last executing test programs: 2m33.432750473s ago: executing program 2 (id=3): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB='mode=00000000000000000000177,mode=00000000000000000000005,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,gid=forget,mode=00000000000000000002000,lastblock=00000000000000001024,shortad,euid>', @ANYBLOB=',fsmagic=0x0000000000000002,smackfsf^oor=smackfstrans-ute,fowner>', @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYBLOB="10af9b9320e74f2badb1d4f1bf657d6e613c701d8c5846d8803fc0d4f31e0c79e44ce9044721ca748ec42f07aea4364f36ff75c213c05cfcae7d9a22289f08efffb486ace97445aaf1541ba1fc8a8f20a31dfd675975db1599d3b57a2c97d8598d7729eddf33ea3504f1779e77a3ac0655cd593e710b8f5b076c38a60ee40c06bb60956c6bd72b80348f70ccb438f549f555d0567cbbf840569f1102d47be18af8b21f48c88dcc9ad10e24f851a3642197ab2acbb330d969d01a7bc3977faf2c369f47a693654742ab"], 0xa, 0xc35, &(0x7f0000001000)="$eJzs3UFsHNd9B+D/Gy3FldJWTJwoThoXm7RIZcZyZUkxFatwVzXNNoAsE6GYWwCuSEpdmCIJkmpkIy2YXnroIUBR9JATgdYokKKB0RRBLwWY1gWSiw9FTj0RLWwERQ8sYCCngMXMvhWXFGkzoihR1vfZ5G935r2Z92bWMzTBNy8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIjff/nSmefSw24FAPAgXRn72pmz7v8A8Fi56v//AQAAAAAAAAAAAADgsEtRxBORYv7Kepqo3nfUL7f7bt0eHx7ZudqxVNU8UpUvv+rPnT13/svPD13o5uX27AfUv98+G6+OXb3UeGnu5vzC9OLi9FRjfLY9OTc1vect7Lf+doPVAWjcfO3W1PXri42zz57bsvr2wHv9Hzs5cHHo6dNPdcuOD4+MjG0WqfeWr91zQzp2G+FxNIo4HSme+f7PUisiitj/sag/2HO/3bGqE4NVJ8aHR6qOzLRbs0vlytHugSgiGj2Vmt1jtPO5iFrfA+3D7poRy2XzywYPlt0bm28ttK7NTDdGWwtL7aX23Oxo6rS27E8jiriQIlYiYq3/7s31RRG1SPHdE+vpWkQc6R6HL1UDg3dvR3GAfdyDsp2NvoiV4hE4Z4dYfxTxSqR4/+1TMZmvM9W15osRr5T5w4g3y3wxIpUfjPMR7+7wOeLRVIsi/qI8/xfX01R1PeheVy5/vfHV2etzPWW715Vf8v5w15XiId0fjm3LB+OQX5vqUUSruuKvp3v/YQcAAAAAAAAAAAAAAACA++1YFPGZSPHyf/xxNa44qnHpJy4O/cHAr/aOGX/yQ7ZTln02IpaLvY3JPZoHBo6m0ZQe8ljix1k9iviTPP7v2w+7MQAAAAAAAAAAAAAAAAAAAI+1In4aKV5451Raid45xduzNxpXW9dmOrPCduf+7c6ZvrGxsdFInWzmnMi5nHMl52rOtZxR5Po5mzknci7nXMm5mnMtZxzJ9XM2c07kXM65knM151rOqOX6OZs5J3Iu51zJuZpzLWcckrl7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Sooo4heR4jvfXE+RIqIZMRGdXO1/2K0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEr9qYgfRIrGHzbvLKtFRKr+7ThVfjsfzaNlfiKaQ2W+GM1LOVtV1prffgjtZ3/6UhE/iRT99bfunPB8/vs67+58DOLNb22++2ytk0e6Kwfe6//YyRMXh0Z+48ndXqedGjB4uT1763ZjfHhkZKxncS3v/RM9ywbyfov703UiYvH1N15rzcxML9z7i/IjsI/qj9CLVHtceupF9SJqh6IZD6fvPAbK+/+7keJ33vnP7g2/c/+vx6903t25w8fP/3Tz/v/C9g3t8f5f214v3//Le/pO9/8nepa9kH8a6atF1JduzvedjKgvvv7G6fbN1o3pG9Oz58+c+crQ0FfOnek7GlG/3p6Z7nl1Xw4XAAAAAAAAAAAAAAAAwIOTivi9SNH6yXpqRMTtarzWwMWhp08/dSSOVOOttozbfnXs6qXGS3M35xemFxenpxrjs+3Juanpve6uXg33Gh8eOZDOfKhjB9z+Y/WX5uZfX2jf+KOlHdcfr1+6tri00JrceXUciyKi2btksGrw+PBI1eiZdmu2qjq642D6X15fKuK/IsXk+Ub6fF6Wx/9vH+G/Zfz/8vYNHdD4/4/3LCv3mVIRP48Uv/2XT8bnq3Yej7uOWS73t5Fi8MLncrk4WpbrtqHzXIHOyMCy7P9Fin/8xday3fGQT2yWfW7PB/YRUZ7/E5HiB3/+vfhCXrb1+Q87n//j2zd0QOf/kz3Ljm95XsG+u04+/6cjxYtPvBW/mZd90PM/us/eOJUL33k+xwGd/0/1LBvI+/2t+9N1AAAAAAAAAACAR1pfKuLvIsWPRmrp+bxsL3//N7V9Qwf091+f7lk2tdf5imJ/059ExL/s+8ACAAAAwCHQl4r4aaS4sfTWnTHUW8d/94z//N3N8Z/Dadva6vd8v1Y9N+B+/v6v10De78T+uw0AAAAAAAAAAAAAAAAAAACHSkpFPJ/nU5+oxvNP7Tqf+mqkePl/nsnl0smyXHce+IHqe/3K3OzpSzMzc5Otpda1menG2Hxrcrqs+8lIsf43n8t1i2p+9e5885053jfnYl+IFCN/3y3bmYv9C9Xk+N35wDtzsZdlPx4p/vsftpbtzmP9qc2yZ8uyfx0pvvHPO5c9uVn2XFn2e5Hix99odMseL8t2n4/66c2yz07OFQd0ZgAAAAAAAAAAAAAAAAAAAHic9KUi/ixS/O/NlTtj+fP8/309bytvfqtnvv9tblfz/A9U8//v9vpe5v+vniuwvNteAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgoylFEW9Eivkr62m1v3zfUb/cnr11e3x4ZOdqx1JV80hVvvyqP3f23PkvPz90oZsfXP9++0y8Onb1UuOluZvzC9OLi9NTjfHZ9uTc1PSet7Df+tsNVgegcfO1W1PXry82zj57bsvq2wPv9X/s5MDFoadPP9UtOz48MjLWU6bWd897v0vaZfnRKOKvIsUz3/9Z+lF/RBH7PxYf8tk5aMeqTgxWnRgfHqk6MtNuzS6VK0e7B6KIaPRUanaP0QM4F/vSjFgum182eLDs3th8a6F1bWa6MdpaWGovtedmR1OntWV/GlHEhRSxEhFr/Xdvri+KeC1SfPfEevrX/ogj3ePwpStjXztzdvd2FAfYxz0o29noi1gpHoFzdoj1RxH/FCnef/tU/Ft/RC06X/HFiFfK/GHEm9E536n8YJyPeHeHzxGPploUR8t8/+J6eru/vB50ryuXv9746uz1uZ6y3evKI39/eJAO+bWpHkX8uLrir6d/9981AAAAAAAAAAAAAAAAwCFSxK9HihfeOZWq8cF3xhS3Z280rrauzXSG9XXH/nXHTG9sbGw0UiebOSdyLudcybmacy1nFLl+zmaZ9Y2Nifx+OedKztWcaznjSK6fs5lzIudyzpWcqznXckYt18/ZzDmRcznnSs7VnGs545CM3QMAAAAAAAAAAAAAAAAAAD5aiuqfFN/55nra6O/MLz0RnVw1H+hH3v8HAAD///8K+As=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 2m31.556178618s ago: executing program 2 (id=12): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000340), 0x1, 0x564, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvjH82SesEeoAKSIBCQFF2400bVb20XECoqoSoOCAOqbE3lsluNmTXpTaRcP8GkEDiBH8CByQOSD1xgBNHJA6AKAekAhEoRuph0MyO7Y29Jou93iXez0eazI83M9/3djPz3r5dzwtgYl2KiK2ImI2INyNiodyelFO82p3y/R4+uL+8/eD+chJZ9sbfkyI93xY9x+TOluecj4ivfinim8nBuO2NzdtLjUb9Xrle7TTvVtsbm1fXmkur9dX6nVrtxuKNay9df7E2tLJebP7s/S+uvfa1X/7i4+/9duvz382zda5M6y3HMHWLPrMbJzcdEa+dRLAxmCrns2POB0eTRsSHIuJTxfW/EFPF/04A4DTLsoXIFnrXAYDTLi36wJK0EhFpWjYCKt0+vGfjTNpotTtXbrXW76x0+8rOx0x6a61Rv3Zh7vffLnaeSfL1xSKtSC/Wa/vWr0fEhYj4wdxTxXpludVYGU+TBwAm3tne+j8i/jWXppXKQIf2+VYPAHhizI87AwDAyKn/AWDyqP8BYPIMUP+XX/ZvnXheAIDR8PkfACaP+h8AJo/6HwAmyldefz2fsu3y+dcrb22s3269dXWl3r5daa4vV5Zb9+5WVlut1eKZPc3Hna/Rat1dfCHW36526u1Otb2xebPZWr/TuVk81/tmfWYkpQIA/psLF9/9XRIRWy8/VUzRM5aDuhpOt3SIewFPlqnjHKyBAE80o33B5BqoCi8aCb8+8bwA49H3Yd7zfRcf9aP/IYjfGcH/lcsfHbz/3xjPcLrs69n/IBtXRoCRO1r//ytDzwcwekfu///jcPMBjF6WJfvH/J/dTQIATqVj/IQv+96wGiHAWD1uMO+hfP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp8y5iPhWJGmlGAs8zf9NK5WIpyPifMwkt9Ya9WsR8UxcjIiZuXx9cdyZBgCOKf1rUo7/dXnh+XP7U2eTf88V84j4zo/f+OHbS53OvcV8+z92t8/tDB9W2zvuGOMKAgCD+/MgOxX1d62c93yQf/jg/vLOdIJ5POD9L+wOPrq8/eB+MXVTpiPLsixivmhLnPlnEtPlMfMR8VxETA0h/tY7EfGRfuVPir6R8+XIp73xo4z99Ejjp4/ET4u07jx/+T48hLzApHk3v/+82u/6S+NSMe9//c8Xd6jjK+5/8xE7977tnvjTZaSpPvHza/7SoDFe+NWXD2zMFrpp70Q8N90vfrIbPzkk/vMDxv/Dxz7x/VcOSct+EnE5+sfvjVXtNO9W2xubV9eaS6v11fqdWu3G4o1rL11/sVYt+qirOz3VB/3t5SvPHJa3vPxnDonffefP7iv/7O6xnxmw/D/94M1vfHJvdW5//M99uv/7/2wRsf/rn9eJnx0w/tKZnx86fHcef+WQ8j/u/b8yYPz3/rK5MuCuAMAItDc2by81GvV7x1rIP4UO4zwHFvIsDrbzTnPxeEH/FMXC3suSRBJHPuFM/6S8MTbQ4Sf1qp74wvRuW3G4Z/56fsYRFycdeimOshDny4WHowo6vnsSMBp7F31E/GbcuQEAAAAAAAAAAAAAAPoZxd8wjbuMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF7/CQAA///bV8Ru") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x84) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x18e) renameat2(r0, &(0x7f0000000240)='./file0\x00', r0, &(0x7f00000001c0)='./bus\x00', 0x2) 2m28.874666272s ago: executing program 2 (id=19): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r3) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r4, 0x6, 0x1f, 0x0, &(0x7f0000000340)) 2m28.131374216s ago: executing program 32 (id=19): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r3) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r4, 0x6, 0x1f, 0x0, &(0x7f0000000340)) 13.893455589s ago: executing program 5 (id=538): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc15, &(0x7f0000001940)="$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") setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) open(&(0x7f00000000c0)='.\x00', 0x591002, 0x8bff) 10.43358225s ago: executing program 5 (id=546): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0xfffffffffffffd37, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) 10.387262985s ago: executing program 0 (id=548): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8000, 0x20000000019}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) 9.000910571s ago: executing program 5 (id=550): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect(0x0, 0xf5, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a29731524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18) ioctl$TIOCGSID(r2, 0x5429, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023", @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 8.940521358s ago: executing program 1 (id=551): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x403, 0x70bd29, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x4000) socket$inet_icmp(0x2, 0x2, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 8.695168672s ago: executing program 1 (id=553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) 8.593366782s ago: executing program 1 (id=555): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x827) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r0, &(0x7f0000000840)=[{&(0x7f0000000180)=""/185, 0xb9}], 0x1, 0x353, 0x8, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) semop(0x0, &(0x7f0000002480), 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 8.419594079s ago: executing program 0 (id=557): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 8.394701882s ago: executing program 3 (id=558): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0xfffffffffffffd37, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) 8.30723389s ago: executing program 0 (id=561): write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) unshare(0x400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r1, 0x0) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) 8.293431172s ago: executing program 3 (id=562): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x15, &(0x7f0000000040)={0x15, 0x8001, 0x9}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000480)="b1", 0x1) sendmmsg$alg(r4, &(0x7f0000001580), 0x49249249249256f, 0x40484) r5 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmat(r5, &(0x7f0000d6f000/0x3000)=nil, 0x6000) 6.804735028s ago: executing program 0 (id=563): unshare(0x20000400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000dc0)={'syz1\x00', {0x0, 0x5, 0x3, 0x4}, 0xc, [0x9, 0xb, 0x9, 0x9, 0x4d29a40c, 0x7fffffff, 0x2, 0x4, 0x2, 0x1ff, 0x6, 0x1000, 0x8, 0x4, 0x9, 0xa, 0x3, 0x9, 0x6, 0x7fff, 0x6, 0x2, 0x7, 0x1ff8, 0x32c, 0x2, 0x2, 0x1, 0x40, 0x4, 0x4, 0x800, 0xfff, 0x3, 0x6, 0x101, 0x100, 0x6, 0x0, 0xdf000000, 0x0, 0x5, 0xfff, 0xfffffffa, 0x1, 0x1000, 0x8, 0x6, 0x800, 0x8, 0x5, 0x3ff, 0x0, 0x0, 0x9, 0x8, 0x8, 0xffff, 0x5, 0x7f, 0x0, 0xe, 0x9, 0x70d2], [0x9, 0x101, 0x52, 0x40, 0x1, 0x400, 0x5, 0xd, 0x7ae1c3b9, 0x9, 0x4, 0x766a, 0x6, 0x5, 0x3, 0x6, 0x5cb, 0x8, 0x6, 0x7ff, 0x816e, 0x140, 0x10, 0x5, 0xc9, 0xda, 0x5, 0x7fffffff, 0x2, 0x91, 0x2, 0x6, 0x2, 0xe, 0x9, 0xfff, 0xfffffffd, 0xfffff977, 0x0, 0x800, 0x6fc, 0x1, 0x7fffffff, 0x0, 0x6, 0xdb7, 0xfff, 0x2, 0x3ff, 0x1, 0x9, 0x10, 0x40, 0x4eadf750, 0x643e, 0x6, 0xfffeffff, 0x8, 0x82f, 0x8, 0x1f, 0xfff, 0x10001], [0x9, 0x8, 0x100, 0x6, 0x9, 0x6, 0x8, 0x9, 0x2, 0x0, 0xa, 0x4, 0x0, 0x80000001, 0x4, 0x200, 0x7, 0xa139, 0x0, 0xae1, 0x70, 0x800, 0xae9, 0x5, 0x9, 0x6, 0x2, 0x3, 0x8000000, 0x4, 0x2, 0x6, 0x2, 0xffffffff, 0x40, 0x4, 0x6, 0x401, 0x7, 0x0, 0x6, 0xc0000000, 0x7, 0x3, 0x7fffffff, 0x0, 0x0, 0xe, 0xd52, 0x8, 0x79d, 0x0, 0x3, 0x0, 0x80, 0x6, 0xd, 0x42, 0x0, 0x8, 0x80000000, 0x6, 0x2, 0x1], [0x5, 0xfffffff1, 0xdd, 0x83a, 0x401, 0x4, 0x2, 0x1, 0x81, 0x390, 0x7, 0x6, 0x0, 0x3, 0x7fffffff, 0xf, 0x8, 0x64, 0x1, 0x2, 0x401, 0x3, 0xa4e9, 0x7, 0x7, 0x8, 0x6, 0x5, 0x8, 0x5, 0x5, 0x5, 0x579a, 0x1, 0xfffffff7, 0x4, 0x60c2, 0x6, 0x4, 0x6, 0xb, 0x8, 0x8117, 0x9, 0x6, 0x1, 0x3, 0x5, 0x101, 0x5, 0x0, 0x101, 0x53e, 0x6, 0x9, 0x2, 0x1, 0x7, 0x1, 0x9, 0x5, 0x401, 0xe939, 0x3f5a]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 5.420880245s ago: executing program 4 (id=565): sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.231337994s ago: executing program 5 (id=566): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0600000000000000010001c0"]) 5.038723922s ago: executing program 4 (id=567): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xce7c1000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x1e84c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x28, r0, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xcd}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000000)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 4.951648611s ago: executing program 1 (id=568): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140), 0x4) 4.892412617s ago: executing program 3 (id=569): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000ac0), 0x1, 0x44a, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0xa0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000600)={0x23e3, 0x0, 0xd, 0xfffffffe}) 4.846543372s ago: executing program 3 (id=570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x6, 0x1, ',\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) 4.716804654s ago: executing program 5 (id=571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r1, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac02]}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) 4.575497638s ago: executing program 1 (id=572): socket$netlink(0x10, 0x3, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xce7c1000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES8], 0xe40) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x7e2, 0x1000, 0x8}) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x84402, 0x0) 3.066550687s ago: executing program 1 (id=573): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYBLOB="0b2ad3189da68c3192276cf0e30a4fd1666af469027cb27233386e489063d8fcb227f28c575717b6ecefcaa2fe1b2ae631efa1bf563cc1e4608f2da1c7ed5111d2fd74583d3d14c81bc45998cc8fe457672d24a7e90d071933761fb4b6e3196a4848667de04fe8c132bb0f081e8a94ef02508bbac767b3320ea20f5a2c85f69442c7d69cd53ee8dbaa32b599d6eb97629f57836e50740ba1"], 0x43, 