [ 67.003503][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.014079][ T4195] team0: Port device team_slave_1 added [ 67.022264][ T4189] team0: Port device team_slave_0 added [ 67.037051][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.055304][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.073152][ T4189] team0: Port device team_slave_1 added [ 67.120899][ T4190] device hsr_slave_0 entered promiscuous mode [ 67.128653][ T4190] device hsr_slave_1 entered promiscuous mode [ 67.143456][ T4197] team0: Port device team_slave_0 added [ 67.150357][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.158039][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.185485][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.203889][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.211147][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.238233][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.252549][ T4201] team0: Port device team_slave_0 added [ 67.260671][ T4197] team0: Port device team_slave_1 added [ 67.267965][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.275119][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.302182][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.317533][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.324632][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.351125][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.369871][ T4201] team0: Port device team_slave_1 added [ 67.415241][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.423137][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.450904][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.476007][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.483772][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.510895][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.560392][ T4189] device hsr_slave_0 entered promiscuous mode [ 67.568004][ T4189] device hsr_slave_1 entered promiscuous mode [ 67.575030][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.583192][ T4189] Cannot create hsr debugfs directory [ 67.593390][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.601100][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.628437][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.645359][ T4195] device hsr_slave_0 entered promiscuous mode [ 67.652991][ T4195] device hsr_slave_1 entered promiscuous mode [ 67.660330][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.668902][ T4195] Cannot create hsr debugfs directory [ 67.691839][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.698940][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.725914][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.808395][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 67.815013][ T4197] device hsr_slave_0 entered promiscuous mode [ 67.815393][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 67.828273][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 67.828902][ T4197] device hsr_slave_1 entered promiscuous mode [ 67.841935][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.849596][ T4197] Cannot create hsr debugfs directory [ 67.878212][ T4201] device hsr_slave_0 entered promiscuous mode [ 67.885073][ T4201] device hsr_slave_1 entered promiscuous mode [ 67.892358][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 67.897573][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 67.905123][ T4201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.913558][ T4201] Cannot create hsr debugfs directory [ 68.171589][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.192357][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.202251][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.212844][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.291349][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.305262][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.324235][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.343862][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.356562][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.373206][ T4195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.389631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.400676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.421609][ T4195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.432711][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.455924][ T4195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.480424][ T4195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.500248][ T4201] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.515510][ T4201] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.525542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.538109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.547101][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.554659][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.563385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.573954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.582708][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.590088][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.598883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.609662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.628678][ T4201] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.645424][ T4201] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.672207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.719029][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.726030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.736220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.745623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.755314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.765334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.794903][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.804025][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.815795][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.824830][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.844080][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.854598][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.871097][ T4197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.884450][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.893033][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.927664][ T4197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.968878][ T4197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.979510][ T4197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.991144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.001694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.012191][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.019398][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.029495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.038742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.047420][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.054894][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.063607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.074083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.113016][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.130946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.166137][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.176578][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.189852][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.199435][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.210158][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.218258][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.225991][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.235058][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.244054][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.270179][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.284645][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.299534][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.316011][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.342484][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.355316][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.365580][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.375640][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.384541][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.393601][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.402611][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.411984][ T1389] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.419602][ T1389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.428967][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.465456][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.485614][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.499645][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.517152][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.524761][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.533017][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.542418][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.551873][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.559922][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.569492][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.578695][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.587411][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.594708][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.603175][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.619279][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.635160][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.644765][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.655618][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.665118][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.674754][ T1389] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.682096][ T1389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.726104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.741963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.751974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.762413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.772651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.781839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.791474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.800942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.810627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.819516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.828540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.847453][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.870716][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.881826][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.889063][ T1324] Bluetooth: hci0: command 0x041b tx timeout [ 69.891386][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.896380][ T1324] Bluetooth: hci1: command 0x041b tx timeout [ 69.906499][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.917131][ T1324] Bluetooth: hci2: command 0x041b tx timeout [ 69.921874][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.934852][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.944393][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.951820][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.960191][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.968694][ T1324] Bluetooth: hci3: command 0x041b tx timeout [ 69.974594][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.975098][ T1324] Bluetooth: hci4: command 0x041b tx timeout [ 69.985196][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.999187][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.007849][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.015571][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.024225][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.033595][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.045014][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.054917][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.064517][ T4190] device veth0_vlan entered promiscuous mode [ 70.085137][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.094367][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.102994][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.111464][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.120845][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.130506][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.151744][ T4190] device veth1_vlan entered promiscuous mode [ 70.171179][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.182010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.192225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.200998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.213476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.222295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.230826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.241101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.250609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.280494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.297807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.306632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.323661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.333667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.343209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.359788][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.384957][ T4190] device veth0_macvtap entered promiscuous mode [ 70.396537][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.420770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.443722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.460405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.471894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.482336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.504587][ T4190] device veth1_macvtap entered promiscuous mode [ 70.545292][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.578627][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.592317][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.618741][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.645329][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.658251][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.668573][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.677683][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.686658][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.700445][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.709369][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.720897][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.729993][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.739262][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.748684][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.760849][ T4189] device veth0_vlan entered promiscuous mode [ 70.784991][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.823427][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.841079][ T4189] device veth1_vlan entered promiscuous mode [ 70.854248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.863372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.875040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.884063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.892096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.900557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.950108][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.958106][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.969813][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.984587][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.994262][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.021743][ T4189] device veth0_macvtap entered promiscuous mode [ 71.053862][ T4189] device veth1_macvtap entered promiscuous mode [ 