last executing test programs: 17.13154861s ago: executing program 3 (id=335): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) writev(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x5, 0xa, 0xfffffffc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0xe, 0x181201) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'batadv0\x00', 0x2}) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 16.616439648s ago: executing program 3 (id=339): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x81}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}, 0x94) 15.06982325s ago: executing program 3 (id=342): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x800) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_delete(0x0) 14.187383093s ago: executing program 3 (id=343): socket(0x200000000000011, 0x4000000000080002, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x20081e, &(0x7f00000020c0), 0xfd, 0x4fb, &(0x7f0000000500)="$eJzs3U1vW1kZAODXzpeTyUwywywAIaYMAwVVdRJ3JhrNAoYVQqgSokuQ2pC4URQ7jmKnNKGL9j8gUYkVLPkBrLviJyDYsYEFEh8RqKnE4qJ7bbduajduk9hp/DzS1b3nnmu/5yS559hvEp8ARtaliLgfEZMRcSsi5lrnc60tPm9u6XWPD+6tHh7cW81Fktz4Vy6rT89Fx2NSb7WesxARP/5+xM9yL8at7+1vrlQq5Z1mcXqhUd1eqO/tX92orqyX18tbpdLy0vLip9c+KZ1aXz+oTjYPxtIGfvsXabNmW3Wd/ThNza5PPI2TGo+IH55FsCEYa/VnctgN4bXkI+K9iPgwu//nYiz7bgIAF1mSzEUy11kGAC66fJYDy+WLrVzAbOTzxWIzh/d+zOQrtXrjyu3a7tZaM1c2HxP52xuV8mIrVzgfE7m0vJQdPyuXjpSvRcS7EfHLqemsXFytVdaG+cIHAEbYW0fm//9ONed/AOCCKwy7AQDAwJn/AWD0mP8BYPSY/wFg9Jj/AWD0mP8BYPSY/wFgpPzo+vV0Sw5bn3+9dmdvd7N25+paub5ZrO6uFldrO9vF9VptPfvMnupxz1ep1baXPo7du/Pf2a43Fup7+zertd2txs3sc71vlicG0isA4GXe/eDRn3MRcf+z6WyLjrUczNVwseWH3QBgaMaG3QBgaKz2BaPrBO/xpQfgguiyRO9zChExffTqJEmSs20WcIYuf0n+H0ZVR/7fXwHDiJH/h9HVb/7/uPwA8OZJkly/a/5HvxcCAOebHD/Q4/39e63971q/HPjp2tErHp5lqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB8a6//W2ytBT4b+XyxGPF2RMzHRO72RqW8GBHvRMSfpiam0vLSkNsMAJxU/u+51vpfl+c+mj1aO5l7MpXtI+Lnv77xq7srjcbOH9Pz/356vvGwdb40jPYDAMdpz9PZvuON/OODe6vtbZDt+cf3IqLQjH94MBmHT+OPx3i2L8RERMz8J9cqN+U6chcncf9BRHyxW/9zMZvlQJornx6Nn8Z+e6Dx88/Fz2d1zX36tfjCK0dO5k6h+fBGe5SOP593u//ycSnbd7//C9kIdXKt8S99qtXDbAx8Fr89/o31GP8u9Rvj4z/8oHk0/WLdg4gvj0e0Yx92jD/t+Lke8T/qM/5fvvLVD3vVJb+JuBzd43fGWmhUtxfqe/tXN6or6+X18laptLy0vPjptU9KC1mOeqH3bPDPz66806su7f9Mj/iFY/r/jT77/9v/3frJ114S/1tf7xY/H++/JH46J36zz/grM78v9KpL46917X9b7/5f6TP+X/+2/8Ky4QDA8NT39jdXKpXyziAP2i8kBhrUwQU4SH9qzkEzuh58d1CxJuOVHpUkrxWr14hxGlk34Dxo3utJeScingy7MQAAAAAAAAAAAAAAQFeD+I+lYfcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAi+v/AQAA//+XC86k") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000c40)='./bus\x00', 0x0, 0x1000, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0xb, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000004300", "036c47c67808200400000000000000335263bdbcef549ba197fcffffdfdd7532bd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x8]}) fanotify_init(0x20, 0x0) dup(0xffffffffffffffff) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 10.736314344s ago: executing program 3 (id=351): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000d80)='./file0/file0\x00', 0x1004800, &(0x7f0000000100)=ANY=[], 0x1, 0x6cd, &(0x7f0000001380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000042000001200000000000000", @ANYRES32, @ANYBLOB="eeb700000d1b168184000000000600000000200090d3215200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000009609000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000300"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000340)="c2669b25fa72c635c6610e22337c75fe28944a0b9054320f7864932b38b901e85618e18e35eea8b51d26884621f87d563d674f2f0215819a2facc5034eebbcc86ec61a886174c4f58497d747340ea9909d7fbb687a29397f20821c4bfbb49e89f7f1000434a2670dde28b04df10666de384e1caaeff802", &(0x7f0000000000), 0x4}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup=r5, 0x11, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000140)={0x8, 0x8, 0x6c5c, 0x1}, 0x10) 10.064404803s ago: executing program 0 (id=353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 8.310826399s ago: executing program 3 (id=355): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) 7.960655884s ago: executing program 0 (id=357): unshare(0x2040600) r0 = fsopen(&(0x7f0000000300)='overlay\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='overldy\x00', &(0x7f0000000100)='context\xc0\x01\xca\x9f\x98\x88?\xa6tqB\xab`\x81\x85i\x16c)\xa5\x00\x00\x00\x00\xb9\xe7\x9fq\xf6\xc3\x92(\xac\x0e\x9c\x16*\xf9*H\xcb\x06\x0e\xa9 \x18y\x1692\xca\x82\xb1\xa0I\xce\xf5\xb3a:&\x0fm\xd2\x17\xd1\xb7b\xf8R\xc04\xe8', 0x0) 6.88290822s ago: executing program 0 (id=358): syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000140), 0x253, 0x0) 6.8823675s ago: executing program 4 (id=359): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) close(0x3) 6.646150203s ago: executing program 4 (id=361): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4075, 0xfeb}], 0x1}}], 0x1, 0x2, 0x0) 6.413808466s ago: executing program 0 (id=363): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 5.649826128s ago: executing program 4 (id=364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r2, 0x4018aee3, &(0x7f0000000140)=@attr_other={0x0, 0x30, 0x7fff, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.46722456s ago: executing program 1 (id=365): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x800) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) timer_delete(0x0) 5.444945651s ago: executing program 2 (id=366): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5.292009853s ago: executing program 0 (id=367): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) madvise(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3) 5.114593616s ago: executing program 1 (id=368): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x38}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@ifindex, 0xffffffffffffffff, 0xe, 0x200f, 0xffffffffffffffff, @value=r1}, 0x20) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 5.040968337s ago: executing program 2 (id=369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x81}]}}}}}}}}, 0x0) 5.033233757s ago: executing program 4 (id=370): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) io_setup(0x2278, &(0x7f0000000180)) 4.651933762s ago: executing program 2 (id=371): r0 = socket(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="eedeeb176f", 0x5}], 0x1}}], 0x1, 0x200280d9) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10) r1 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) fchdir(0xffffffffffffffff) creat(0x0, 0x6a) fchdir(r1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r5, 0x0, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000200000800040001000000", 0x24) 3.050445906s ago: executing program 1 (id=372): r0 = socket$inet(0x2, 0x1, 0x7) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000180)=0xfffffff6, 0x4) r1 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in=@dev={0xac, 0x14, 0x14, 0x2d}, @in6=@private0, 0x4e20, 0x0, 0x4e23, 0x9, 0x2, 0x20, 0x0, 0x3c}, {0x2000000000, 0x11, 0x1, 0x0, 0xfffffffffffffffc, 0x9, 0xfffffffffffffffe, 0x7}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0xff, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x8}, 0x4d3, 0x32}, 0xa, @in6=@mcast1, 0x3504, 0x1, 0x0, 0x0, 0x4, 0xfffffffd, 0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x9df}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpgrp(r3) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x100) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_int(r7, 0x107, 0xf, 0x0, 0x0) r8 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x9, 0x12) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1880c20, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) 3.045095126s ago: executing program 2 (id=373): syz_open_procfs(0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000140), 0x253, 0x0) 2.825795799s ago: executing program 4 (id=374): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4075, 0xfeb}], 0x1}}], 0x1, 0x2, 0x0) 1.726307955s ago: executing program 4 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x3, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040804}, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/29, 0x1d, 0x5f) timer_delete(0x0) 1.048103025s ago: executing program 1 (id=376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r1, @ANYBLOB="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"/659, @ANYRES32=r3], 0x378}}, 0x0) 1.047950245s ago: executing program 0 (id=377): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 545.414062ms ago: executing program 1 (id=378): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x800) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) timer_delete(0x0) 229.261677ms ago: executing program 2 (id=379): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 109.113848ms ago: executing program 2 (id=380): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noquota}, {@noload}]}, 0x3, 