0xc26, &(0x7f0000001f80)="$eJzs3V1sXGl5B/DnnWPHYy8FLwtZaFk6EhVEponyRWKUCjmscYsUsgjHqHuFxx8Jo3XGke2ULG2R24pW6g3q3lS9qazSVStx0atuLzFlW4GqShXigl5UslRY7UUvfIFUqdVidGbesceOs/bmy3b291vN/mfOPGf8fkzOHEt+5wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEPHZz10+fSYddCsAgMfp6viXTp/z+Q8A7yrX/P4PAAAAAAAAAAAAAACHXYoijkeKgdfW02TrcVv1SqN5+87E6Njuu/WnSFGJolVf3qpnzp47/6kLF4c7+fb7P2wfjhfGr12uPT9/89bC7OLi7ExtotmYnp+Z3fcrPOj+Ow21BqB286XbM9evL9bOnjq37ek7g2/0PXV88NLFkxeGO7UTo2Nj4101Pb33/dPvcq8VHseiiHqkeGvwzVSPiEo8+Fjs8d551PpbnRhqdWJidKzVkblGvblUPpkquaoSUevaaaQzRo9hLh7ISMRy2fyywUNl98Zv1RfqU3OztS/WF5YaS435Zqq0W1v2pxaVGE4RKxGx1nf3y/VGER+NFK+cXk9TEVF0xuGTrYXBe7ench99OHYf++xQtrPWG7FSOQJzdoj1RRFXI8XPXz8R0+WY5Vt8POILZb4W8WqZn4lI5RvjfMTPdnkfcTT1RBH/Hinm03qaaR0POseVK1+ufb55fb6rtnNcOfKfD4/TIT82VaOIqdYRfz3d/8kOAAAAAAAAAAAAAAAAAA9bfxTx7UjxJ8/9XmtdcbTWpb/v0vB7Xvzt7jXjz+7xOmXtqYhYruxvTW5vXjqcKuV/j6Bj7Es1ivhGXv/3R9ueeQiLtAEAAAAAAAAAAAAAAAAAAHgHingxUnzl5Im0Et3XFG80b9Su1afm2leF7Vz7t3PN9I2NjY1aaudIzsmcyzlXcq7mXMsZlbx/zpGckzmXc67kXM25ljOKvH/OkZyTOZdzruRczbmWM3ry/jlHck7mXM65knM151rOOCTX7gUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeJJUoohfRIpvfW09RYqIkYjJaOdq30G3DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoVVMRpyLF6ovV1uOVSsS1iPjFxsZG5xYR62U+qIPuKwAAAAAAAAAAAAAAAAAAABxaqYiPRYpn/m891SLizuAbfU8dH7x08eSF4SKKSGVJd/0L49cu156fv3lrYXZxcXamNtFsTM/PzO73x1WvNJq370yMjj2Szuyp/xG3v7/6/PytlxcaN766tOvzA9XLU4tLC/Xp3Z+O/qhETHZvGWo1eGJ0rNXouUa92do1Ve7RwErEyH47AwAAAAAAAAAAAAAAAAAAwKExkIr4XKT46X+dT5114z3tNf+/0n5UbNa++gdb3wUwtyM7ur8/YD/3034bOtRaeF+bGB0bG+/a3NN7d2nZppSKeDZSfOKVD7XWw6cY2HVtfFn33rLu5vlcN/hrZd3ytqrq0MToWO3qfPPk5bm5+en6Un1qbrY2fqs+vfcXBxzbbw8BAAAAAAAAAAAAAAAAAAB4FxtIRfw4UvzP3/9H6lx3Pq//72k/6lr//1utJfQt1bQ9N7XW9r+3tba/ff99l4YHPvrcvbY/ivX/ZZtSKuKbkeLcjz/Uup5+Z/3/5I7asu7PIsWbz30k11WOlXX1Tnfar3i9MTd7uqz960jx6291aqNVeyPXPrNVe6as7Y8Uf7m+vfarufYDW7Vny9oTkeL7/7177Qe3as+VtT+NFP/0d7VO7UBZ+/u59vhW7anp+bmZvYa1nP/vRIq/vfo7qdPne85/1/c/LO/ITXfN+dvff1jzP9i1bTnP65/m+a/vMf8XIsV3qh/Jde2xn8rPP936/9b8fyJS/Oe/ba+9nmvfv1V7Zr/dOmjl/H87Unzvr36y2ec8/3lkt2aoe/5/tWd7br5LDmj+n+7aNpjbNf0Ox+LdaPHlr79Un5ubXXDnybrz3X99sMntPRS9cOfA7hz0kYnHofz8//NI8f/Hi9Q5j8mf/+9pP9o6//vfb2x9/l/akZsO6PP//V3bLuWzlt6eiOrSzVu9z0ZUF1/++snGzfqN2RuzzbNnTn/60xfOnD5zofdY5+Ru696+x+5JUM7/DyPFj/7hR5u/x2w//9v9/H9gR246oPl/prtP285r9j0U70rl/P9NpHj6sz/Z/H3z7c7/O7//n/jY9tz893dA8/+Brm2DuV2NdzgWAAAAAAAAAAAAR8lAKuIvIsXv/vFvps4aov38/d/Mjtx0QH//dbxr28xjWtew70EGADhEyvO/D0aK7278YHMt9/bzv/iNTm33+d+9HIbr/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBQDr62n1b7ycVv1SqN5+87E6Njuu/WnSFGJolVf3qpnzp47/6kLF4c7+fb7P2wfjhfGr12uPT9/89bC7OLi7ExtotmYnp+Z3fcrPOj+Ow21BqB286XbM9evL9bOnjq37ek7g2/0PXV88NLFkxeGO7UTo2Nj4101Pb33/dPvku6x/VgU8YNI8dbgm+l7fRGVePCx2OO986j1tzox1OrExOhYqyNzjXpzqXwyVXJVJaLWtdNIZ4wew1w8kJGI5bL5ZYOHyu6N36ov1KfmZmtfrC8sNZYa881Uabe27E8tKjGcIlYiYq3v7pfrjSK+GSleOb2e/rkvouiMwyevjn/p9Lm921N5BH3ch7Kdtd6IlcoRmLNDrC+K+MdI8fPXT8T3+yJ6on2Lj0d8oczXIl4t8zMRqXxjnI/42S7vI46mnijifKSYT+vp9b7yeNA5rlz5cu3zzevzXbWd48qR/3x4nA75sakaRfywdcRfT//i3zUAAAAAAAAAAAAAAADAIVLESqT4yskTqbU+eHNNcaN5o3atPjXXXtbXWfvXWTO9sbGxUUvtHMk5mXM550rO1ZxrOaOS9885knMy53LOlZyrOddyRpH3zzmSczLncs6VnKs513JGT94/50jOyZzLOVdyruZcyxmHZO0eAAAAAAAAAAAAAAAAAADwZKlE0bqK+7e+tp42+trXl56Mdq66HugT75cBAAD//4kHdHg=") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x60004, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x25, 0x60041, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x9}) close(0x3) 3.024003631s ago: executing program 4 (id=574): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000080)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x0, 0x4f7, &(0x7f0000000540)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r2, 0x0) chdir(&(0x7f0000000240)='./file0\x00') syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x1000002, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES8=r0], 0x0, 0x193, &(0x7f0000000440)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) 2.975527926s ago: executing program 3 (id=575): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0xa, 0x8, 0x6, 0x5, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_address={0x3, 0x17, 0x3c, 0x20, 0x0, @in={0x2, 0x4e23, @loopback}}]}, 0x28}}, 0x24000000) 2.975068586s ago: executing program 5 (id=576): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x522, &(0x7f00000006c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0xfffff61f, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) chmod(&(0x7f0000000080)='./file0\x00', 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x88, &(0x7f0000000340)={[{@nogrpid}, {@nodiscard}, {@usrjquota}, {@journal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@test_dummy_encryption}, {@resuid}]}, 0x3, 0x439, &(0x7f0000000440)="$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") syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x8, 0xe0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x8, 0x80, {0x7, 0x25, 0x1, 0x80, 0xfc, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0x8, 0x29, {0x7, 0x25, 0x1, 0x81, 0xd, 0x2}}}}}}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x4, 0xffffffffffffffff, &(0x7f0000000c80)) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000580)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='context\xc0\x01\xca\x9f\x98\x887\xa6tqB\xab`\x81\x85i\x16f!\xa5\x00\x00\x00\x00\xb9\xe7\x9fq\xf6\xc3\x92(\xac\x0e\x9c\x16*\xf9*H\xcb\x06\x0e\xa9 \x18y\x1692\xca\x82\xb1\xa0I\xce\xf5\xb3a:&4\xe8', &(0x7f0000000380)='ramf\xba\x18%\\b\x00\xf5c\xf8\xd2\xf2\xe4,\f\xe6\xda\x92 \xe3R\xd8pdR\xb5\x18:\xb5\xbb\xce>H\xafVH4\xefai\x92TR\x9b\xea\xc7\xa7\x16\xd6\xaf\xb3h\x03\x99\x8eq\xb6\xcc);]\xe8R2U\xff\xed\"\xf3\xe3\xc6zS\x19\x8e(iU\xf1!\xed\xc1\xf7\xa0\xeb\xd5\xf5\xf2\xe8*~\xc0S\xd4\x8f\xbamH\x80\xfeX\xaf\xbc\n&\"\xc6\xc8\x12%\xea\x1e\xc1Ow\xe8\x10\xc9\xa8P\x00\x00\x00\x00\x00\x00\x00-\x1d\xe7\xbb0\x97\x8c\xfaX\x83n\x9b\x9c\x8e\"\xca\xd4S\x00\x97\xdc;\xc2\xd5%_\xd6\xfb\v\x96I#\xee\xc1@\xbev\x8e\x0f0#\xcb\x9f\xe5\xbek.,\xd5F\xb54P\x89\x9c\xff\xbc(\xe4$\'\xe2\x0f\x01\xcb\x0e)d\xa1\xe2\xd1w\b^\x11\xb0\x9a\xc2\xf1\xb47\x0fa#\x99\x1fx\x93\xc3\f\x84\x18\xb0\x03\x13\xe9\x83K', 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 2.883090215s ago: executing program 3 (id=577): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) 2.478384575s ago: executing program 4 (id=578): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_freeze_timeout', 0x101, 0x0) write$binfmt_aout(r0, &(0x7f0000002280)={{0x107, 0x2, 0xff, 0x80000001, 0x32, 0xfff, 0x15f}}, 0x20) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$hfsplus(&(0x7f0000000a40), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800410, &(0x7f0000000000)=ANY=[], 0x1, 0x692, &(0x7f0000001140)="$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") r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = getpid() r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) close(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000080)={0x0, 0x2b3ac00000000000}) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1c8, 0x20a, 0x278, 0x1c8, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) 2.355572158s ago: executing program 0 (id=579): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 2.166625516s ago: executing program 0 (id=580): syz_open_dev$media(0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)}) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x102, 0xffffffff}}, 0x10) socket(0xa, 0x3, 0xff) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x4, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.256084996s ago: executing program 4 (id=581): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x15, &(0x7f0000000040)={0x15, 0x8001, 0x9}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000480)="b1", 0x1) sendmmsg$alg(r4, &(0x7f0000001580), 0x49249249249256f, 0x40484) r5 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmat(r5, &(0x7f0000d6f000/0x3000)=nil, 0x6000) 0s ago: executing program 4 (id=582): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @local}, 0xc) capget(&(0x7f0000000000)={0x0, 0xffffffffffffffff}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x5, @any, 0x67}, 0xe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts. [ 57.474517][ T4171] cgroup: Unknown subsys name 'net' [ 57.612135][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.080234][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.958538][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 61.097169][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 61.127299][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.134478][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.142734][ T4188] device bridge_slave_0 entered promiscuous mode [ 61.183400][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.190790][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.199478][ T4188] device bridge_slave_1 entered promiscuous mode [ 61.227658][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 61.286833][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.298313][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.343065][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.350341][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.358752][ T4182] device bridge_slave_0 entered promiscuous mode [ 61.373371][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 61.385200][ T4188] team0: Port device team_slave_0 added [ 61.401570][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.408947][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.417010][ T4182] device bridge_slave_1 entered promiscuous mode [ 61.424858][ T4188] team0: Port device team_slave_1 added [ 61.435193][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 61.506188][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.513156][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.539309][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.562362][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.573801][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.590282][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.597626][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.623976][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.643346][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.650639][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.659077][ T4194] device bridge_slave_0 entered promiscuous mode [ 61.689553][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.697241][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.705034][ T4194] device bridge_slave_1 entered promiscuous mode [ 61.746899][ T4182] team0: Port device team_slave_0 added [ 61.759094][ T4188] device hsr_slave_0 entered promiscuous mode [ 61.766205][ T4188] device hsr_slave_1 entered promiscuous mode [ 61.788842][ T4182] team0: Port device team_slave_1 added [ 61.797515][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.818079][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.825176][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.833910][ T4192] device bridge_slave_0 entered promiscuous mode [ 61.850200][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.875643][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.882737][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.891684][ T4192] device bridge_slave_1 entered promiscuous mode [ 61.920444][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.930537][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.938973][ T4183] device bridge_slave_0 entered promiscuous mode [ 61.959688][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.966781][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.995255][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.008940][ T4194] team0: Port device team_slave_0 added [ 62.015349][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.022456][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.048780][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.069077][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.076402][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.084209][ T4183] device bridge_slave_1 entered promiscuous mode [ 62.101277][ T4194] team0: Port device team_slave_1 added [ 62.134839][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.153039][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.160201][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.186377][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.211187][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.228691][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.235922][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.262270][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.281788][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.310703][ T4182] device hsr_slave_0 entered promiscuous mode [ 62.317598][ T4182] device hsr_slave_1 entered promiscuous mode [ 62.324311][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.332454][ T4182] Cannot create hsr debugfs directory [ 62.350292][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.402614][ T4192] team0: Port device team_slave_0 added [ 62.413387][ T4192] team0: Port device team_slave_1 added [ 62.423143][ T4194] device hsr_slave_0 entered promiscuous mode [ 62.430292][ T4194] device hsr_slave_1 entered promiscuous mode [ 62.437390][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.445090][ T4194] Cannot create hsr debugfs directory [ 62.490176][ T4183] team0: Port device team_slave_0 added [ 62.507249][ T4183] team0: Port device team_slave_1 added [ 