71.069573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.085127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.094671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.110304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.165708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.178540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.191591][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.204394][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.221760][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.245255][ T4195] device veth0_vlan entered promiscuous mode [ 71.259927][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.269193][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.279498][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.292102][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.310102][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.318935][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.329463][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.341868][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.353914][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.372134][ T4195] device veth1_vlan entered promiscuous mode [ 71.393349][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.406057][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.423560][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.433748][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.443107][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.452149][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.461871][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.470260][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.481107][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.492167][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.501261][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.512554][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.545570][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.554959][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.555023][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.566371][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.583488][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.583623][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.607465][ T4201] device veth0_vlan entered promiscuous mode [ 71.629739][ T4201] device veth1_vlan entered promiscuous mode [ 71.641577][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.650740][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.661002][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.669850][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.688549][ T4195] device veth0_macvtap entered promiscuous mode [ 71.699756][ T354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.708226][ T354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.729693][ T4195] device veth1_macvtap entered promiscuous mode [ 71.749967][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.761380][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.770455][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.779664][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.787855][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.796647][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.806379][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.815051][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.834150][ T4197] device veth0_vlan entered promiscuous mode [ 71.885035][ T4201] device veth0_macvtap entered promiscuous mode [ 71.900621][ T4197] device veth1_vlan entered promiscuous mode [ 71.921763][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.935928][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.945734][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.961313][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.968169][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 71.986699][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 71.997436][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 72.007471][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.019786][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.025317][ T4269] loop3: detected capacity change from 0 to 1024 [ 72.030304][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.031764][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.047672][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 72.060862][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.071774][ T1108] Bluetooth: hci3: command 0x040f tx timeout [ 72.077117][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.091591][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.103015][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.116758][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.148030][ T4201] device veth1_macvtap entered promiscuous mode [ 72.161878][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.179959][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.192550][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.203471][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.214618][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.225211][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.234711][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.251747][ T4195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.271692][ T4195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.280980][ T4269] hfsplus: xattr searching failed [ 72.286925][ T4269] hfsplus: xattr searching failed [ 72.301426][ T4195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.311096][ T4195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.312020][ T4269] hfsplus: b-tree write err: -5, ino 3 [ 72.332515][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.343574][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.376174][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.387243][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.392492][ T4197] device veth0_macvtap entered promiscuous mode [ 72.423104][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.434484][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.447696][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.460376][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.470987][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.482325][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.498104][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.501061][ T4249] hfsplus: bad catalog file entry [ 72.516953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.531446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.541582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.550235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.571221][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.584647][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.600695][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.616530][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.630928][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.646056][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.651688][ T4272] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.661292][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.691603][ T4197] device veth1_macvtap entered promiscuous mode [ 72.692131][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.722365][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.737354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.745791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.752425][ T4272] loop3: detected capacity change from 0 to 2048 [ 72.776587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.791314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.803774][ T4201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.813728][ T4201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.826838][ T4201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.836638][ T4201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.837645][ T4272] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.900625][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.925784][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.954174][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.964801][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.974998][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.986205][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.996902][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.011890][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.023877][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.056541][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.081510][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.105494][ T4278] loop0: detected capacity change from 0 to 512 [ 73.125210][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.164001][ T4278] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.177526][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.187585][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.201266][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.212473][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.216046][ T4278] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c098, mo2=0002] [ 73.236508][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.239429][ T4278] System zones: [ 73.247046][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.247138][ T4278] 0-2 [ 73.257114][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.262402][ T4278] , 18-18, 34-35 [ 73.297269][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 73.317262][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 73.327251][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 73.337247][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.367233][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.387245][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.397251][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.402785][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.465908][ T4278] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000400000,dioread_nolock,stripe=0x0000000000008001,minixdf,debug,,errors=continue. Quota mode: writeback. [ 73.504278][ T4278] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.513813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.525880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.541704][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.550415][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.567711][ T4197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.577177][ T4197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.661898][ T4197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.674524][ T4197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.700988][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.796509][ T354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.806767][ T354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.867436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.898275][ T1389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.919892][ T1389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.969903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.980360][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.990221][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.999421][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.008133][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.037336][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.045366][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.064400][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 74.073724][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 74.102442][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 74.140126][ T4289] input: syz1 as /devices/virtual/input/input5 [ 74.155216][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.181409][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.198258][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.210174][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 74.216724][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 74.347622][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.371935][ T4294] loop2: detected capacity change from 0 to 128 [ 74.707768][ T13] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 74.726874][ T4299] loop1: detected capacity change from 0 to 764 [ 74.937633][ T13] usb 4-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 74.989466][ T4299] rock: directory entry would overflow storage [ 75.037300][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.083811][ T4299] rock: sig=0x4f50, size=4, remaining=3 [ 75.086738][ T13] usb 4-1: Product: syz [ 75.091423][ T4299] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 75.106676][ T4301] input: syz0 as /devices/virtual/input/input6 [ 75.124691][ T13] usb 4-1: Manufacturer: syz [ 75.179838][ T13] usb 4-1: SerialNumber: syz [ 75.617248][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 75.627265][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 75.637248][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.525943][ T13] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 78.556797][ T13] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 78.617615][ T13] usb 4-1: unit 2 not found! [ 78.623646][ T4317] loop0: detected capacity change from 0 to 512 [ 78.657815][ T4315] loop2: detected capacity change from 0 to 2048 [ 78.727571][ T13] usb 4-1: USB disconnect, device number 2 [ 78.793071][ T4317] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.15: invalid block [ 78.878337][ T4315] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 78.922693][ T4317] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.15: invalid indirect mapped block 10 (level 1) [ 78.981098][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.075270][ T4317] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.15: invalid indirect mapped block 8 (level 1) [ 79.108331][ T4317] EXT4-fs (loop0): 1 truncate cleaned up [ 79.114057][ T4317] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 79.575400][ T4319] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.758382][ T4330] loop2: detected capacity change from 0 to 2048 [ 81.771448][ T4333] loop1: detected capacity change from 0 to 512 [ 81.895655][ T4330] UDF-fs: bad mount option "18446744073709551615" or missing value [ 81.905667][ T4333] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.977878][ T4333] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.010089][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.037308][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.110161][ T4333] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #2: block 18: comm syz.1.12: lblock 23 mapped to illegal pblock 18 (length 1) [ 82.307307][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 82.356102][ T4343] loop4: detected capacity change from 0 to 16 [ 82.461140][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.501114][ T21] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 82.523798][ T4343] erofs: (device loop4): mounted with root inode @ nid 36. [ 82.592060][ T21] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 82.675650][ T21] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.907457][ T21] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 82.918535][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.417298][ T21] usb 4-1: Product: syz [ 83.421994][ T21] usb 4-1: Manufacturer: syz [ 83.426782][ T21] usb 4-1: SerialNumber: syz [ 83.494076][ T4352] loop2: detected capacity change from 0 to 512 [ 83.614797][ T4352] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.22: inode has both inline data and extents flags [ 83.744773][ T4352] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.22: couldn't read orphan inode 15 (err -117) [ 83.813539][ T4352] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.454833][ T4358] loop0: detected capacity change from 0 to 512 [ 84.508998][ T21] usb 4-1: USB disconnect, device number 3 [ 84.678831][ T4358] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.20: iget: bad i_size value: 38620345925642 [ 84.835359][ T4358] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.20: couldn't read orphan inode 15 (err -117) [ 86.191111][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.216809][ T4358] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 86.386596][ T4357] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.20: bg 