0x430, &(0x7f0000000d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x78, r1, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xc185fac8810659da}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4044850) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) mount(&(0x7f00000001c0), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007cd6ba475b53ef2b079c4ac833cb145777aa99a05fff6730be6ec2145b7c4d83d3f0486e23c96e459fdc6da38bae59c8ef6bfdaf5ed032c945840b44a5ca4a0fbce30e74c33e63b6442db3be8c8bdea6aa50c56300"/120], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x1) 0s ago: executing program 1 (id=381): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000100)) getdents64(r0, &(0x7f0000000080)=""/108, 0x6c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='io_uring_defer\x00', r0}, 0x18) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x80000001, 0x20e880) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x1ac) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) ioprio_set$pid(0x2, 0x0, 0x4007) syz_clone(0x88280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.213' (ED25519) to the list of known hosts. [ 66.593164][ T4158] cgroup: Unknown subsys name 'net' [ 66.730203][ T4158] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.317252][ T4158] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.860540][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 70.021466][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 70.064320][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 70.120085][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.131345][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.140146][ T4171] device bridge_slave_0 entered promiscuous mode [ 70.151191][ T4173] chnl_net:caif_netlink_parms(): no params data found [ 70.176368][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.185256][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.193816][ T4171] device bridge_slave_1 entered promiscuous mode [ 70.254540][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.264124][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 70.274285][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.281391][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.290681][ T4170] device bridge_slave_0 entered promiscuous mode [ 70.308799][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.330871][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.338641][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.346978][ T4170] device bridge_slave_1 entered promiscuous mode [ 70.393990][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.401446][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.410943][ T4172] device bridge_slave_0 entered promiscuous mode [ 70.448377][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.456026][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.464841][ T4172] device bridge_slave_1 entered promiscuous mode [ 70.475111][ T4171] team0: Port device team_slave_0 added [ 70.503049][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.514930][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.527089][ T4171] team0: Port device team_slave_1 added [ 70.573376][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.582960][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.590185][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.600031][ T4173] device bridge_slave_0 entered promiscuous mode [ 70.630949][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.641281][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.649354][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.657551][ T4173] device bridge_slave_1 entered promiscuous mode [ 70.676969][ T4170] team0: Port device team_slave_0 added [ 70.684575][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.691577][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.718322][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.757174][ T4170] team0: Port device team_slave_1 added [ 70.764973][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.772280][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.799301][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.824967][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.832275][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.840446][ T4169] device bridge_slave_0 entered promiscuous mode [ 70.863457][ T4172] team0: Port device team_slave_0 added [ 70.872491][ T4173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.882798][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.889885][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.898318][ T4169] device bridge_slave_1 entered promiscuous mode [ 70.919100][ T4172] team0: Port device team_slave_1 added [ 70.925874][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.932920][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.959146][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.972263][ T4173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.981799][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.988764][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.015173][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.088541][ T4171] device hsr_slave_0 entered promiscuous mode [ 71.095628][ T4171] device hsr_slave_1 entered promiscuous mode [ 71.122678][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.132959][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.139931][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.166889][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.179512][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.186671][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.212782][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.234726][ T4173] team0: Port device team_slave_0 added [ 71.243876][ T4170] device hsr_slave_0 entered promiscuous mode [ 71.250807][ T4170] device hsr_slave_1 entered promiscuous mode [ 71.257985][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.265980][ T4170] Cannot create hsr debugfs directory [ 71.273565][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.302417][ T4173] team0: Port device team_slave_1 added [ 71.326426][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.333077][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.351639][ T4169] team0: Port device team_slave_0 added [ 71.392402][ T4169] team0: Port device team_slave_1 added [ 71.405632][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.412920][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.439540][ T4173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.460555][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.467714][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.494523][ T4173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.535706][ T4172] device hsr_slave_0 entered promiscuous mode [ 71.542814][ T4172] device hsr_slave_1 entered promiscuous mode [ 71.549342][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.557146][ T4172] Cannot create hsr debugfs directory [ 71.563047][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 71.563047][ T4160] Bluetooth: hci0: command 0x0409 tx timeout [ 71.563617][ T4160] Bluetooth: hci1: command 0x0409 tx timeout [ 71.569248][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 71.588912][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 71.596893][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.604287][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.630478][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.645628][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.652885][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.679036][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.788615][ T4173] device hsr_slave_0 entered promiscuous mode [ 71.795433][ T4173] device hsr_slave_1 entered promiscuous mode [ 71.802559][ T4173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.810209][ T4173] Cannot create hsr debugfs directory [ 71.861003][ T4169] device hsr_slave_0 entered promiscuous mode [ 71.867866][ T4169] device hsr_slave_1 entered promiscuous mode [ 71.874715][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.882993][ T4169] Cannot create hsr debugfs directory [ 72.051257][ T4171] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.062243][ T4171] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.072837][ T4171] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.088702][ T4171] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.167620][ T4170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.186887][ T4170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.211020][ T4170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.224779][ T4170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.279231][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.295539][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.307749][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.327168][ T4172] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.341696][ T4172] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.354990][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.370601][ T4172] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.380107][ T4172] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.407168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.418280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.429239][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.436602][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.447565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.473577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.483128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.495009][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.502168][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.510837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.527825][ T4169] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.543627][ T4169] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.555867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.577458][ T4169] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.590884][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.600143][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.629535][ T4169] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.640672][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.665713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.675927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.684994][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.693669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.729954][ T4173] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.743832][ T4173] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.759235][ T4173] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.779325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.788987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.806204][ T4173] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.824106][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.847985][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.887989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.902439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.915697][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.933932][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.954616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.969041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.980168][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.987351][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.996141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.021442][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.038645][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.046726][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.056260][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.070729][ T831] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.078076][ T831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.088108][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.097690][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.136316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.146638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.156705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.166035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.174903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.187094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.197110][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.204245][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.212954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.221833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.230303][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.237507][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.248225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.257514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.267227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.276282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.300130][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.339152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.348169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.357978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.366859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.375557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.384708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.393509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.401302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.409644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.418567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.427085][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.434258][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.442378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.451584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.460773][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.468684][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.476858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.486340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.494992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.504155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.513495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.523242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.531678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.540494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.549747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.558070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.575789][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.591153][ T4170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.602603][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.617542][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.642757][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 73.649025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.657529][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 73.659209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.670434][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 73.679257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.680217][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 73.688522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.694058][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 73.703039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.721563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.731454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.740963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.759526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.773656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.833860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.862799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.871622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.882074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.903259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.911715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.921240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.930436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.939955][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.950666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.976819][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.996698][ T4171] device veth0_vlan entered promiscuous mode [ 74.053518][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.066332][ T4171] device veth1_vlan entered promiscuous mode [ 74.138078][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.159360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.168804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.177657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.186664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.200473][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.227833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.243374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.283041][ T4171] device veth0_macvtap entered promiscuous mode [ 74.297328][ T4171] device veth1_macvtap entered promiscuous mode [ 74.307873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.317203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.326621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.334786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.342766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.351501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.360602][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.367875][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.376595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.386034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.398673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.407939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.417163][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.424318][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.439822][ T4170] device veth0_vlan entered promiscuous mode [ 74.464665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.473674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.483078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.491716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.501289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.509819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.524608][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.536327][ T4170] device veth1_vlan entered promiscuous mode [ 74.561364][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.570229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.578886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.586966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.595284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.606686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.616399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.626665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.637279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.646886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.676948][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.686045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.699573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.708894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.717993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.726884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.735797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.744968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.759550][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.797027][ T4173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.817002][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.830181][ T4171] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.840270][ T4171] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.851247][ T4171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.864623][ T4171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.876704][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.886017][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.907365][ T4170] device veth0_macvtap entered promiscuous mode [ 74.920400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.930725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.940302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.951339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.961327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.983124][ T4170] device veth1_macvtap entered promiscuous mode [ 75.038692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.068416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.079046][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.111654][ T4172] device veth0_vlan entered promiscuous mode [ 75.130814][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.149159][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.163123][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.170526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.180321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.190216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.199725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.244588][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.259696][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.278947][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.309286][ T831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.315175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.318208][ T831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.328373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.347028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.359124][ T4170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.369128][ T4170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.378512][ T4170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.387748][ T4170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.399327][ T4172] device veth1_vlan entered promiscuous mode [ 75.426141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.436947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.446807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.458269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.489465][ T4169] device veth0_vlan entered promiscuous mode [ 75.500771][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.513308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.523618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.532744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.540750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.567781][ T831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.583254][ T4169] device veth1_vlan entered promiscuous mode [ 75.594907][ T831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.612164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.621082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.637188][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.646752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.684135][ T4172] device veth0_macvtap entered promiscuous mode [ 75.704132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.722869][ T4250] Bluetooth: hci0: command 0x040f tx timeout [ 75.729148][ T4250] Bluetooth: hci4: command 0x040f tx timeout [ 75.736378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.741065][ T4250] Bluetooth: hci1: command 0x040f tx timeout [ 75.750298][ T4250] Bluetooth: hci2: command 0x040f tx timeout [ 75.758120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.762833][ T4250] Bluetooth: hci3: command 0x040f tx timeout [ 75.773295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.783030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.792669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.804221][ T4169] device veth0_macvtap entered promiscuous mode [ 75.828755][ T4172] device veth1_macvtap entered promiscuous mode [ 75.876117][ T4173] device veth0_vlan entered promiscuous mode [ 76.142030][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 76.150997][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 76.211522][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.282103][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 76.291860][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 76.301789][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 76.331058][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 76.340498][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 76.350195][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 76.359944][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.690147][ T4169] device veth1_macvtap entered promiscuous mode [ 77.715198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.732615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.746655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.756455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.770455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.790669][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.808970][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.819544][ T4227] Bluetooth: hci3: command 0x0419 tx timeout [ 77.831795][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.832081][ T4227] Bluetooth: hci2: command 0x0419 tx timeout [ 77.851841][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.853989][ T4227] Bluetooth: hci1: command 0x0419 tx timeout [ 77.872576][ T4227] Bluetooth: hci4: command 0x0419 tx timeout [ 77.874666][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.879292][ T4227] Bluetooth: hci0: command 0x0419 tx timeout [ 77.913944][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.933476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.948064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.957822][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.971097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.989750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.000356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.025273][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.038249][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.049146][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.060418][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.073515][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.104193][ T4173] device veth1_vlan entered promiscuous mode [ 