62.520788][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.527898][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.554103][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.568758][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.575884][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.602349][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.647481][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.654473][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.680893][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.696606][ T3159] Bluetooth: hci3: command 0x0409 tx timeout [ 62.703299][ T3159] Bluetooth: hci2: command 0x0409 tx timeout [ 62.720207][ T3159] Bluetooth: hci1: command 0x0409 tx timeout [ 62.727819][ T3159] Bluetooth: hci0: command 0x0409 tx timeout [ 62.734665][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.742169][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.768563][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.779385][ T3159] Bluetooth: hci4: command 0x0409 tx timeout [ 62.797558][ T4192] device hsr_slave_0 entered promiscuous mode [ 62.804750][ T4192] device hsr_slave_1 entered promiscuous mode [ 62.811600][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.819306][ T4192] Cannot create hsr debugfs directory [ 62.921518][ T4183] device hsr_slave_0 entered promiscuous mode [ 62.928658][ T4183] device hsr_slave_1 entered promiscuous mode [ 62.935201][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.943081][ T4183] Cannot create hsr debugfs directory [ 63.045829][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.072969][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.098772][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.133356][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.198107][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.208215][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.221329][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.234544][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.312680][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.325029][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.335921][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.359135][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.377467][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.425568][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.444487][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.453694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.463789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.475117][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.487785][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.510693][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.520808][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.551228][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.567878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.578336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.587145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.597122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.606985][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.614217][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.622922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.631237][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.645675][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.654888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.664131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.674483][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.681840][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.692483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.701471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.710707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.719939][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.727128][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.748166][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.760852][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.780861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.791347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.800176][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.807303][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.816821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.826048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.839209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.848686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.872652][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.884226][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.893922][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.903857][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.913277][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.922090][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.933863][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.967578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.976939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.987462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.000678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.009698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.021855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.031376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.074070][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.083445][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.101536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.111705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.123105][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.139604][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.181182][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.205692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.213596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.227309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.242924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.252136][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.259279][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.274699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.285151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.300823][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.307969][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.316948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.337095][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.354218][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.370621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.391126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.404447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.418073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.433684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.441629][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.454978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.474921][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.503987][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.521056][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.533530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.543449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.555377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.563389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.571854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.580411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.588443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.596542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.603985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.612697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.623234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.631812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.640312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.651869][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.662953][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.672726][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.706338][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.715069][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.737940][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.745042][ T4265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.753535][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.762683][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.775063][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.782228][ T4265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.785707][ T4260] Bluetooth: hci0: command 0x041b tx timeout [ 64.791208][ T4253] Bluetooth: hci3: command 0x041b tx timeout [ 64.803112][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.812688][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.820549][ T4260] Bluetooth: hci1: command 0x041b tx timeout [ 64.845700][ T4260] Bluetooth: hci2: command 0x041b tx timeout [ 64.865955][ T4225] Bluetooth: hci4: command 0x041b tx timeout [ 64.874000][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.892687][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.909063][ T1487] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.916216][ T1487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.925040][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.939543][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.949177][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.958348][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.967077][ T1487] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.974122][ T1487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.981830][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.991350][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.000443][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.009632][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.019276][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.028232][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.037236][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.045270][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.064999][ T4182] device veth0_vlan entered promiscuous mode [ 65.093438][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.106494][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.114892][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.125722][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.134599][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.150046][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.159780][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.168621][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.181017][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.190286][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.198800][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.219983][ T4182] device veth1_vlan entered promiscuous mode [ 65.233138][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.242985][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.251943][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.260360][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.271172][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.280410][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.300086][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.311381][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.341186][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.349682][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.358485][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.368139][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.376743][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.384163][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.392760][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.401566][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.410285][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.428277][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.437012][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.444964][ T4188] device veth0_vlan entered promiscuous mode [ 65.453755][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.468136][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.504372][ T4188] device veth1_vlan entered promiscuous mode [ 65.534375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.546827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.555920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.564602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.580346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.594792][ T4182] device veth0_macvtap entered promiscuous mode [ 65.616782][ T4182] device veth1_macvtap entered promiscuous mode [ 65.656262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.679435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.706500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.714754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.723600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.747168][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.761139][ T4188] device veth0_macvtap entered promiscuous mode [ 