0: block 5: invalid block bitmap [ 86.443057][ T4358] EXT4-fs (loop0): shut down requested (0) [ 86.627433][ T1108] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.636363][ T4376] loop3: detected capacity change from 0 to 128 [ 86.757322][ T3577] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.763055][ T4376] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.800276][ T4376] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.877491][ T1108] usb 3-1: Using ep0 maxpacket: 16 [ 86.941819][ T2857] cfg80211: failed to load regulatory.db [ 86.997695][ T1108] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 87.141032][ T3577] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.161691][ T3577] usb 2-1: config 0 has no interfaces? [ 87.197639][ T1108] usb 3-1: New USB device found, idVendor=0582, idProduct=002f, bcdDevice= 0.40 [ 87.218620][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.252875][ T1108] usb 3-1: Product: syz [ 87.269075][ T1108] usb 3-1: Manufacturer: syz [ 87.274035][ T1108] usb 3-1: SerialNumber: syz [ 87.377591][ T3577] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 87.380441][ T4383] loop4: detected capacity change from 0 to 512 [ 87.427278][ T3577] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.435555][ T3577] usb 2-1: Product: syz [ 87.472270][ T3577] usb 2-1: Manufacturer: syz [ 87.486651][ T4383] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.27: inode has both inline data and extents flags [ 87.489307][ T3577] usb 2-1: SerialNumber: syz [ 87.507715][ T4383] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.27: couldn't read orphan inode 15 (err -117) [ 87.547989][ T4383] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.620721][ T1108] usb 3-1: invalid MIDI in EP 0 [ 87.630423][ T3577] usb 2-1: config 0 descriptor?? [ 87.693348][ T3577] usb 2-1: can't set config #0, error -71 [ 87.735987][ T1108] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 87.743856][ T4383] process 'syz.4.27' launched './file0' with NULL argv: empty string added [ 87.758146][ T3577] usb 2-1: USB disconnect, device number 2 [ 87.785407][ T4383] Invalid argument reading file caps for ./file0 [ 87.795514][ T4388] loop1: detected capacity change from 0 to 512 [ 87.811194][ T1108] usb 3-1: USB disconnect, device number 2 [ 87.860411][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.947607][ T2857] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.037850][ T4390] loop4: detected capacity change from 0 to 512 [ 88.048512][ T4388] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 88.057775][ T4388] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 88.066411][ T4388] System zones: 0-1, 15-15, 18-18, 34-34 [ 88.083633][ T4388] EXT4-fs (loop1): orphan cleanup on readonly fs [ 88.102818][ T4390] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.118361][ T4388] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 88.130305][ T4388] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 88.145872][ T4388] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 88.153319][ T4390] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.173539][ T4388] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.31: bg 0: block 40: padding at end of block bitmap is not set [ 88.245181][ T4390] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 88.265775][ T4388] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 88.266296][ T4390] EXT4-fs (loop4): 1 truncate cleaned up [ 88.284971][ T4390] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 88.295503][ T4388] EXT4-fs (loop1): 1 truncate cleaned up [ 88.365063][ T4388] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 88.447803][ T2857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.528484][ T2857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.570914][ T2857] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.622649][ T2857] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.652180][ T2857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.716364][ T2857] usb 4-1: config 0 descriptor?? [ 88.724907][ T4388] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 88.944118][ T4401] loop2: detected capacity change from 0 to 1024 [ 89.072602][ T4401] hfsplus: xattr search failed [ 89.099548][ T4401] hfsplus: xattr searching failed [ 89.185052][ T4385] udc-core: couldn't find an available UDC or it's busy [ 89.258256][ T4201] hfsplus: node 4:3 still has 2 user(s)! [ 89.272810][ T4385] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 89.521351][ T2857] plantronics 0003:047F:FFFF.0001: unbalanced delimiter at end of report description [ 89.532907][ T2857] plantronics 0003:047F:FFFF.0001: parse failed [ 89.554947][ T2857] plantronics: probe of 0003:047F:FFFF.0001 failed with error -22 [ 89.568373][ T4417] loop0: detected capacity change from 0 to 512 [ 89.943038][ T4420] loop1: detected capacity change from 0 to 512 [ 90.196182][ T1108] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.302068][ T4417] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.42: inode has both inline data and extents flags [ 90.325366][ T4420] FAT-fs (loop1): Directory bread(block 199916) failed [ 90.335757][ T4417] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.42: couldn't read orphan inode 15 (err -117) [ 90.351391][ T7] usb 4-1: USB disconnect, device number 4 [ 90.419364][ T4417] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.486971][ T4420] FAT-fs (loop1): Directory bread(block 199917) failed [ 90.501835][ T4420] FAT-fs (loop1): Directory bread(block 199918) failed [ 90.510803][ T4420] FAT-fs (loop1): Directory bread(block 199919) failed [ 90.523868][ T4420] FAT-fs (loop1): Directory bread(block 199920) failed [ 90.535121][ T4420] FAT-fs (loop1): Directory bread(block 199921) failed [ 90.548009][ T4420] FAT-fs (loop1): Directory bread(block 199922) failed [ 90.555590][ T4420] FAT-fs (loop1): Directory bread(block 199923) failed [ 90.637281][ T1108] usb 3-1: Using ep0 maxpacket: 16 [ 91.137274][ T4420] FAT-fs (loop1): Directory bread(block 199916) failed [ 91.199395][ T4420] FAT-fs (loop1): Directory bread(block 199917) failed [ 91.497657][ T1108] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.522727][ T1108] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.534823][ T4427] loop3: detected capacity change from 0 to 8 [ 91.541493][ T1108] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 91.639716][ T1108] usb 3-1: config 0 interface 0 has no altsetting 0 [ 91.646988][ T1108] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 91.657789][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.737344][ T1108] usb 3-1: config 0 descriptor?? [ 91.772963][ T4427] SQUASHFS error: Failed to read block 0x6de: -5 [ 91.831128][ T4427] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 92.769690][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.832573][ T4427] SQUASHFS error: Unable to read inode 0x11f [ 92.969796][ T4437] input: syz0 as /devices/virtual/input/input7 [ 93.077391][ T1108] usbhid 3-1:0.0: can't add hid device: -71 [ 93.083699][ T1108] usbhid: probe of 3-1:0.0 failed with error -71 [ 93.089158][ T4441] binder: binder_mmap: 4439 200000000000-200000003000 bad vm_flags failed -1 [ 93.113505][ T1108] usb 3-1: USB disconnect, device number 3 [ 93.407311][ T21] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 93.416718][ T21] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 93.452486][ T21] usb 2-1: Product: syz [ 93.458588][ T21] usb 2-1: Manufacturer: syz [ 93.463436][ T21] usb 2-1: SerialNumber: syz [ 93.479759][ T21] usb 2-1: config 0 descriptor?? [ 93.538869][ T21] ch341 2-1:0.0: ch341-uart converter detected [ 94.527684][ T21] usb 2-1: failed to send control message: -71 [ 94.577495][ T21] ch341-uart: probe of ttyUSB0 failed with error -71 [ 94.667433][ T21] usb 2-1: USB disconnect, device number 3 [ 94.697722][ T4463] loop3: detected capacity change from 0 to 8 [ 94.706166][ T4461] loop4: detected capacity change from 0 to 512 [ 94.732510][ T21] ch341 2-1:0.0: device disconnected [ 94.753231][ T4461] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.803740][ T4463] SQUASHFS error: zlib decompression failed, data probably corrupt [ 94.814081][ T4461] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c098, mo2=0002] [ 94.839273][ T4461] System zones: 0-2, 18-18, 34-35 [ 94.845318][ T4463] SQUASHFS error: Failed to read block 0x4de: -5 [ 94.878907][ T4463] SQUASHFS error: Failed to read block 0x4e2: -5 [ 94.887679][ T4463] SQUASHFS error: Failed to read block 0x9ca: -5 [ 94.894226][ T4463] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 94.894843][ T4461] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000080000,dioread_nolock,stripe=0x0000000000008001,minixdf,debug,,errors=continue. Quota mode: writeback. [ 94.901183][ T4463] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 94.931698][ T4463] SQUASHFS error: Failed to read block 0x535f2: -5 [ 94.944535][ T26] audit: type=1800 audit(1778178605.054:2): pid=4463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.57" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 94.964584][ T4461] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.268462][ T4477] loop0: detected capacity change from 0 to 8 [ 95.426557][ T4477] SQUASHFS error: zlib decompression failed, data probably corrupt [ 95.432682][ T4475] loop1: detected capacity change from 0 to 4096 [ 95.484282][ T4477] SQUASHFS error: Failed to read block 0x4de: -5 [ 95.540050][ T4477] SQUASHFS error: Failed to read block 0x4e2: -5 [ 95.800127][ T4477] SQUASHFS error: Failed to read block 0x9ca: -5 [ 95.811401][ T4477] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 95.822895][ T4477] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 95.865943][ T4477] SQUASHFS error: Failed to read block 0x535f2: -5 [ 96.161993][ T4479] loop3: detected capacity change from 0 to 4096 [ 96.185883][ T26] audit: type=1800 audit(1778178606.294:3): pid=4477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.60" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 96.424461][ T4479] EXT4-fs (loop3): Test dummy encryption mode enabled [ 96.424616][ T4475] EXT4-fs (loop1): Test dummy encryption mode enabled [ 96.576533][ T4479] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 96.585939][ T4479] System zones: 0-5 [ 96.595226][ T4479] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,resuid=0x0000000000000000,test_dummy_encryption,errors=continue,data_err=ignore,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 96.596011][ T4475] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 96.677523][ T4475] System zones: 0-5 [ 96.687363][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.707066][ T4475] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,resuid=0x0000000000000000,test_dummy_encryption,errors=continue,data_err=ignore,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 98.057370][ T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 98.327456][ T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 98.537611][ T7] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 98.546899][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.715979][ T7] usb 3-1: Product: syz [ 98.735275][ T7] usb 3-1: Manufacturer: syz [ 98.746622][ T7] usb 3-1: SerialNumber: syz [ 99.562908][ T7] usb 3-1: config 0 descriptor?? [ 99.597660][ T7] usb 3-1: can't set config #0, error -71 [ 99.607724][ T7] usb 3-1: USB disconnect, device number 4 [ 99.712998][ T4515] loop0: detected capacity change from 0 to 512 [ 99.783580][ T4517] loop1: detected capacity change from 0 to 128 [ 99.822450][ T4518] loop2: detected capacity change from 0 to 256 [ 99.829602][ T4515] EXT4-fs (loop0): Ignoring removed oldalloc option [ 99.847559][ T4515] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 99.978204][ T4515] EXT4-fs (loop0): 1 truncate cleaned up [ 99.983928][ T4515] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 101.373506][ T4518] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 101.493099][ T4515] loop_set_status: loop0 () has still dirty pages (nrpages=64) [ 102.878483][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.147314][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 103.268899][ T7] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 103.303323][ T7] usb 5-1: config 0 has no interface number 0 [ 103.333786][ T7] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.397432][ T7] usb 5-1: config 0 interface 85 has no altsetting 0 [ 103.557519][ T7] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 103.566818][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.602509][ T4544] loop2: detected capacity change from 0 to 164 [ 103.647454][ T7] usb 5-1: Product: syz [ 103.651985][ T7] usb 5-1: Manufacturer: syz [ 103.657056][ T7] usb 5-1: SerialNumber: syz [ 103.706362][ T7] usb 5-1: config 0 descriptor?? [ 104.039621][ T4548] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 104.074285][ T4547] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 104.557383][ T7] usb 5-1: can't set config #0, error -71 [ 104.617592][ T7] usb 5-1: USB disconnect, device number 2 [ 105.787424][ T3577] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 107.027776][ T3577] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 107.134750][ T3577] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.150018][ T3577] usb 3-1: config 0 descriptor?? [ 107.190076][ T3577] asix: probe of 3-1:0.0 failed with error -22 [ 107.970059][ T4578] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.079448][ T4230] usb 3-1: USB disconnect, device number 5 [ 108.350559][ T4586] loop3: detected capacity change from 0 to 8 [ 108.486819][ T4586] SQUASHFS error: lzo decompression failed, data probably corrupt [ 108.497424][ T4586] SQUASHFS error: Failed to read block 0x0: -5 [ 108.783977][ T4595] loop0: detected capacity change from 0 to 512 [ 109.375918][ T4586] SQUASHFS error: Unable to read data cache entry [0] [ 109.402218][ T4586] SQUASHFS error: Unable to read page, block 0, size ff [ 109.462538][ T4586] SQUASHFS error: Unable to read data cache entry [0] [ 109.505379][ T4586] SQUASHFS error: Unable to read page, block 0, size ff [ 109.617935][ T4601] netlink: 476 bytes leftover after parsing attributes in process `syz.2.93'. [ 109.704915][ T4586] SQUASHFS error: lzo decompression failed, data probably corrupt [ 109.729763][ T4604] usb usb8: usbfs: process 4604 (syz.2.93) did not claim interface 0 before use [ 109.748145][ T4586] SQUASHFS error: Failed to read block 0x0: -5 [ 109.759756][ T4603] loop0: detected capacity change from 0 to 512 [ 109.793629][ T4586] SQUASHFS error: lzo decompression failed, data probably corrupt [ 109.836344][ T4603] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 33619980: comm syz.0.94: invalid block [ 109.838685][ T4586] SQUASHFS error: Failed to read block 0x0: -5 [ 109.867497][ T26] audit: type=1800 audit(1778178619.984:4): pid=4586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.92" name="file2" dev="loop3" ino=3 res=0 errno=0 [ 110.008586][ T4586] syz.3.92 (4586) used greatest stack depth: 19568 bytes left [ 110.028648][ T4603] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.94: Invalid block bitmap block 0 in block_group 0 [ 110.120558][ T4603] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 110.145930][ T4603] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.94: attempt to clear invalid blocks 983261 len 1 [ 110.188834][ T4616] loop3: detected capacity change from 0 to 2048 [ 110.218139][ T4613] capability: warning: `syz.1.89' uses deprecated v2 capabilities in a way that may be insecure [ 110.249805][ T4603] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.94: invalid indirect mapped block 2683928664 (level 0) [ 110.285462][ T4603] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.94: Invalid inode table block 0 in block_group 0 [ 110.319818][ T4616] ======================================================= [ 110.319818][ T4616] WARNING: The mand mount option has been deprecated and [ 110.319818][ T4616] and is ignored by this kernel. Remove the mand [ 110.319818][ T4616] option from the mount to silence this warning. [ 110.319818][ T4616] ======================================================= [ 111.167804][ T4603] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 111.197566][ T4603] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 111.199111][ T4616] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.229164][ T4603] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.94: Invalid inode table block 0 in block_group 0 [ 111.321286][ T4603] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 112.127419][ T4603] EXT4-fs error (device loop0): ext4_truncate:4286: inode #13: comm syz.0.94: mark_inode_dirty error [ 112.181886][ T4603] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 112.329201][ T4603] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.94: Invalid inode table block 0 in block_group 0 [ 112.403793][ T4603] EXT4-fs (loop0): 1 truncate cleaned up [ 112.419251][ T4603] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,noblock_validity,,errors=continue. Quota mode: writeback. [ 112.474505][ T4636] loop1: detected capacity change from 0 to 512 [ 112.559747][ T4636] EXT4-fs (loop1): 1 truncate cleaned up [ 112.727400][ T4636] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 112.820687][ T4633] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.105: Invalid inode table block 1435707004 in block_group 0 [ 112.853815][ T4633] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 112.966562][ T4646] loop0: detected capacity change from 0 to 512 [ 112.978778][ T4633] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #15: comm syz.1.105: mark_inode_dirty error [ 113.031221][ T4633] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.105: Invalid inode table block 1435707004 in block_group 0 [ 113.054728][ T4650] loop3: detected capacity change from 0 to 512 [ 113.067740][ T4636] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.105: Invalid inode table block 1435707004 in block_group 0 [ 113.119465][ T4646] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,sysvgroups,grpjquota=,. Quota mode: writeback. [ 113.214016][ T4650] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 113.239519][ T4650] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.252083][ T4646] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.307990][ T4195] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1435707004 in block_group 0 [ 114.123110][ T4646] EXT4-fs error (device loop0): ext4_ext_remove_space:2929: inode #15: comm syz.0.108: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 114.151316][ T4195] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 114.179768][ T4646] EXT4-fs (loop0): Remounting filesystem read-only [ 114.182993][ T4195] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #15: comm syz-executor: mark_inode_dirty error [ 114.217618][ T4646] EXT4-fs error (device loop0): ext4_evict_inode:295: comm syz.0.108: couldn't truncate inode 15 (err -117) [ 114.244831][ T4510] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm kworker/u4:11: Invalid inode table block 1435707004 in block_group 0 [ 114.309935][ T4646] EXT4-fs (loop0): Remounting filesystem read-only [ 115.552512][ T4678] loop3: detected capacity change from 0 to 256 [ 115.646548][ T4678] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.788515][ T4680] Zero length message leads to an empty skb [ 116.711395][ T4685] loop4: detected capacity change from 0 to 2048 [ 116.932492][ T4685] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 118.029101][ T4685] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.995942][ T4231] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 119.447644][ T4231] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.497515][ T4231] usb 2-1: not running at top speed; connect to a high speed hub [ 119.583277][ T4231] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 119.615090][ T4231] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 119.797586][ T4231] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 119.817372][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.846554][ T4231] usb 2-1: Product: syz [ 120.023946][ T4231] usb 2-1: Manufacturer: syz [ 120.029668][ T4231] usb 2-1: SerialNumber: syz [ 120.067394][ T4231] usb 2-1: can't set config #1, error -71 [ 120.077448][ T4231] usb 2-1: USB disconnect, device number 4 [ 122.352080][ T4730] loop1: detected capacity change from 0 to 512 [ 123.027457][ T4737] serio: Serial port ttyS3 [ 123.306002][ T4730] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.520074][ T4730] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.100654][ T4762] loop1: detected capacity change from 0 to 8192 [ 126.198122][ T4374] loop1: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 126.646649][ T4768] loop4: detected capacity change from 0 to 512 [ 126.838398][ T4768] EXT4-fs (loop4): Ignoring removed bh option [ 126.868728][ T4768] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 126.944784][ T4768] EXT4-fs (loop4): 1 truncate cleaned up [ 126.957387][ T4768] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000cdc,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 127.719442][ T4782] loop3: detected capacity change from 0 to 128 [ 127.821914][ T4778] xt_cgroup: path and classid specified [ 127.978558][ T4782] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.061380][ T4782] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.388970][ T4777] loop0: detected capacity change from 0 to 4096 [ 128.499928][ T4183] udevd[4183]: incorrect ext4 checksum on /dev/loop3 [ 128.509456][ T4777] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,delalloc,nombcache,usrjquota=,dioread_nolock,data_err=ignore,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 130.022209][ T4795] loop0: detected capacity change from 0 to 256 [ 130.161932][ T4795] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 130.457311][ T4230] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 131.997270][ T4230] usb 4-1: Using ep0 maxpacket: 32 [ 132.794472][ T4762] loop1: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 132.817644][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.804912][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.812504][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.822565][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.878251][ T4230] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.098234][ T4826] loop3: detected capacity change from 0 to 8 [ 134.691362][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.815679][ T4829] loop4: detected capacity change from 0 to 1024 [ 134.875393][ T4230] usb 4-1: config 0 descriptor?? [ 135.014472][ T4826] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 135.014784][ T4230] usb 4-1: can't set config #0, error -71 [ 135.040939][ T4829] EXT4-fs (loop4): Ignoring removed orlov option [ 135.096106][ T4829] Quota error (device loop4): find_tree_dqentry: Getting block too big (64 >= 6) [ 135.137844][ T4230] usb 4-1: USB disconnect, device number 5 [ 135.158277][ T4829] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 135.174150][ T4829] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.159: Failed to acquire dquot type 0 [ 135.223740][ T4829] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 135.313878][ T4829] EXT4-fs (loop4): 1 truncate cleaned up [ 135.346005][ T4829] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,,errors=continue. Quota mode: writeback. [ 135.414658][ T4829] Quota error (device loop4): find_tree_dqentry: Getting block too big (64 >= 6) [ 135.465004][ T4829] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 135.503510][ T4829] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.159: Failed to acquire dquot type 0 [ 138.908795][ T4199] ================================================================== [ 138.917626][ T4199] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1324/0x3c90 [ 138.925917][ T4199] Read of size 1 at addr ffff8880254b3c0a by task kworker/u5:4/4199 [ 138.934247][ T4199] [ 138.936694][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 138.944964][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 138.955088][ T4199] Workqueue: hci4 hci_rx_work [ 138.960097][ T4199] Call Trace: [ 138.963595][ T4199] [ 138.966748][ T4199] dump_stack_lvl+0x188/0x250 [ 138.971468][ T4199] ? show_regs_print_info+0x20/0x20 [ 138.976797][ T4199] ? load_image+0x400/0x400 [ 138.981424][ T4199] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 138.987017][ T4199] ? mutex_lock_io_nested+0x60/0x60 [ 138.992462][ T4199] print_address_description+0x60/0x2d0 [ 138.998486][ T4199] ? hci_le_meta_evt+0x1324/0x3c90 [ 139.003807][ T4199] kasan_report+0xdf/0x130 [ 139.008376][ T4199] ? hci_le_meta_evt+0x1324/0x3c90 [ 139.013525][ T4199] hci_le_meta_evt+0x1324/0x3c90 [ 139.018521][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 139.024802][ T4199] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 139.030592][ T4199] ? mark_lock+0x94/0x320 [ 139.034521][ T4867] loop3: detected capacity change from 0 to 256 [ 139.035196][ T4199] ? mutex_unlock+0x10/0x10 [ 139.046188][ T4199] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 139.052304][ T4199] ? lock_chain_count+0x20/0x20 [ 139.057243][ T4199] ? __rwlock_init+0x140/0x140 [ 139.062231][ T4199] hci_event_packet+0xe48/0x1370 [ 139.067394][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 139.072649][ T4199] ? rcu_lock_release+0x20/0x20 [ 139.077743][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 139.083157][ T4199] hci_rx_work+0x255/0xa10 [ 139.087726][ T4199] process_one_work+0x85f/0x1010 [ 139.092812][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 139.098670][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 139.104005][ T4199] ? _raw_spin_lock_irq+0xb7/0xf0 [ 139.109174][ T4199] ? _raw_spin_lock_irqsave+0x100/0x100 [ 139.114865][ T4199] ? wq_worker_running+0x97/0x170 [ 139.120117][ T4199] worker_thread+0xaa6/0x1290 [ 139.125135][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 139.130476][ T4199] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 139.136681][ T4199] kthread+0x436/0x520 [ 139.140865][ T4199] ? rcu_lock_release+0x20/0x20 [ 139.145832][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 139.150680][ T4199] ret_from_fork+0x1f/0x30 [ 139.155348][ T4199] [ 139.158549][ T4199] [ 139.160905][ T4199] Allocated by task 4864: [ 139.165333][ T4199] __kasan_kmalloc+0xb5/0xf0 [ 139.170129][ T4199] __alloc_skb+0x22c/0x750 [ 139.174663][ T4199] vhci_write+0xbc/0x450 [ 139.179040][ T4199] vfs_write+0x745/0xd60 [ 139.183559][ T4199] ksys_write+0x152/0x260 [ 139.188193][ T4199] do_syscall_64+0x4c/0xa0 [ 139.192756][ T4199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.198835][ T4199] [ 139.201182][ T4199] The buggy address belongs to the object at ffff8880254b3800 [ 139.201182][ T4199] which belongs to the cache kmalloc-1k of size 1024 [ 139.215351][ T4199] The buggy address is located 10 bytes to the right of [ 139.215351][ T4199] 1024-byte region [ffff8880254b3800, ffff8880254b3c00) [ 139.229329][ T4199] The buggy address belongs to the page: [ 139.235058][ T4199] page:ffffea0000952c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x254b0 [ 139.245561][ T4199] head:ffffea0000952c00 order:3 compound_mapcount:0 compound_pincount:0 [ 139.253974][ T4199] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 139.262099][ T4199] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0 [ 139.271413][ T4199] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 139.280176][ T4199] page dumped because: kasan: bad access detected [ 139.286783][ T4199] page_owner tracks the page as allocated [ 139.292501][ T4199] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4259, ts 72898991949, free_ts 70978257836 [ 139.313057][ T4199] get_page_from_freelist+0x1bbd/0x1ca0 [ 139.318618][ T4199] __alloc_pages+0x1ee/0x480 [ 139.323306][ T4199] new_slab+0xc0/0x4b0 [ 139.327475][ T4199] ___slab_alloc+0x80a/0xdd0 [ 139.332067][ T4199] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 139.337893][ T4199] __alloc_skb+0x22c/0x750 [ 139.342334][ T4199] inet6_rt_notify+0xdd/0x290 [ 139.347476][ T4199] fib6_add+0x1d4d/0x3d40 [ 139.352448][ T4199] ip6_ins_rt+0xd3/0x130 [ 139.356906][ T4199] __ipv6_ifa_notify+0x4e4/0xe60 [ 139.361852][ T4199] addrconf_dad_completed+0x184/0xc80 [ 139.367502][ T4199] addrconf_dad_work+0xc8c/0x1540 [ 139.372737][ T4199] process_one_work+0x85f/0x1010 [ 139.377880][ T4199] worker_thread+0xaa6/0x1290 [ 139.382666][ T4199] kthread+0x436/0x520 [ 139.386861][ T4199] ret_from_fork+0x1f/0x30 [ 139.391465][ T4199] page last free stack trace: [ 139.396229][ T4199] free_unref_page_prepare+0x637/0x6c0 [ 139.401786][ T4199] free_unref_page+0x8f/0x2a0 [ 139.406469][ T4199] __unfreeze_partials+0x1a5/0x200 [ 139.411701][ T4199] put_cpu_partial+0x12d/0x190 [ 139.416474][ T4199] qlist_free_all+0x35/0x90 [ 139.420980][ T4199] kasan_quarantine_reduce+0x150/0x160 [ 139.427021][ T4199] __kasan_slab_alloc+0x2f/0xd0 [ 139.433572][ T4199] slab_post_alloc_hook+0x4c/0x380 [ 139.439439][ T4199] kmem_cache_alloc+0x100/0x290 [ 139.444514][ T4199] sock_alloc_inode+0x17/0xb0 [ 139.449470][ T4199] new_inode_pseudo+0x5f/0x210 [ 139.454343][ T4199] __sock_create+0x129/0x900 [ 139.459355][ T4199] __sys_socket+0xe2/0x170 [ 139.463871][ T4199] __x64_sys_socket+0x76/0x80 [ 139.468557][ T4199] do_syscall_64+0x4c/0xa0 [ 139.473343][ T4199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.479508][ T4199] [ 139.481842][ T4199] Memory state around the buggy address: [ 139.487915][ T4199] ffff8880254b3b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 139.496325][ T4199] ffff8880254b3b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 139.504744][ T4199] >ffff8880254b3c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 139.513954][ T4199] ^ [ 139.518548][ T4199] ffff8880254b3c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 139.526715][ T4199] ffff8880254b3d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 139.534951][ T4199] ================================================================== [ 139.543490][ T4199] Disabling lock debugging due to kernel taint [ 139.556559][ T4199] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 139.563969][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:4 Tainted: G B syzkaller #0 [ 139.573595][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.583775][ T4199] Workqueue: hci4 hci_rx_work [ 139.588497][ T4199] Call Trace: [ 139.591994][ T4199] [ 139.594953][ T4199] dump_stack_lvl+0x188/0x250 [ 139.599973][ T4199] ? show_regs_print_info+0x20/0x20 [ 139.605570][ T4199] ? load_image+0x400/0x400 [ 139.610199][ T4199] panic+0x2e5/0x810 [ 139.614143][ T4199] ? bpf_jit_dump+0xd0/0xd0 [ 139.618978][ T4199] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 139.625563][ T4199] ? _raw_spin_unlock+0x40/0x40 [ 139.630807][ T4199] ? hci_le_meta_evt+0x1324/0x3c90 [ 139.636039][ T4199] check_panic_on_warn+0x80/0xa0 [ 139.641193][ T4199] ? hci_le_meta_evt+0x1324/0x3c90 [ 139.646720][ T4199] end_report+0x6d/0xf0 [ 139.651444][ T4199] kasan_report+0x102/0x130 [ 139.656383][ T4199] ? hci_le_meta_evt+0x1324/0x3c90 [ 139.661637][ T4199] hci_le_meta_evt+0x1324/0x3c90 [ 139.667161][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 139.673547][ T4199] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 139.679410][ T4199] ? mark_lock+0x94/0x320 [ 139.683950][ T4199] ? mutex_unlock+0x10/0x10 [ 139.688488][ T4199] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 139.694511][ T4199] ? lock_chain_count+0x20/0x20 [ 139.699677][ T4199] ? __rwlock_init+0x140/0x140 [ 139.704482][ T4199] hci_event_packet+0xe48/0x1370 [ 139.709555][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 139.714812][ T4199] ? rcu_lock_release+0x20/0x20 [ 139.719780][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 139.725254][ T4199] hci_rx_work+0x255/0xa10 [ 139.729966][ T4199] process_one_work+0x85f/0x1010 [ 139.735043][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 139.740878][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 139.746542][ T4199] ? _raw_spin_lock_irq+0xb7/0xf0 [ 139.751872][ T4199] ? _raw_spin_lock_irqsave+0x100/0x100 [ 139.757641][ T4199] ? wq_worker_running+0x97/0x170 [ 139.762985][ T4199] worker_thread+0xaa6/0x1290 [ 139.767892][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 139.773285][ T4199] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 139.779320][ T4199] kthread+0x436/0x520 [ 139.783609][ T4199] ? rcu_lock_release+0x20/0x20 [ 139.788667][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 139.793548][ T4199] ret_from_fork+0x1f/0x30 [ 139.798108][ T4199] [ 139.801699][ T4199] Kernel Offset: disabled [ 139.806141][ T4199] Rebooting in 86400 seconds..