78.113256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.127303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.150586][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.170837][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.181337][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.192790][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.203313][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.214285][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.226823][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.275062][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.618840][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.637527][ T4172] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.660446][ T4172] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.669755][ T4172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.682396][ T4172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.707154][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.725140][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.739061][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.756399][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.768148][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.785272][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.799373][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.813540][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.829590][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.883004][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.891366][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.901999][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.925315][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.934503][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.956889][ T4169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.974280][ T4169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.986191][ T4169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.998591][ T4169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.032938][ T4173] device veth0_macvtap entered promiscuous mode [ 80.081426][ T4173] device veth1_macvtap entered promiscuous mode [ 80.167978][ T831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.205242][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.218665][ T831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.229749][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.244822][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.255898][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.267611][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.279306][ T4291] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.297387][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.308365][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.319454][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.336530][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.374813][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.394014][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.412881][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.443355][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.453041][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.471624][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.496046][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.524196][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.539482][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.553164][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.564661][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.575994][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.588154][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.601387][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.797628][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.806915][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.820241][ T831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.835858][ T1238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.859161][ T1238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.869083][ T4234] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.877100][ T831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.078167][ T4300] loop3: detected capacity change from 0 to 1024 [ 81.330554][ T4173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.425463][ T4173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.435225][ T4173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.447196][ T4173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.458649][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.470538][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.481072][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.486233][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.492092][ T4234] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.492209][ T4234] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.543029][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.572362][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.580383][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.682945][ T4234] usb 3-1: config 0 descriptor?? [ 81.759124][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.070283][ T831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.213715][ T831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.982868][ T4301] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.240212][ T4234] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 85.273051][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.344203][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.356496][ T4234] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 85.370160][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.389826][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.531004][ T4320] loop3: detected capacity change from 0 to 1024 [ 85.562786][ T4317] loop0: detected capacity change from 0 to 2048 [ 85.636692][ T4322] process 'syz.4.10' launched './bus' with NULL argv: empty string added [ 85.645373][ T4320] ======================================================= [ 85.645373][ T4320] WARNING: The mand mount option has been deprecated and [ 85.645373][ T4320] and is ignored by this kernel. Remove the mand [ 85.645373][ T4320] option from the mount to silence this warning. [ 85.645373][ T4320] ======================================================= [ 85.665772][ T23] usb 3-1: USB disconnect, device number 2 [ 87.645475][ T1108] cfg80211: failed to load regulatory.db [ 87.745899][ T4317] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.762193][ T4320] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.112943][ T4321] fido_id[4321]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 88.749921][ T4346] loop0: detected capacity change from 0 to 1024 [ 88.941917][ T4348] loop2: detected capacity change from 0 to 1024 [ 88.955464][ T4346] EXT4-fs (loop0): Ignoring removed orlov option [ 89.021400][ T4346] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 89.408853][ T4352] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2825: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 90.020228][ T4348] attempt to access beyond end of device [ 90.020228][ T4348] loop2: rw=0, want=5780, limit=1024 [ 90.111107][ T4348] Buffer I/O error on dev loop2, logical block 2889, async page read [ 90.127724][ T4348] attempt to access beyond end of device [ 90.127724][ T4348] loop2: rw=0, want=393218, limit=1024 [ 90.140549][ T4348] Buffer I/O error on dev loop2, logical block 196608, async page read [ 90.150264][ T4348] attempt to access beyond end of device [ 90.150264][ T4348] loop2: rw=0, want=393220, limit=1024 [ 90.164045][ T4348] Buffer I/O error on dev loop2, logical block 196609, async page read [ 90.242132][ T4348] attempt to access beyond end of device [ 90.242132][ T4348] loop2: rw=0, want=393222, limit=1024 [ 90.315312][ T4354] loop0: detected capacity change from 0 to 512 [ 90.339917][ T4356] netlink: 'syz.3.18': attribute type 1 has an invalid length. [ 90.371111][ T4356] netlink: 'syz.3.18': attribute type 2 has an invalid length. [ 90.410565][ T4348] Buffer I/O error on dev loop2, logical block 196610, async page read [ 90.463302][ T4354] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.19: inode #1: comm syz.0.19: iget: illegal inode # [ 90.488054][ T4348] attempt to access beyond end of device [ 90.488054][ T4348] loop2: rw=0, want=393224, limit=1024 [ 90.574903][ T4354] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.19: error while reading EA inode 1 err=-117 [ 90.587618][ T4348] Buffer I/O error on dev loop2, logical block 196611, async page read [ 90.620870][ T4359] loop3: detected capacity change from 0 to 1024 [ 90.650452][ T4348] attempt to access beyond end of device [ 90.650452][ T4348] loop2: rw=0, want=393226, limit=1024 [ 90.681713][ T4354] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.19: inode #1: comm syz.0.19: iget: illegal inode # [ 90.699596][ T4348] Buffer I/O error on dev loop2, logical block 196612, async page read [ 90.735045][ T4354] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.19: error while reading EA inode 1 err=-117 [ 90.767253][ T4354] EXT4-fs (loop0): 1 orphan inode deleted [ 90.780967][ T4361] loop1: detected capacity change from 0 to 1024 [ 90.787614][ T4354] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 90.816831][ T4348] attempt to access beyond end of device [ 90.816831][ T4348] loop2: rw=0, want=393228, limit=1024 [ 90.839684][ T4348] Buffer I/O error on dev loop2, logical block 196613, async page read [ 90.850337][ T4348] attempt to access beyond end of device [ 90.850337][ T4348] loop2: rw=0, want=393230, limit=1024 [ 90.917358][ T4348] Buffer I/O error on dev loop2, logical block 196614, async page read [ 91.566496][ T4348] attempt to access beyond end of device [ 91.566496][ T4348] loop2: rw=0, want=393232, limit=1024 [ 91.700839][ T4361] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.566733][ T4363] ODEBUG: Out of memory. ODEBUG disabled [ 92.648168][ T4348] Buffer I/O error on dev loop2, logical block 196615, async page read [ 93.254971][ T4348] attempt to access beyond end of device [ 93.254971][ T4348] loop2: rw=0, want=393234, limit=1024 [ 93.407458][ T4348] Buffer I/O error on dev loop2, logical block 196616, async page read [ 93.922291][ T26] audit: type=1326 audit(1751541000.460:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4375 comm="syz.3.24" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc7d918929 code=0x0 [ 95.251403][ T4390] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 97.477465][ T4410] loop2: detected capacity change from 0 to 8 [ 97.555873][ T26] audit: type=1800 audit(1751541004.100:3): pid=4410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.34" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 98.851749][ C1] sched: RT throttling activated [ 101.437682][ T4440] futex_wake_op: syz.0.44 tries to shift op by -1; fix this program [ 104.442885][ T4453] tipc: Started in network mode [ 104.448288][ T4453] tipc: Node identity b2bfa8776bac, cluster identity 4711 [ 104.482022][ T4453] tipc: Enabled bearer , priority 0 [ 104.512939][ T4453] device syzkaller0 entered promiscuous mode [ 104.563109][ T4453] tipc: Resetting bearer [ 104.608153][ T4452] tipc: Resetting bearer [ 104.652513][ T4452] tipc: Disabling bearer [ 104.671399][ T4455] loop3: detected capacity change from 0 to 1024 [ 104.775045][ T4455] EXT4-fs (loop3): Ignoring removed orlov option [ 104.781629][ T4455] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 105.000378][ T4455] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,journal_dev=0x0000000000000001,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 105.190983][ T4475] tipc: Enabling of bearer rejected, failed to enable media [ 105.482506][ T4487] tipc: Started in network mode [ 105.487643][ T4487] tipc: Node identity 6ec8ee116132, cluster identity 4711 [ 105.495737][ T4487] tipc: Enabled bearer , priority 0 [ 105.507804][ T4487] tipc: Resetting bearer [ 105.516518][ T4486] tipc: Disabling bearer [ 105.559994][ T4489] netlink: 32 bytes leftover after parsing attributes in process `syz.1.55'. [ 105.627737][ T4491] loop1: detected capacity change from 0 to 1024 [ 105.966539][ T4494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.57'. [ 105.997754][ T4491] hfsplus: Filesystem is marked locked, mounting read-only. [ 106.040767][ T4491] hfsplus: filesystem is marked locked, leaving read-only. [ 106.257324][ T4509] tipc: Enabled bearer , priority 0 [ 106.278739][ T4509] device syzkaller0 entered promiscuous mode [ 106.333367][ T4509] tipc: Resetting bearer [ 106.358687][ T4508] tipc: Resetting bearer [ 106.590131][ T4508] tipc: Disabling bearer [ 107.268970][ T4517] loop1: detected capacity change from 0 to 2048 [ 107.335710][ T4517] loop1: p1 < > p4 [ 107.378948][ T4517] loop1: p4 size 8388608 extends beyond EOD, truncated [ 107.566745][ T4540] tipc: Enabled bearer , priority 0 [ 107.578625][ T4540] tipc: Resetting bearer [ 107.614835][ T4539] tipc: Disabling bearer [ 107.719390][ T4544] loop3: detected capacity change from 0 to 1024 [ 107.854993][ T4544] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,norecovery,min_batch_time=0x0000000010000005,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,inode_readahead_blks=0x0000000,errors=continue. Quota mode: none. [ 108.041660][ T4544] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2755: inode #13: comm syz.3.71: corrupted in-inode xattr [ 108.208011][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 108.230300][ T4184] udevd[4184]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 108.355289][ T4550] netlink: 112 bytes leftover after parsing attributes in process `syz.4.74'. [ 108.755914][ T4566] tipc: Enabling of bearer rejected, failed to enable media [ 108.852753][ T4568] tipc: Started in network mode [ 108.882724][ T4568] tipc: Node identity 5aad19e67d7, cluster identity 4711 [ 108.939790][ T4568] tipc: Enabled bearer , priority 0 [ 108.967565][ T4572] device syzkaller0 entered promiscuous mode [ 109.028794][ T4576] tipc: Started in network mode [ 109.035584][ T4576] tipc: Node identity 6644bbcedbcd, cluster identity 4711 [ 109.062823][ T4576] tipc: Enabled bearer , priority 0 [ 109.095190][ T4568] tipc: Resetting bearer [ 109.124669][ T4576] tipc: Resetting bearer [ 109.152996][ T4562] tipc: Resetting bearer [ 109.212487][ T4562] tipc: Disabling bearer [ 109.300859][ T4573] tipc: Disabling bearer [ 109.621548][ T4595] loop1: detected capacity change from 0 to 1024 [ 110.208958][ T4613] tipc: Enabling of bearer rejected, failed to enable media [ 110.410584][ T4620] tipc: Enabled bearer , priority 0 [ 110.418354][ T4620] device syzkaller0 entered promiscuous mode [ 110.430781][ T4618] tipc: Resetting bearer [ 110.597211][ T26] audit: type=1326 audit(1751541017.140:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4599 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa731d929 code=0x7fc00000 [ 111.217507][ T4618] tipc: Disabling bearer [ 111.422879][ T4642] device syzkaller0 entered promiscuous mode [ 114.181352][ T4670] tipc: Enabling of bearer rejected, failed to enable media [ 114.862081][ T4695] device syzkaller0 entered promiscuous mode [ 115.427647][ T4705] netlink: 104 bytes leftover after parsing attributes in process `syz.1.118'. [ 116.458983][ T4710] tipc: Started in network mode [ 116.472900][ T4710] tipc: Node identity 26c0312c8531, cluster identity 4711 [ 116.491296][ T4710] tipc: Enabled bearer , priority 0 [ 116.620017][ T4709] tipc: Disabling bearer [ 118.120638][ T4728] tipc: Enabling of bearer rejected, failed to enable media [ 118.237351][ T4730] netlink: 96 bytes leftover after parsing attributes in process `syz.0.133'. [ 118.932149][ T4745] device syzkaller0 entered promiscuous mode [ 120.591359][ T4765] netlink: 96 bytes leftover after parsing attributes in process `syz.4.144'. [ 120.622693][ T4759] tipc: Enabled bearer , priority 0 [ 120.729046][ T4770] device syzkaller0 entered promiscuous mode [ 120.824304][ T4772] tipc: Enabling of bearer rejected, failed to enable media [ 120.904656][ T4757] tipc: Resetting bearer [ 120.996475][ T4757] tipc: Disabling bearer [ 121.419545][ T4793] loop1: detected capacity change from 0 to 2048 [ 121.494498][ T4793] UDF-fs: bad mount option "ÿÿÿÿ" or missing value [ 121.701886][ T4801] loop1: detected capacity change from 0 to 1024 [ 122.062446][ T4807] device syzkaller0 entered promiscuous mode [ 122.077169][ T4809] netlink: 96 bytes leftover after parsing attributes in process `syz.2.159'. [ 122.636724][ T4824] tipc: Enabled bearer , priority 0 [ 122.665543][ T4829] tipc: Enabled bearer , priority 0 [ 122.684084][ T4824] device syzkaller0 entered promiscuous mode [ 122.737569][ T4829] tipc: Resetting bearer [ 122.782140][ T4826] tipc: Disabling bearer [ 122.799087][ T4823] tipc: Resetting bearer [ 122.894450][ T4823] tipc: Disabling bearer [ 123.371361][ T4842] netlink: 96 bytes leftover after parsing attributes in process `syz.2.170'. [ 123.603140][ T4847] device syzkaller0 entered promiscuous mode [ 123.983137][ T4860] tipc: Enabled bearer , priority 0 [ 124.024846][ T4860] tipc: Resetting bearer [ 124.098049][ T4859] tipc: Disabling bearer [ 124.169025][ T4866] tipc: Enabled bearer , priority 0 [ 124.231542][ T4866] device syzkaller0 entered promiscuous mode [ 125.688066][ T13] tipc: Node number set to 3179920334 [ 125.714995][ T4865] tipc: Resetting bearer [ 125.739080][ T4299] Bluetooth: hci1: command 0x0406 tx timeout [ 125.764535][ T4865] tipc: Disabling bearer [ 125.805316][ T4874] netlink: 96 bytes leftover after parsing attributes in process `syz.2.184'. [ 125.929181][ T4878] loop4: detected capacity change from 0 to 128 [ 125.967738][ T4876] loop1: detected capacity change from 0 to 2048 [ 126.100715][ T4878] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 