65.771101][ T4194] device veth0_vlan entered promiscuous mode [ 65.781783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.790968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.799466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.809838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.819299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.828507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.837569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.853154][ T4188] device veth1_macvtap entered promiscuous mode [ 65.875348][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.888124][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.902376][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.914065][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.925954][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.938010][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.949057][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.966618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.974721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.987280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.997380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.006365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.016494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.023978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.031872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.040969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.050182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.058010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.067516][ T4194] device veth1_vlan entered promiscuous mode [ 66.077816][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.088014][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.097434][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.106506][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.122258][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.131855][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.141601][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.150612][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.159642][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.176061][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.183887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.192193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.266088][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.274770][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.312203][ T4194] device veth0_macvtap entered promiscuous mode [ 66.353243][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.362752][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.375328][ T4194] device veth1_macvtap entered promiscuous mode [ 66.405774][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.413955][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.422558][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.433196][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.443496][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.451594][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.478372][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.487423][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.499316][ T4192] device veth0_vlan entered promiscuous mode [ 66.516408][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.527503][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.538423][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.550254][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.561516][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.576108][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.584132][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.608926][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.617130][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.627568][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.643069][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.654008][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.664169][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.674792][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.686773][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.697374][ T4192] device veth1_vlan entered promiscuous mode [ 66.710761][ T4183] device veth0_vlan entered promiscuous mode [ 66.722078][ T1487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.730500][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.747197][ T1487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.747759][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.765075][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.774232][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.784592][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.793154][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.802076][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.810933][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.844418][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.848632][ T4183] device veth1_vlan entered promiscuous mode [ 66.859562][ T4260] Bluetooth: hci2: command 0x040f tx timeout [ 66.863956][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.866779][ T4260] Bluetooth: hci1: command 0x040f tx timeout [ 66.882401][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.892038][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.901205][ T4260] Bluetooth: hci0: command 0x040f tx timeout [ 66.901240][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.907631][ T4260] Bluetooth: hci3: command 0x040f tx timeout [ 66.922438][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.945913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.954475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.962750][ T4246] Bluetooth: hci4: command 0x040f tx timeout [ 66.970577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.018398][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.027661][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.047639][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.067306][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.091493][ T4192] device veth0_macvtap entered promiscuous mode [ 67.110091][ T4192] device veth1_macvtap entered promiscuous mode [ 67.122928][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.132307][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.141000][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.154785][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.218674][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.237238][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.249430][ T4183] device veth0_macvtap entered promiscuous mode [ 67.268654][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.280870][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.291262][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.302787][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.313224][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.324285][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.336365][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.369403][ T4183] device veth1_macvtap entered promiscuous mode [ 67.405240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.428341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.443416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.457702][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.473573][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.482404][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.492847][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.501817][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.514247][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.529922][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.542166][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.558918][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.592369][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.601978][ T4291] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.626458][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.636034][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.666710][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.687339][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.703924][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.713394][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.740297][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.782098][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.823745][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.853480][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.874017][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.884893][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.896892][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.907799][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.926959][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.952831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.383159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.492420][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.509266][ T403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.520705][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.546664][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.557846][ T403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.571380][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.605572][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.650848][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.675682][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.689575][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.703032][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.711145][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.730809][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.752690][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.794496][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.817383][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.839695][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.874157][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.939337][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 68.956500][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 68.967588][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 69.001839][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 69.003999][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.037918][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.123118][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.143406][ T1487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.197960][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 69.206345][ T1487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.248662][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.258461][ T4316] loop2: detected capacity change from 0 to 2048 [ 69.926237][ T4317] loop4: detected capacity change from 0 to 8192 [ 70.102161][ T4316] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 70.121288][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.131604][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.146788][ T4317] FAT-fs (loop4): bogus number of directory entries (7) [ 70.154017][ T4317] FAT-fs (loop4): Can't find a valid FAT filesystem [ 70.160386][ T4316] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.164126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.339556][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.376915][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.446811][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.486859][ T4325] loop3: detected capacity change from 0 to 2048 [ 70.516521][ T4316] ======================================================= [ 70.516521][ T4316] WARNING: The mand mount option has been deprecated and [ 70.516521][ T4316] and is ignored by this kernel. Remove the mand [ 70.516521][ T4316] option from the mount to silence this warning. [ 70.516521][ T4316] ======================================================= [ 70.622123][ T4328] loop4: detected capacity change from 0 to 1024 [ 70.676916][ T4325] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,acl,,errors=continue. Quota mode: none. [ 70.775894][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 70.785462][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 70.795439][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 70.805436][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 70.815437][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 70.825440][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 70.835441][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 70.844422][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 70.887081][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 70.896959][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 70.926735][ T4194] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 70.936876][ T4194] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 71.015092][ T4338] "syz.1.11" (4338) uses obsolete ecb(arc4) skcipher [ 71.033384][ T4338] syz.1.11 sent an empty