126.141143][ T4878] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.173712][ T4876] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 126.245908][ T4882] device syzkaller0 entered promiscuous mode [ 126.257425][ T4876] UDF-fs: Scanning with blocksize 512 failed [ 126.326321][ T4876] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.452840][ T4876] Zero length message leads to an empty skb [ 130.486834][ T4911] netlink: 96 bytes leftover after parsing attributes in process `syz.2.199'. [ 132.860665][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.867798][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.133066][ T4939] netlink: 96 bytes leftover after parsing attributes in process `syz.1.211'. [ 133.179911][ T4942] loop4: detected capacity change from 0 to 512 [ 133.305197][ T4942] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 133.327677][ T4942] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.355809][ T4945] binder: Bad value for 'max' [ 133.361985][ T4946] netlink: 'syz.1.214': attribute type 9 has an invalid length. [ 133.385359][ T4946] netlink: 'syz.1.214': attribute type 6 has an invalid length. [ 133.394199][ T4942] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 133.422275][ T4942] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=384ec01c, mo2=0002] [ 133.542302][ T4942] System zones: 1-12 [ 133.622824][ T4942] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 133.682041][ T4942] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 133.691104][ T4942] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,nomblk_io_submit,usrjquota=,data_err=abort,quota,jqfmt=vfsv0,barrier=0x000000000000d95a,usrjquota=,,errors=continue. Quota mode: writeback. [ 133.993202][ T4942] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 3: comm syz.4.213: lblock 0 mapped to illegal pblock 3 (length 1) [ 134.132261][ T4942] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.213: error -117 reading directory block [ 134.230021][ T4958] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 3: comm syz.4.213: lblock 0 mapped to illegal pblock 3 (length 1) [ 134.353669][ T4958] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.213: error -117 reading directory block [ 136.083007][ T4970] loop4: detected capacity change from 0 to 1024 [ 136.161156][ T4972] device syzkaller0 entered promiscuous mode [ 136.523515][ T4970] EXT4-fs (loop4): Test dummy encryption mode enabled [ 136.532777][ T4970] EXT4-fs (loop4): Test dummy encryption mode enabled [ 136.597302][ T4970] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,acl,stripe=0x0000000000000009,norecovery,test_dummy_encryption,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 136.817896][ T4970] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 139.010342][ T5021] loop4: detected capacity change from 0 to 8 [ 139.097945][ T26] audit: type=1800 audit(1751541045.640:5): pid=5021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.241" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 139.385389][ T23] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 139.852034][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 140.801904][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 140.912030][ T23] usb 1-1: config 14 has an invalid interface number: 18 but max is 0 [ 140.942037][ T23] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 140.992575][ T23] usb 1-1: config 14 has no interface number 0 [ 142.358816][ T23] usb 1-1: config 14 interface 18 has no altsetting 0 [ 142.562137][ T23] usb 1-1: New USB device found, idVendor=3980, idProduct=0003, bcdDevice=de.62 [ 142.582150][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.601862][ T23] usb 1-1: Product: syz [ 144.329721][ T23] usb 1-1: Manufacturer: syz [ 144.343009][ T23] usb 1-1: SerialNumber: syz [ 144.442051][ T23] usb 1-1: can't set config #14, error -71 [ 144.562116][ T23] usb 1-1: USB disconnect, device number 2 [ 145.577669][ T5052] netlink: 96 bytes leftover after parsing attributes in process `syz.3.225'. [ 149.037285][ T5074] loop2: detected capacity change from 0 to 512 [ 149.188464][ T5074] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 149.197205][ T5074] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 149.565314][ T5074] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 149.768965][ T5074] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 181665796)! [ 149.885691][ T5074] EXT4-fs (loop2): group descriptors corrupted! [ 150.186916][ T5084] netlink: 96 bytes leftover after parsing attributes in process `syz.0.265'. [ 150.283265][ T5086] loop1: detected capacity change from 0 to 512 [ 151.704149][ T5086] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 151.806142][ T5086] EXT4-fs (loop1): 1 truncate cleaned up [ 151.841494][ T5086] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,grpquota,noblock_validity,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 158.144833][ T5117] netlink: 96 bytes leftover after parsing attributes in process `syz.4.277'. [ 159.623836][ T5125] loop9: detected capacity change from 0 to 7 [ 159.638841][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.643691][ T5127] loop0: detected capacity change from 0 to 1024 [ 159.650808][ C1] buffer_io_error: 126 callbacks suppressed [ 159.650825][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 159.743013][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.754090][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 159.794078][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.805405][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 159.817529][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.820473][ T5130] device syzkaller0 entered promiscuous mode [ 159.828621][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 159.840206][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.854144][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 159.895523][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.907240][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 159.940976][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.952056][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 159.960728][ T5125] ldm_validate_partition_table(): Disk read failed. [ 159.971113][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.982616][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 159.991136][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.002359][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.021650][ T5127] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.077967][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.089437][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.140393][ T5125] Dev loop9: unable to read RDB block 0 [ 160.151775][ T26] audit: type=1800 audit(1751541066.690:6): pid=5127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.268" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 160.208521][ T5125] loop9: unable to read partition table [ 160.246209][ T5125] loop9: partition table beyond EOD, truncated [ 160.302324][ T5125] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 160.302324][ T5125] ) failed (rc=-5) [ 160.378644][ T5139] loop3: detected capacity change from 0 to 2048 [ 162.278713][ T5157] capability: warning: `syz.1.291' uses deprecated v2 capabilities in a way that may be insecure [ 162.396384][ T5162] loop0: detected capacity change from 0 to 512 [ 162.467777][ T5162] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 162.505203][ T5164] loop1: detected capacity change from 0 to 2048 [ 162.544045][ T5162] EXT4-fs (loop0): 1 truncate cleaned up [ 162.564997][ T4342] loop1: p1 < > p3 [ 162.572228][ T4299] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 162.585378][ T4342] loop1: p3 size 134217728 extends beyond EOD, truncated [ 162.594178][ T5162] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.639909][ T5164] loop1: p1 < > p3 [ 162.658731][ T5164] loop1: p3 size 134217728 extends beyond EOD, truncated [ 162.858721][ T5172] kvm: emulating exchange as write [ 162.891876][ T4299] usb 5-1: Using ep0 maxpacket: 8 [ 163.073480][ T4299] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 163.092130][ T4299] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 163.149750][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.210517][ T4299] usb 5-1: config 0 descriptor?? [ 163.221849][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 163.472030][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 163.652055][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 163.714319][ T4299] corsair 0003:1B1C:1B09.0002: unbalanced collection at end of report description [ 164.457247][ T1108] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 164.481943][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.618030][ T1108] usb 1-1: config 0 descriptor?? [ 164.923649][ T4299] corsair 0003:1B1C:1B09.0002: parse failed [ 165.325709][ T4299] corsair: probe of 0003:1B1C:1B09.0002 failed with error -22 [ 165.342950][ T4299] usb 5-1: USB disconnect, device number 3 [ 166.388791][ T5203] loop0: detected capacity change from 0 to 8 [ 166.411828][ T1108] usbhid 1-1:0.0: can't add hid device: -71 [ 166.418438][ T1108] usbhid: probe of 1-1:0.0 failed with error -71 [ 166.465853][ T1108] usb 1-1: USB disconnect, device number 3 [ 166.512606][ T5203] SQUASHFS error: zlib decompression failed, data probably corrupt [ 166.520962][ T5203] SQUASHFS error: Failed to read block 0x4de: -5 [ 166.542460][ T5203] SQUASHFS error: Failed to read block 0x4e2: -5 [ 166.554148][ T5214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 166.572021][ T5203] SQUASHFS error: Failed to read block 0x9ca: -5 [ 166.578480][ T5203] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 167.876425][ T5203] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 167.932149][ T5203] SQUASHFS error: Failed to read block 0x535f2: -5 [ 167.973264][ T26] audit: type=1800 audit(1751541074.520:7): pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.305" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 170.575059][ T5238] device syzkaller0 entered promiscuous mode [ 170.802405][ T5245] device batadv_slave_1 entered promiscuous mode [ 170.810717][ T5242] device batadv_slave_1 left promiscuous mode [ 174.161381][ T5278] Error parsing options; rc = [-22] [ 175.470670][ T5283] netlink: 88 bytes leftover after parsing attributes in process `syz.4.330'. [ 176.881126][ T5291] device syzkaller0 entered promiscuous mode [ 176.957024][ T5293] loop4: detected capacity change from 0 to 4096 [ 177.087626][ T5293] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 177.316610][ T5293] EXT4-fs (loop4): shut down requested (2) [ 177.578898][ T5304] loop2: detected capacity change from 0 to 512 [ 178.917569][ T4235] Bluetooth: hci4: command 0x0405 tx timeout [ 179.011970][ T5304] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 179.104104][ T5304] EXT4-fs (loop2): 1 truncate cleaned up [ 179.110221][ T5304] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000001,noquota,noload,,errors=continue. Quota mode: none. [ 181.281580][ T5329] loop3: detected capacity change from 0 to 512 [ 182.958735][ T5329] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 182.970557][ T5329] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.373438][ T5348] loop2: detected capacity change from 0 to 512 [ 183.415513][ T5348] EXT4-fs (loop2): Ignoring removed oldalloc option [ 183.460925][ T5348] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 183.505643][ T5348] EXT4-fs (loop2): orphan cleanup on readonly fs [ 183.526946][ T5348] Quota error (device loop2): find_tree_dqentry: Getting block too big (196613 >= 6) [ 183.537166][ T5348] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 183.547058][ T5348] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.350: Failed to acquire dquot type 1 [ 183.567424][ T5348] EXT4-fs (loop2): 1 truncate cleaned up [ 183.578677][ T5348] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,jqfmt=vfsv1,abort,nodiscard,nodiscard,,errors=continue. Quota mode: writeback. [ 183.609576][ T5348] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.350: iget: bad i_size value: 360287970189639690 [ 184.036847][ T26] audit: type=1326 audit(1751541090.580:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5347 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc85dd5929 code=0x7fc00000 [ 184.317236][ T5357] loop3: detected capacity change from 0 to 1024 [ 186.271486][ T5370] loop2: detected capacity change from 0 to 256 [ 187.225042][ T5370] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.351506][ T5370] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 187.365867][ T5370] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xce89e5da, utbl_chksum : 0xe619d30d) [ 187.755810][ T5386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 189.270512][ T5410] TCP: tcp_parse_options: Illegal window scaling value 129 > 14 received [ 193.260407][ T5436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 194.204065][ T5452] loop2: detected capacity change from 0 to 512 [ 194.210693][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.217198][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.227508][ T4185] ------------[ cut here ]------------ [ 194.234255][ T4185] WARNING: CPU: 0 PID: 4185 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450 [ 194.246403][ T4185] Modules linked in: [ 194.251668][ T4185] CPU: 0 PID: 4185 Comm: kworker/u5:5 Not tainted 5.15.186-syzkaller #0 [ 194.260668][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.271430][ T4185] Workqueue: hci1 hci_conn_timeout [ 194.276680][ T4185] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 194.283323][ T4185] Code: 68 8d e8 d4 ef f8 f8 48 8b 35 15 60 a4 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b6 a8 88 f8 e8 b1 76 b3 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 194.305903][ T4185] RSP: 0000:ffffc90002f6fc08 EFLAGS: 00010293 [ 194.312434][ T4185] RAX: ffffffff88c44c5f RBX: ffff88801a986138 RCX: ffff888079c13b80 [ 194.321412][ T4185] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 194.330135][ T4185] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed1003530c03 [ 194.338691][ T4185] R10: ffffed1003530c03 R11: 1ffff11003530c02 R12: dffffc0000000000 [ 194.347438][ T4185] R13: dffffc0000000000 R14: ffff88801a986000 R15: ffff88801a986010 [ 194.355831][ T4185] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 194.365254][ T4185] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.372268][ T4185] CR2: 00007f1c825b2bac CR3: 000000002a319000 CR4: 00000000003506f0 [ 194.380633][ T4185] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 194.389000][ T4185] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.397341][ T4185] Call Trace: [ 194.400819][ T4185] [ 194.403830][ T4185] process_one_work+0x863/0x1000 [ 194.409363][ T4185] ? worker_detach_from_pool+0x240/0x240 [ 194.416198][ T4185] ? lockdep_hardirqs_off+0x70/0x100 [ 194.421668][ T4185] ? _raw_spin_lock_irq+0xab/0xe0 [ 194.426952][ T4185] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 194.432741][ T4185] ? wq_worker_running+0x97/0x170 [ 194.437829][ T4185] worker_thread+0xaa8/0x12a0 [ 194.442944][ T4185] kthread+0x436/0x520 [ 194.447446][ T4185] ? rcu_lock_release+0x20/0x20 [ 194.452817][ T4185] ? kthread_blkcg+0xd0/0xd0 [ 194.457735][ T4185] ret_from_fork+0x1f/0x30 [ 194.462481][ T4185] [ 194.465825][ T4185] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 194.473169][ T4185] CPU: 0 PID: 4185 Comm: kworker/u5:5 Not tainted 5.15.186-syzkaller #0 [ 194.481946][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.492451][ T4185] Workqueue: hci1 hci_conn_timeout [ 194.497961][ T4185] Call Trace: [ 194.501259][ T4185] [ 194.504342][ T4185] dump_stack_lvl+0x168/0x230 [ 194.509308][ T4185] ? show_regs_print_info+0x20/0x20 [ 194.514535][ T4185] ? load_image+0x3b0/0x3b0 [ 194.519653][ T4185] panic+0x2c9/0x7f0 [ 194.523705][ T4185] ? bpf_jit_dump+0xd0/0xd0 [ 194.528269][ T4185] ? ret_from_fork+0x1f/0x30 [ 194.533258][ T4185] ? hci_conn_timeout+0x24f/0x450 [ 194.538436][ T4185] __warn+0x248/0x2b0 [ 194.542446][ T4185] ? hci_conn_timeout+0x24f/0x450 [ 194.547486][ T4185] report_bug+0x1b7/0x2e0 [ 194.551934][ T4185] handle_bug+0x3a/0x70 [ 194.556112][ T4185] exc_invalid_op+0x16/0x40 [ 194.560630][ T4185] asm_exc_invalid_op+0x16/0x20 [ 194.565568][ T4185] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 194.571206][ T4185] Code: 68 8d e8 d4 ef f8 f8 48 8b 35 15 60 a4 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b6 a8 88 f8 e8 b1 76 b3 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 194.591256][ T4185] RSP: 0000:ffffc90002f6fc08 EFLAGS: 00010293 [ 194.599185][ T4185] RAX: ffffffff88c44c5f RBX: ffff88801a986138 RCX: ffff888079c13b80 [ 194.607361][ T4185] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 194.615458][ T4185] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed1003530c03 [ 194.623811][ T4185] R10: ffffed1003530c03 R11: 1ffff11003530c02 R12: dffffc0000000000 [ 194.632495][ T4185] R13: dffffc0000000000 R14: ffff88801a986000 R15: ffff88801a986010 [ 194.640578][ T4185] ? hci_conn_timeout+0x24f/0x450 [ 194.645836][ T4185] ? hci_conn_timeout+0x24f/0x450 [ 194.651573][ T4185] process_one_work+0x863/0x1000 [ 194.656560][ T4185] ? worker_detach_from_pool+0x240/0x240 [ 194.662208][ T4185] ? lockdep_hardirqs_off+0x70/0x100 [ 194.667616][ T4185] ? _raw_spin_lock_irq+0xab/0xe0 [ 194.672817][ T4185] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 194.678347][ T4185] ? wq_worker_running+0x97/0x170 [ 194.683511][ T4185] worker_thread+0xaa8/0x12a0 [ 194.688253][ T4185] kthread+0x436/0x520 [ 194.692344][ T4185] ? rcu_lock_release+0x20/0x20 [ 194.697582][ T4185] ? kthread_blkcg+0xd0/0xd0 [ 194.702281][ T4185] ret_from_fork+0x1f/0x30 [ 194.706990][ T4185] [ 194.710567][ T4185] Kernel Offset: disabled [ 194.715586][ T4185] Rebooting in 86400 seconds..