control message without MSG_MORE. [ 71.966411][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.973698][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.145183][ T4353] device bond1 entered promiscuous mode [ 73.151170][ T4353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.171284][ T4355] loop1: detected capacity change from 0 to 512 [ 73.418288][ T4355] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 73.531359][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.897681][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.178185][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.342835][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.361211][ T4373] loop0: detected capacity change from 0 to 512 [ 74.396812][ T4375] loop1: detected capacity change from 0 to 2048 [ 74.531927][ T4373] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.584385][ T4373] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.672262][ T4375] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.740164][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 74.765848][ T4380] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.179319][ T4379] syz.3.22 (4379) used greatest stack depth: 20192 bytes left [ 75.257884][ T4373] EXT4-fs (loop0): 1 truncate cleaned up [ 75.263692][ T4373] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,bsddf,noblock_validity,,errors=continue. Quota mode: none. [ 75.497574][ T4373] syz.0.21 (pid 4373) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 76.705534][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 77.486388][ T4407] device bond1 entered promiscuous mode [ 77.492764][ T4407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.539276][ T4414] loop1: detected capacity change from 0 to 256 [ 77.589382][ T4376] chnl_net:caif_netlink_parms(): no params data found [ 77.605779][ T4414] exfat: Deprecated parameter 'namecase' [ 77.649038][ T4414] exfat: Deprecated parameter 'namecase' [ 77.787079][ T4414] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 78.164381][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.172082][ T4376] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.181632][ T4376] device bridge_slave_0 entered promiscuous mode [ 78.191754][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.199387][ T4376] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.208247][ T4376] device bridge_slave_1 entered promiscuous mode [ 78.231341][ T4434] loop0: detected capacity change from 0 to 1024 [ 78.267651][ T4438] loop1: detected capacity change from 0 to 764 [ 78.394578][ T4438] rock: directory entry would overflow storage [ 78.415625][ T4434] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,data_err=ignore,,errors=continue. Quota mode: none. [ 78.469434][ T4438] rock: sig=0x5245, size=8, remaining=5 [ 78.484832][ T4376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.564437][ T4376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.588986][ T4446] loop4: detected capacity change from 0 to 128 [ 78.665313][ T4446] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 78.906647][ T3159] Bluetooth: hci4: command 0x041b tx timeout [ 79.406293][ T4376] team0: Port device team_slave_0 added [ 79.487962][ T4376] team0: Port device team_slave_1 added [ 79.825127][ T4376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.850838][ T4376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.921642][ T4461] loop1: detected capacity change from 0 to 1024 [ 79.957332][ T4376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.173938][ T4462] device bond1 entered promiscuous mode [ 80.179938][ T4462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.272675][ T4473] loop0: detected capacity change from 0 to 128 [ 80.720463][ T4461] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 80.755735][ T4473] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 80.922582][ T4461] EXT4-fs (loop1): Ignoring removed nobh option [ 80.935970][ T4461] EXT4-fs (loop1): inline encryption not supported [ 80.955498][ T4461] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.971648][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 80.981891][ T4376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.994411][ T4376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.055244][ T4461] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,nojournal_checksum,barrier=0x0000000000000003,noload,data_err=ignore,norecovery,mblk_io_submit,journal_dev=0x0000000000000800,nobh,inlinecrypt,data_err=ignore,dioread_nolock,,errors=continue. Quota mode: none. [ 81.082630][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.150978][ T4376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.395719][ T4491] loop3: detected capacity change from 0 to 1024 [ 81.440852][ T4491] EXT4-fs (loop3): Ignoring removed nobh option [ 81.504477][ T4491] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,grpid,barrier=0x0000000000000001,i_version,grpquota,max_dir_size_kb=0x0000000000000000,abort,nodelalloc,nobh,user_xattr,dioread_lock,errors=remount-ro,. Quota mode: writeback. [ 81.608786][ T4376] device hsr_slave_0 entered promiscuous mode [ 81.830862][ T4376] device hsr_slave_1 entered promiscuous mode [ 81.987897][ T4376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.176885][ T4376] Cannot create hsr debugfs directory [ 82.462936][ T4491] EXT4-fs error (device loop3): ext4_remount:6035: comm syz.3.46: Abort forced by user [ 82.546765][ T4491] EXT4-fs (loop3): Remounting filesystem read-only [ 82.553550][ T4504] loop0: detected capacity change from 0 to 2048 [ 82.563681][ T4491] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback. [ 83.494349][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 83.664135][ T4517] loop0: detected capacity change from 0 to 512 [ 83.722123][ T4517] EXT4-fs (loop0): inline encryption not supported [ 83.745112][ T4517] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.828436][ T4525] loop4: detected capacity change from 0 to 1024 [ 83.838342][ T4517] EXT4-fs (loop0): 1 truncate cleaned up [ 83.875623][ T4517] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,inlinecrypt,max_batch_time=0x0000000000000005,nouid32,noblock_validity,errors=remount-ro,. Quota mode: none. [ 83.917619][ T4376] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.035918][ T4525] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,noload,commit=0x0000000000000000,discard,resgid=0x0000000000000000,usrquota,data_err=abort,errors=remount-ro,. Quota mode: writeback. [ 84.068760][ T4517] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.50: bg 0: block 312: padding at end of block bitmap is not set [ 84.110080][ T4376] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.308138][ T4376] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.334544][ T4517] EXT4-fs (loop0): Remounting filesystem read-only [ 84.374671][ T4376] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.550647][ T144] device hsr_slave_0 left promiscuous mode [ 84.617736][ T144] device hsr_slave_1 left promiscuous mode [ 84.636878][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.644387][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.713827][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.801728][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.830173][ T144] device bridge_slave_1 left promiscuous mode [ 84.846337][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.032452][ T144] device bridge_slave_0 left promiscuous mode [ 85.133403][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.733948][ T144] device veth1_macvtap left promiscuous mode [ 85.770945][ T144] device veth0_macvtap left promiscuous mode [ 85.795553][ T144] device veth1_vlan left promiscuous mode [ 85.813021][ T144] device veth0_vlan left promiscuous mode [ 85.949715][ T4554] loop4: detected capacity change from 0 to 1024 [ 86.687961][ T13] cfg80211: failed to load regulatory.db [ 86.755797][ T4554] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 87.790522][ T144] team0 (unregistering): Port device team_slave_1 removed [ 87.814564][ T144] team0 (unregistering): Port device team_slave_0 removed [ 87.859251][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.916858][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.248200][ T144] bond0 (unregistering): Released all slaves [ 88.443460][ T4571] loop3: detected capacity change from 0 to 1024 [ 88.561998][ T4571] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.791329][ T4571] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,dioread_nolock,commit=0x0000000000000000,discard,resgid=0x0000000000000000,usrquota,data_err=abort,errors=remount-ro,. Quota mode: writeback. [ 89.314464][ T4580] loop0: detected capacity change from 0 to 128 [ 89.473161][ T4580] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.583621][ T4580] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.640952][ T4376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.678159][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.712280][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.765060][ T4376] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.772961][ T4591] loop4: detected capacity change from 0 to 256 [ 89.821197][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.841645][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.860129][ T4591] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 89.936899][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.944178][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.974239][ T4591] 9pnet: p9_fd_create_unix (4591): problem connecting socket: ./file0: -13 [ 90.324002][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.900198][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.956493][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.992417][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.999624][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.082253][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.126601][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.184421][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.204146][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.435007][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.522503][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.626570][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.697884][ T4624] tipc: Started in network mode [ 91.703108][ T4624] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 91.714429][ T4624] tipc: Enabled bearer , priority 10 [ 91.724517][ T4376] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.821163][ T4376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.013251][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.059512][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.091990][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.145851][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.157219][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.726919][ T4289] tipc: Node number set to 4269801488 [ 92.744790][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.758963][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.801213][ T4376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.047281][ T4663] loop0: detected capacity change from 0 to 128 [ 93.161280][ T4663] EXT4-fs (loop0): Ignoring removed nobh option [ 93.415285][ T4666] device wlan0 entered promiscuous mode [ 93.431859][ T4663] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 93.514107][ T4666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.87'. [ 93.530904][ T4663] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.576012][ T4666] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 93.883728][ T4686] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 94.848454][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.876336][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.946161][ T4376] device veth0_vlan entered promiscuous mode [ 95.009512][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.021534][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.042029][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.066571][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.087413][ T4704] loop0: detected capacity change from 0 to 256 [ 95.130725][ T4376] device veth1_vlan entered promiscuous mode [ 95.229089][ T4376] device veth0_macvtap entered promiscuous mode [ 95.240288][ T4376] device veth1_macvtap entered promiscuous mode [ 95.257576][ T4376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.268115][ T4376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.305597][ T4704] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.315998][ T4376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.336214][ T4376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.360509][ T4704] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 95.369489][ T4376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.405591][ T4376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.425941][ T4376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.437265][ T4704] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 95.498476][ T4376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.554983][ T4376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.599751][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.636237][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.669525][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.689184][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.707221][ T4696] loop4: detected capacity change from 0 to 16 [ 95.710057][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.740883][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.787334][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.820399][ T4696] erofs: (device loop4): mounted with root inode @ nid 36. [ 95.838632][ T4717] loop0: detected capacity change from 0 to 256 [ 95.857536][ T4376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.885597][ T4376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.907766][ T4696] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 95.925826][ T4376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.951286][ T4376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.972721][ T4696] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -44 in[46, 4050] out[1851] [ 95.992191][ T4376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.032960][ T4376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.037798][ T4696] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 96.063476][ T4376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.101100][ T4376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.148835][ T4717] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 96.163382][ T4376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.202803][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.227738][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.306647][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.348632][ T4376] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.411834][ T4376] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.458005][ T4376] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.485533][ T4376] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.324360][ T4392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.351955][ T4392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.455357][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.480084][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.572868][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.717420][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.534290][ T4754] capability: warning: `syz.5.109' uses deprecated v2 capabilities in a way that may be insecure [ 98.546231][ T4753] loop1: detected capacity change from 0 to 128 [ 98.776286][ T4753] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.874597][ T4753] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.906478][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.057486][ T4768] loop5: detected capacity change from 0 to 256 [ 99.228761][ T4768] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 100.395654][ T4289] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.245666][ T4289] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 101.289102][ T4289] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 101.511307][ T4289] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 101.544628][ T4289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.558012][ T4289] usb 1-1: Product: syz [ 101.575028][ T4289] usb 1-1: Manufacturer: syz [ 101.585806][ T4289] usb 1-1: SerialNumber: syz [ 101.608881][ T4289] usb 1-1: config 0 descriptor?? [ 101.626512][ T4800] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 101.634031][ T4800] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 101.719644][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.881022][ T4800] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 101.899500][ T4800] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.141431][ T21] usb 2-1: config 1 has an invalid descriptor of length 225, skipping remainder of the config [ 102.159182][ T21] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 102.275884][ T21] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.299256][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 102.323363][ T21] usb 2-1: SerialNumber: syz [ 102.386459][ T4289] Error reading MAC address [ 103.015504][ T21] usb 2-1: USB disconnect, device number 2 [ 104.264792][ T13] usb 1-1: USB disconnect, device number 2 [ 104.275613][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.581099][ T4936] ax25_connect(): syz.0.158 uses autobind, please contact jreuter@yaina.de [ 104.706667][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.810966][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.352280][ T4938] loop0: detected capacity change from 0 to 1024 [ 105.415839][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.521748][ T21] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.555688][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.622448][ T21] usb 2-1: config 0 descriptor?? [ 105.711415][ T4938] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,auto_da_alloc=0x00000000000000e6,max_dir_size_kb=0x0000000000000006,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 105.745660][ T4938] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.179979][ T4947] "syz.4.160" (4947) uses obsolete ecb(arc4) skcipher [ 107.365535][ T21] usbhid 2-1:0.0: can't add hid device: -71 [ 107.433425][ T4971] tipc: Started in network mode [ 107.438573][ T4971] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 107.452235][ T4971] tipc: Enabled bearer , priority 10 [ 108.101896][ T21] usbhid: probe of 2-1:0.0 failed with error -71 [ 108.118732][ T21] usb 2-1: USB disconnect, device number 3 [ 108.502585][ T4990] loop0: detected capacity change from 0 to 512 [ 108.565587][ T4266] tipc: Node number set to 4269801488 [ 108.585880][ T4990] EXT4-fs (loop0): Unrecognized mount option "dont_measure" or missing value [ 110.742845][ T5019] loop5: detected capacity change from 0 to 512 [ 111.128466][ T5023] tipc: Enabling of bearer rejected, already enabled [ 111.196413][ T5019] EXT4-fs (loop5): Ignoring removed nobh option [ 111.234387][ T5019] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.912030][ T5019] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.176: iget: bad i_size value: 38620345925642 [ 112.070512][ T5019] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.176: couldn't read orphan inode 15 (err -117) [ 112.218199][ T5019] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 112.398536][ T5035] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.176: bg 0: block 5: invalid block bitmap [ 112.539376][ T5035] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 112.598848][ T5035] EXT4-fs (loop5): This should not happen!! Data will be lost [ 112.598848][ T5035] [ 112.675594][ T5035] EXT4-fs (loop5): Total free blocks count 0 [ 112.707974][ T5035] EXT4-fs (loop5): Free/Dirty block details [ 112.733194][ T5035] EXT4-fs (loop5): free_blocks=0 [ 112.754276][ T5035] EXT4-fs (loop5): dirty_blocks=428 [ 112.785685][ T5039] loop0: detected capacity change from 0 to 256 [ 112.792408][ T5035] EXT4-fs (loop5): Block reservation details [ 112.805005][ T5035] EXT4-fs (loop5): i_reserved_data_blocks=428 [ 112.943219][ T4389] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 16 with max blocks 408 with error 28 [ 112.956246][ T5039] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.985449][ T5039] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 113.004142][ T4389] EXT4-fs (loop5): This should not happen!! Data will be lost [ 113.004142][ T4389] [ 113.063283][ T5039] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 113.228229][ T5046] syz.5.183 uses obsolete (PF_INET,SOCK_PACKET) [ 113.992176][ T5068] "syz.0.190" (5068) uses obsolete ecb(arc4) skcipher [ 114.705232][ T5074] loop1: detected capacity change from 0 to 256 [ 114.730480][ T5072] netlink: 76 bytes leftover after parsing attributes in process `syz.5.194'. [ 114.981015][ T5074] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.281779][ T5074] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 115.725584][ T5074] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 115.927890][ T5088] Zero length message leads to an empty skb [ 116.084430][ T5094] netlink: 44 bytes leftover after parsing attributes in process `syz.5.201'. [ 117.251267][ T5114] "syz.5.206" (5114) uses obsolete ecb(arc4) skcipher [ 117.556318][ T5117] netlink: 200 bytes leftover after parsing attributes in process `syz.1.207'. [ 117.605487][ T5117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 117.982962][ T5124] loop5: detected capacity change from 0 to 512 [ 119.270037][ T5155] netlink: 12 bytes leftover after parsing attributes in process `syz.5.217'. [ 119.298352][ T5152] netlink: 64 bytes leftover after parsing attributes in process `syz.1.216'. [ 119.558818][ T5162] loop5: detected capacity change from 0 to 1024 [ 120.545028][ T5169] "syz.1.220" (5169) uses obsolete ecb(arc4) skcipher [ 122.988091][ T5215] loop5: detected capacity change from 0 to 256 [ 123.199075][ T5215] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.235739][ T5215] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 123.259001][ T5227] "syz.0.234" (5227) uses obsolete ecb(arc4) skcipher [ 123.946876][ T5215] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 124.387380][ T5246] loop5: detected capacity change from 0 to 512 [ 124.534818][ T5246] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 124.657860][ T5257] loop1: detected capacity change from 0 to 8 [ 124.664798][ T5246] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,grpjquota=./mnt,,errors=continue. Quota mode: writeback. [ 124.752543][ T5246] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.161816][ T5273] loop1: detected capacity change from 0 to 128 [ 125.388870][ T5273] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.425786][ T5273] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.534123][ T5283] "syz.4.249" (5283) uses obsolete ecb(arc4) skcipher [ 128.426883][ T5344] "syz.4.263" (5344) uses obsolete ecb(arc4) skcipher [ 129.096972][ T5345] loop1: detected capacity change from 0 to 128 [ 129.200014][ T5345] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.272250][ T5345] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 129.493651][ T26] audit: type=1800 audit(1760510860.046:2): pid=5345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.264" name="file2" dev="loop1" ino=13 res=0 errno=0 [ 130.109357][ T5364] loop1: detected capacity change from 0 to 256 [ 130.166916][ T5364] FAT-fs (loop1): Unrecognized mount option "fs" or missing value [ 130.925325][ T5379] process 'syz.0.273' launched './file0' with NULL argv: empty string added [ 131.478614][ T5404] loop0: detected capacity change from 0 to 256 [ 132.084611][ T5404] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.123500][ T5404] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 132.201962][ T5404] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 132.698454][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.705265][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.783011][ T5447] loop0: detected capacity change from 0 to 512 [ 133.870752][ T5447] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 133.941944][ T5447] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 133.970608][ T5447] System zones: 1-12 [ 134.141807][ T5447] EXT4-fs (loop0): orphan cleanup on readonly fs [ 134.164586][ T5447] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.291: invalid indirect mapped block 12 (level 1) [ 134.988023][ T5447] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.291: invalid indirect mapped block 2 (level 2) [ 135.162153][ T5447] EXT4-fs (loop0): 1 truncate cleaned up [ 135.187143][ T5447] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nobarrier,,,errors=continue. Quota mode: writeback. [ 136.024820][ T5475] loop0: detected capacity change from 0 to 512 [ 136.118564][ T5475] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 136.118564][ T5475] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 136.118564][ T5475] [ 136.179830][ T5475] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 136.282498][ T5475] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026019, mo2=0000] [ 136.417571][ T5475] EXT4-fs (loop0): 1 truncate cleaned up [ 136.423259][ T5475] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,noacl,nodiscard,nodelalloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 136.447794][ T4349] Quota error (device loop0): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 136.501289][ T4349] EXT4-fs error (device loop0): ext4_release_dquot:6245: comm kworker/u4:7: Failed to release dquot type 1 [ 136.532999][ T5475] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.298: iget: bad i_size value: 360287970199339018 [ 137.556068][ T5508] loop5: detected capacity change from 0 to 736 [ 139.149472][ T5508] rock: directory entry would overflow storage [ 139.175688][ T5508] rock: sig=0x3b10, size=4, remaining=3 [ 139.432063][ T5530] loop1: detected capacity change from 0 to 1024 [ 139.481180][ T5534] loop5: detected capacity change from 0 to 16 [ 139.494144][ T5528] loop0: detected capacity change from 0 to 1024 [ 139.574843][ T5528] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 139.618618][ T5534] erofs: (device loop5): mounted with root inode @ nid 36. [ 139.690326][ T5170] hfsplus: b-tree write err: -5, ino 4 [ 139.927749][ T5542] loop5: detected capacity change from 0 to 1024 [ 140.380578][ T5554] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 141.382106][ T5564] tipc: Started in network mode [ 141.387263][ T5564] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 141.400471][ T5564] tipc: Enabled bearer , priority 10 [ 142.101565][ T5570] loop1: detected capacity change from 0 to 2048 [ 142.252428][ T5577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.331'. [ 142.282094][ T5570] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.300243][ T5574] loop5: detected capacity change from 0 to 1024 [ 142.399229][ T13] tipc: Node number set to 4269801488 [ 142.531269][ T5574] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,nolazytime,noinit_itable,noload,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 142.633145][ T5585] loop1: detected capacity change from 0 to 1024 [ 142.788638][ T26] audit: type=1800 audit(1760510873.346:3): pid=5585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.332" name="file1" dev="loop1" ino=2 res=0 errno=0 [ 142.968552][ T13] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 143.072377][ T5592] loop1: detected capacity change from 0 to 256 [ 143.188351][ T13] usb 6-1: device descriptor read/64, error -71 [ 143.246439][ T5592] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 143.555656][ T13] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 143.657807][ T5592] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 143.775651][ T13] usb 6-1: device descriptor read/64, error -71 [ 143.905705][ T13] usb usb6-port1: attempt power cycle [ 144.355674][ T13] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 145.475656][ T13] usb 6-1: device descriptor read/8, error -71 [ 145.500802][ T5618] loop1: detected capacity change from 0 to 512 [ 145.575722][ T5618] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.632419][ T5618] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 147.636593][ T5618] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.345: Invalid block bitmap block 0 in block_group 0 [ 147.684774][ T5618] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 147.874970][ T5618] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.345: attempt to clear invalid blocks 983261 len 1 [ 147.889195][ T5618] EXT4-fs error (device loop1): __ext4_get_inode_loc:4321: comm syz.1.345: Invalid inode table block 0 in block_group 0 [ 148.231351][ T5618] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 148.260534][ T5618] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 148.286252][ T5618] EXT4-fs error (device loop1): __ext4_get_inode_loc:4321: comm syz.1.345: Invalid inode table block 0 in block_group 0 [ 148.472159][ T5618] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 148.497768][ T5618] EXT4-fs error (device loop1): ext4_truncate:4273: inode #11: comm syz.1.345: mark_inode_dirty error [ 148.516065][ T5618] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 148.733321][ T5655] tipc: Started in network mode [ 148.738418][ T5655] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 148.749301][ T5655] tipc: Enabled bearer , priority 10 [ 149.272888][ T5618] EXT4-fs error (device loop1): __ext4_get_inode_loc:4321: comm syz.1.345: Invalid inode table block 0 in block_group 0 [ 149.308948][ T5663] loop5: detected capacity change from 0 to 256 [ 149.322106][ T5618] EXT4-fs (loop1): 1 truncate cleaned up [ 149.450582][ T5618] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 150.310133][ T1108] tipc: Node number set to 4269801488 [ 151.410815][ T5675] loop0: detected capacity change from 0 to 1024 [ 151.473847][ T5677] loop1: detected capacity change from 0 to 512 [ 151.501962][ T5675] EXT4-fs (loop0): Ignoring removed bh option [ 151.615929][ T5675] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,abort,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 151.660788][ T5677] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 151.707503][ T5677] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 151.717373][ T5677] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.360: Failed to acquire dquot type 1 [ 153.170652][ T5677] EXT4-fs (loop1): 1 truncate cleaned up [ 153.215479][ T5677] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.260335][ T5677] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.470820][ T5708] tipc: Started in network mode [ 153.475977][ T5708] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 153.487815][ T5708] tipc: Enabled bearer , priority 10 [ 154.492495][ T21] tipc: Node number set to 4269801488 [ 155.261583][ T5727] loop1: detected capacity change from 0 to 512 [ 155.342055][ T5727] EXT4-fs (loop1): Ignoring removed orlov option [ 155.368641][ T5727] EXT4-fs (loop1): Ignoring removed nobh option [ 155.597241][ T5727] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.377: corrupted in-inode xattr [ 156.549455][ T5727] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.377: couldn't read orphan inode 15 (err -117) [ 156.600403][ T5727] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,nobh,journal_ioprio=0x0000000000000004,noload,delalloc,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000800,stripe=0x0000000000000063,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 156.630358][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.195479][ T5750] "syz.0.383" (5750) uses obsolete ecb(arc4) skcipher [ 162.983332][ T5792] loop5: detected capacity change from 0 to 1764 [ 169.109072][ T5830] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 172.065686][ T5840] "syz.4.396" (5840) uses obsolete ecb(arc4) skcipher [ 173.734665][ T5851] loop0: detected capacity change from 0 to 1024 [ 173.966670][ T5851] hfsplus: request for non-existent node 2130706432 in B*Tree [ 173.998454][ T5851] hfsplus: request for non-existent node 2130706432 in B*Tree [ 174.154791][ T5851] hfsplus: failed to load root directory [ 175.372027][ T5864] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 175.856327][ T5872] loop5: detected capacity change from 0 to 8 [ 176.735545][ T1108] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 176.817583][ T5872] SQUASHFS error: zlib decompression failed, data probably corrupt [ 176.827755][ T5872] SQUASHFS error: Failed to read block 0x4de: -5 [ 176.834521][ T5872] SQUASHFS error: Failed to read block 0x4e2: -5 [ 176.841200][ T5872] SQUASHFS error: Failed to read block 0x9ca: -5 [ 176.856723][ T5872] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 177.198146][ T5872] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 177.452290][ T5872] SQUASHFS error: Failed to read block 0x535f2: -5 [ 177.769503][ T26] audit: type=1800 audit(1760510908.326:4): pid=5872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.418" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 177.985560][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 178.023080][ T5901] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 178.860206][ T1108] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 178.998644][ T1108] usb 2-1: string descriptor 0 read error: -71 [ 179.005067][ T1108] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 179.058336][ T5917] loop1: detected capacity change from 0 to 128 [ 179.089239][ T5917] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 179.103158][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.184311][ T1108] usb 2-1: config 0 descriptor?? [ 179.225140][ T1108] usb 2-1: can't set config #0, error -71 [ 179.263225][ T1108] usb 2-1: USB disconnect, device number 4 [ 179.508160][ T5927] tipc: Enabling of bearer rejected, already enabled [ 182.905036][ T5955] loop1: detected capacity change from 0 to 512 [ 183.106088][ T5955] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #16: comm syz.1.444: iget: bad i_size value: 54324670505165608 [ 183.179494][ T5955] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.444: couldn't read orphan inode 16 (err -117) [ 183.231602][ T5962] loop5: detected capacity change from 0 to 2048 [ 183.243421][ T5955] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 183.292293][ T5955] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.322355][ T5962] UDF-fs: bad mount option "#'ٞՎA -`^X9cC;obVˊ\jL<>tV@`ӝLϞ#;14WBu=o"DT){Mœ4tLuQ߶d1o00000000000000000000" or missing value [ 183.792558][ T5972] loop5: detected capacity change from 0 to 1024 [ 183.918264][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.445'. [ 184.273609][ T5968] loop1: detected capacity change from 0 to 8192 [ 184.534297][ T26] audit: type=1326 audit(1760510915.238:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e59116ec9 code=0x7ffc0000 [ 184.664189][ T26] audit: type=1326 audit(1760510915.340:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f5e59116ec9 code=0x7ffc0000 [ 185.181389][ T26] audit: type=1326 audit(1760510915.340:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e59116ec9 code=0x7ffc0000 [ 185.306870][ T26] audit: type=1326 audit(1760510915.340:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e59116ec9 code=0x7ffc0000 [ 185.788387][ T1108] Bluetooth: hci0: command 0x0406 tx timeout [ 185.807145][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 185.835193][ T1108] Bluetooth: hci2: command 0x0406 tx timeout [ 185.865466][ T1108] Bluetooth: hci3: command 0x0406 tx timeout [ 185.949990][ T5995] loop0: detected capacity change from 0 to 512 [ 186.025001][ T5995] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.071453][ T5995] EXT4-fs (loop0): orphan cleanup on readonly fs [ 186.089863][ T5995] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 186.113879][ T5995] EXT4-fs (loop0): Remounting filesystem read-only [ 186.121178][ T5995] Quota error (device loop0): write_blk: dquota write failed [ 186.129661][ T5995] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 186.139969][ T5995] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.456: Failed to acquire dquot type 0 [ 186.158138][ T5995] EXT4-fs (loop0): Remounting filesystem read-only [ 186.170639][ T5995] EXT4-fs (loop0): 1 truncate cleaned up [ 186.182761][ T5995] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000080,errors=remount-ro,nogrpid,resgid=0x0000000000000000,noinit_itable,noinit_itable,journal_dev=0x00000000000000022. Quota mode: writeback. [ 186.814725][ T6008] loop5: detected capacity change from 0 to 2048 [ 189.149004][ T6008] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.268684][ T6035] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.462: bg 0: block 234: padding at end of block bitmap is not set [ 189.476380][ T6035] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 928 with error 28 [ 189.660351][ T6035] EXT4-fs (loop5): This should not happen!! Data will be lost [ 189.660351][ T6035] [ 189.733571][ T6044] tipc: Enabling of bearer rejected, already enabled [ 190.439912][ T6035] EXT4-fs (loop5): Total free blocks count 0 [ 190.450595][ T6035] EXT4-fs (loop5): Free/Dirty block details [ 190.456544][ T6035] EXT4-fs (loop5): free_blocks=0 [ 190.670433][ T6035] EXT4-fs (loop5): dirty_blocks=944 [ 190.683801][ T6035] EXT4-fs (loop5): Block reservation details [ 190.691519][ T6035] EXT4-fs (loop5): i_reserved_data_blocks=59 [ 190.821360][ T4392] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 928 with max blocks 2 with error 28 [ 190.933201][ T4392] EXT4-fs (loop5): This should not happen!! Data will be lost [ 190.933201][ T4392] [ 192.007159][ T6060] loop5: detected capacity change from 0 to 128 [ 192.348959][ T6060] FAT-fs (loop5): Directory bread(block 32) failed [ 193.179014][ T6060] FAT-fs (loop5): Directory bread(block 33) failed [ 193.202496][ T6060] FAT-fs (loop5): Directory bread(block 34) failed [ 193.209197][ T6060] FAT-fs (loop5): Directory bread(block 35) failed [ 193.217431][ T6060] FAT-fs (loop5): Directory bread(block 36) failed [ 193.224484][ T6060] FAT-fs (loop5): Directory bread(block 37) failed [ 193.231469][ T6060] FAT-fs (loop5): Directory bread(block 38) failed [ 193.238046][ T6060] FAT-fs (loop5): Directory bread(block 39) failed [ 193.246288][ T6060] FAT-fs (loop5): Directory bread(block 40) failed [ 193.267089][ T6060] FAT-fs (loop5): Directory bread(block 41) failed [ 193.875529][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.881885][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.984052][ T6082] tipc: Enabling of bearer rejected, already enabled [ 194.758437][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 195.038460][ T6089] loop1: detected capacity change from 0 to 512 [ 195.278925][ T6089] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2775: inode #12: comm syz.1.485: corrupted xattr block 142 [ 195.295220][ T6089] EXT4-fs (loop1): Remounting filesystem read-only [ 195.337850][ T6089] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 195.363381][ T6089] EXT4-fs (loop1): 1 truncate cleaned up [ 195.369344][ T6089] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,jqfmt=vfsv0,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,errors=remount-ro,usrjquota=,noload,. Quota mode: none. [ 197.772800][ T6123] xt_TCPMSS: Only works on TCP SYN packets [ 199.783745][ T6129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.497'. [ 200.963727][ T4232] Bluetooth: hci4: command 0x0406 tx timeout [ 201.225342][ T4173] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 201.432123][ T6140] loop1: detected capacity change from 0 to 1024 [ 201.473458][ T4173] usb 1-1: Using ep0 maxpacket: 16 [ 201.543470][ T6140] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 201.552536][ T6140] EXT4-fs (loop1): orphan cleanup on readonly fs [ 201.575857][ T6140] EXT4-fs error (device loop1): ext4_free_blocks:6218: comm syz.1.496: Freeing blocks not in datazone - block = 0, count = 4096 [ 201.612805][ T4173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.643032][ T4173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.656692][ T4173] usb 1-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 201.665837][ T4173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.674622][ T6140] EXT4-fs (loop1): 1 orphan inode deleted [ 201.691586][ T4173] usb 1-1: config 0 descriptor?? [ 201.710747][ T6140] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 201.950498][ T3159] usb 1-1: USB disconnect, device number 3 [ 202.490206][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 202.511268][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 203.288597][ T6162] loop5: detected capacity change from 0 to 764 [ 203.435974][ T6162] Symlink component flag not implemented [ 203.450625][ T6162] Symlink component flag not implemented (116) [ 206.590392][ T6201] loop5: detected capacity change from 0 to 1024 [ 206.688101][ T6204] netlink: 60 bytes leftover after parsing attributes in process `syz.3.525'. [ 206.755391][ T6212] loop0: detected capacity change from 0 to 256 [ 206.853125][ T6201] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 208.190731][ T6239] loop0: detected capacity change from 0 to 1024 [ 208.274903][ T6243] "syz.4.533" (6243) uses obsolete ecb(arc4) skcipher [ 208.575854][ T6232] hfsplus: xattr search failed [ 208.730462][ T6247] loop5: detected capacity change from 0 to 2048 [ 208.762843][ T6251] loop1: detected capacity change from 0 to 1024 [ 208.819644][ T6251] EXT4-fs (loop1): Ignoring removed bh option [ 208.891547][ T6251] EXT4-fs (loop1): Ignoring removed nobh option [ 208.915047][ T6247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.924137][ T6251] EXT4-fs (loop1): Ignoring removed bh option [ 208.934242][ T6251] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 209.231919][ T6251] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,bh,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 210.968959][ T6270] binder: 6269:6270 ioctl c0306201 0 returned -14 [ 211.091757][ T6271] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 211.100060][ T6271] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 211.719850][ T6271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.760986][ T6296] fuse: Bad value for 'fd' [ 213.823207][ T4289] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 215.754807][ T4225] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 215.797348][ T4289] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 216.906309][ T6326] "syz.3.562" (6326) uses obsolete ecb(arc4) skcipher [ 216.998471][ T4289] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 217.007986][ T4289] usb 6-1: config 220 interface 0 has no altsetting 0 [ 217.135589][ T4289] usb 6-1: string descriptor 0 read error: -71 [ 217.143034][ T4289] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 217.236224][ T4289] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.328436][ T4289] usb 6-1: can't set config #220, error -71 [ 217.388300][ T4289] usb 6-1: USB disconnect, device number 6 [ 219.477120][ T6356] loop5: detected capacity change from 0 to 512 [ 219.718881][ T6356] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 219.745554][ T6356] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.842153][ T6364] input: syz1 as /devices/virtual/input/input5 [ 220.125691][ T26] audit: type=1326 audit(1760510951.136:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f82a2ec9 code=0x7ffc0000 [ 220.186199][ T4225] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 220.293870][ T26] audit: type=1326 audit(1760510951.136:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f82a2ec9 code=0x7ffc0000 [ 220.572429][ T6373] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 221.141837][ T4225] usb 6-1: Using ep0 maxpacket: 8 [ 221.150610][ T26] audit: type=1326 audit(1760510951.166:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f84f82a2ec9 code=0x7ffc0000 [ 221.173571][ T26] audit: type=1326 audit(1760510951.166:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f82a2ec9 code=0x7ffc0000 [ 221.199898][ T26] audit: type=1326 audit(1760510951.166:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f82a2ec9 code=0x7ffc0000 [ 221.284314][ T4225] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 221.439417][ T4225] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 221.529850][ T6378] "syz.4.581" (6378) uses obsolete ecb(arc4) skcipher [ 221.604148][ T4225] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.773446][ T4225] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 221.789342][ T4225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.813127][ T4225] usb 6-1: Product: syz [ 221.825517][ T4225] usb 6-1: Manufacturer: syz [ 221.840700][ T4225] usb 6-1: SerialNumber: syz [ 223.359957][ T146] ================================================================== [ 223.368518][ T146] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12c0/0x3b80 [ 223.376382][ T146] Read of size 1 at addr ffff88807c630c0a by task kworker/u5:0/146 [ 223.384351][ T146] [ 223.386698][ T146] CPU: 1 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 223.394178][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 223.404264][ T146] Workqueue: hci4 hci_rx_work [ 223.408997][ T146] Call Trace: [ 223.412421][ T146] [ 223.415380][ T146] dump_stack_lvl+0x168/0x230 [ 223.420099][ T146] ? show_regs_print_info+0x20/0x20 [ 223.425335][ T146] ? load_image+0x3b0/0x3b0 [ 223.429841][ T146] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 223.435232][ T146] print_address_description+0x60/0x2d0 [ 223.441153][ T146] ? hci_le_meta_evt+0x12c0/0x3b80 [ 223.446274][ T146] kasan_report+0xdf/0x130 [ 223.450712][ T146] ? hci_le_meta_evt+0x12c0/0x3b80 [ 223.455840][ T146] hci_le_meta_evt+0x12c0/0x3b80 [ 223.460794][ T146] ? hci_event_packet+0x2b0/0x12f0 [ 223.465924][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 223.472011][ T146] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 223.477659][ T146] ? mark_lock+0x94/0x320 [ 223.482001][ T146] ? mutex_unlock+0x10/0x10 [ 223.486519][ T146] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 223.492515][ T146] ? lock_chain_count+0x20/0x20 [ 223.497393][ T146] ? __rwlock_init+0x140/0x140 [ 223.502252][ T146] hci_event_packet+0xe05/0x12f0 [ 223.507223][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 223.512427][ T146] ? rcu_lock_release+0x20/0x20 [ 223.517289][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 223.522499][ T146] hci_rx_work+0x255/0xa10 [ 223.526930][ T146] process_one_work+0x863/0x1000 [ 223.531882][ T146] ? worker_detach_from_pool+0x240/0x240 [ 223.537521][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 223.542818][ T146] ? _raw_spin_lock_irq+0xab/0xe0 [ 223.547856][ T146] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 223.553251][ T146] ? wq_worker_running+0x97/0x170 [ 223.558277][ T146] worker_thread+0xaa8/0x12a0 [ 223.562995][ T146] kthread+0x436/0x520 [ 223.567092][ T146] ? rcu_lock_release+0x20/0x20 [ 223.571970][ T146] ? kthread_blkcg+0xd0/0xd0 [ 223.576583][ T146] ret_from_fork+0x1f/0x30 [ 223.581029][ T146] [ 223.584048][ T146] [ 223.586388][ T146] Allocated by task 6384: [ 223.590941][ T146] __kasan_kmalloc+0xb5/0xf0 [ 223.595541][ T146] __alloc_skb+0x22c/0x750 [ 223.599967][ T146] vhci_write+0xbc/0x450 [ 223.604219][ T146] vfs_write+0x712/0xd00 [ 223.608476][ T146] ksys_write+0x14d/0x250 [ 223.612802][ T146] do_syscall_64+0x4c/0xa0 [ 223.617217][ T146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.623110][ T146] [ 223.625447][ T146] The buggy address belongs to the object at ffff88807c630800 [ 223.625447][ T146] which belongs to the cache kmalloc-1k of size 1024 [ 223.639497][ T146] The buggy address is located 10 bytes to the right of [ 223.639497][ T146] 1024-byte region [ffff88807c630800, ffff88807c630c00) [ 223.653320][ T146] The buggy address belongs to the page: [ 223.659043][ T146] page:ffffea0001f18c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c630 [ 223.669212][ T146] head:ffffea0001f18c00 order:3 compound_mapcount:0 compound_pincount:0 [ 223.677556][ T146] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 223.685552][ T146] raw: 00fff00000010200 ffffea000166e200 0000000400000004 ffff888016841dc0 [ 223.694170][ T146] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 223.702758][ T146] page dumped because: kasan: bad access detected [ 223.709178][ T146] page_owner tracks the page as allocated [ 223.714886][ T146] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4389, ts 177547621771, free_ts 175793206516 [ 223.733476][ T146] get_page_from_freelist+0x1b77/0x1c60 [ 223.739047][ T146] __alloc_pages+0x1e1/0x470 [ 223.743638][ T146] new_slab+0xc0/0x4b0 [ 223.747704][ T146] ___slab_alloc+0x81e/0xdf0 [ 223.752292][ T146] __kmalloc+0x1cd/0x330 [ 223.756539][ T146] ieee802_11_parse_elems_crc+0xab/0x10c0 [ 223.762258][ T146] ieee80211_ibss_rx_queued_mgmt+0x369/0x29c0 [ 223.768327][ T146] ieee80211_iface_work+0x70e/0xc60 [ 223.773550][ T146] process_one_work+0x863/0x1000 [ 223.778494][ T146] worker_thread+0xaa8/0x12a0 [ 223.783289][ T146] kthread+0x436/0x520 [ 223.787385][ T146] ret_from_fork+0x1f/0x30 [ 223.791818][ T146] page last free stack trace: [ 223.796486][ T146] free_unref_page_prepare+0x637/0x6c0 [ 223.801951][ T146] free_unref_page+0x94/0x280 [ 223.806631][ T146] __unfreeze_partials+0x1a5/0x200 [ 223.811740][ T146] put_cpu_partial+0x12d/0x190 [ 223.816510][ T146] qlist_free_all+0x35/0x90 [ 223.821032][ T146] kasan_quarantine_reduce+0x150/0x160 [ 223.826507][ T146] __kasan_slab_alloc+0x2f/0xd0 [ 223.831383][ T146] slab_post_alloc_hook+0x4c/0x380 [ 223.836488][ T146] kmem_cache_alloc+0x100/0x290 [ 223.841335][ T146] __se_sys_flock+0x14f/0x580 [ 223.846011][ T146] do_syscall_64+0x4c/0xa0 [ 223.850421][ T146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.856310][ T146] [ 223.858627][ T146] Memory state around the buggy address: [ 223.864250][ T146] ffff88807c630b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 223.872339][ T146] ffff88807c630b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 223.880415][ T146] >ffff88807c630c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 223.888477][ T146] ^ [ 223.892890][ T146] ffff88807c630c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 223.900971][ T146] ffff88807c630d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 223.909050][ T146] ================================================================== [ 223.917127][ T146] Disabling lock debugging due to kernel taint [ 223.947140][ T146] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 223.954382][ T146] CPU: 1 PID: 146 Comm: kworker/u5:0 Tainted: G B syzkaller #0 [ 223.963263][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 223.973337][ T146] Workqueue: hci4 hci_rx_work [ 223.978067][ T146] Call Trace: [ 223.981367][ T146] [ 223.984310][ T146] dump_stack_lvl+0x168/0x230 [ 223.989011][ T146] ? show_regs_print_info+0x20/0x20 [ 223.994237][ T146] ? load_image+0x3b0/0x3b0 [ 223.998775][ T146] panic+0x2c9/0x7f0 [ 224.002700][ T146] ? bpf_jit_dump+0xd0/0xd0 [ 224.007234][ T146] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 224.013168][ T146] ? _raw_spin_unlock+0x40/0x40 [ 224.018062][ T146] ? hci_le_meta_evt+0x12c0/0x3b80 [ 224.023215][ T146] check_panic_on_warn+0x80/0xa0 [ 224.028177][ T146] ? hci_le_meta_evt+0x12c0/0x3b80 [ 224.033314][ T146] end_report+0x6d/0xf0 [ 224.037494][ T146] kasan_report+0x102/0x130 [ 224.042023][ T146] ? hci_le_meta_evt+0x12c0/0x3b80 [ 224.047161][ T146] hci_le_meta_evt+0x12c0/0x3b80 [ 224.052118][ T146] ? hci_event_packet+0x2b0/0x12f0 [ 224.057263][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 224.063344][ T146] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 224.068980][ T146] ? mark_lock+0x94/0x320 [ 224.073306][ T146] ? mutex_unlock+0x10/0x10 [ 224.077818][ T146] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 224.083820][ T146] ? lock_chain_count+0x20/0x20 [ 224.088670][ T146] ? __rwlock_init+0x140/0x140 [ 224.093430][ T146] hci_event_packet+0xe05/0x12f0 [ 224.098369][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 224.103567][ T146] ? rcu_lock_release+0x20/0x20 [ 224.108434][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 224.113644][ T146] hci_rx_work+0x255/0xa10 [ 224.118098][ T146] process_one_work+0x863/0x1000 [ 224.123040][ T146] ? worker_detach_from_pool+0x240/0x240 [ 224.128761][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 224.134049][ T146] ? _raw_spin_lock_irq+0xab/0xe0 [ 224.139160][ T146] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 224.144546][ T146] ? wq_worker_running+0x97/0x170 [ 224.149579][ T146] worker_thread+0xaa8/0x12a0 [ 224.154284][ T146] kthread+0x436/0x520 [ 224.158355][ T146] ? rcu_lock_release+0x20/0x20 [ 224.163221][ T146] ? kthread_blkcg+0xd0/0xd0 [ 224.167827][ T146] ret_from_fork+0x1f/0x30 [ 224.172270][ T146] [ 224.175571][ T146] Kernel Offset: disabled [ 224.179905][ T146] Rebooting in 86400 seconds..