last executing test programs: 15.161565328s ago: executing program 4 (id=634): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc8442, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x842, 0x0) setresuid(0x0, 0x0, 0x0) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) 9.944538157s ago: executing program 2 (id=650): read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xcfe}, 0x1c, &(0x7f0000000240)=[{0x0}], 0x1}}], 0x1, 0x20000014) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1800}, @TCA_CT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) 7.833309696s ago: executing program 4 (id=654): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = memfd_secret(0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa"], 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd816855", 0x8}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) preadv(r3, &(0x7f0000000880)=[{&(0x7f0000000340)=""/156, 0x9c}, {&(0x7f0000000440)=""/118, 0x76}, {&(0x7f0000000500)=""/42, 0x2a}, {&(0x7f00000006c0)=""/172, 0xac}, {&(0x7f00000007c0)=""/173, 0xad}], 0x5, 0x4e0a, 0x11) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.796465407s ago: executing program 1 (id=655): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="269d5dfee993d0b38403e96b97e97a715a61f496e8d05a99f2f7ffb097254c115b53559cdf6bc389cf33de19ecde044c49c904802cbab56a723b55b70ae766974dde77c5c79f0702fe2788bee9efbac286e4e647836fe13591d8e4f6f892c0c30f3cc47661e10a83873be64aa5e1658337be47bbd76b601c099b28db7c1cb3d5d5fb509b429a52f604b4e9d68fe01a5dcc6da564d31171c31fa562a9a41e56a788a4864da6cafe531df80630b311e57caa6d7b219a9e1947ebe94d4dcbb8920efd3d0a8c6a2b88e3bc1054c0a17a498174854654fb6a", 0xd6, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x42) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000240)={{0x3c, @loopback, 0x4e20, 0x3, 'nq\x00', 0x0, 0x9, 0x13}, {@broadcast, 0x4e22, 0x2000, 0x1, 0x8001, 0x200}}, 0x44) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@null, 0x0, 'syzkaller1\x00'}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)=@keyring={'key_or_keyring:', r0}) r4 = fsmount(r2, 0x0, 0x89) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000440)={0x3ff, [0x2, 0x4, 0x1ce, 0x5ff7, 0x6, 0x0, 0x4, 0x8, 0xa, 0x4, 0x3, 0x8000, 0x2, 0x2, 0x400, 0x1, 0x0, 0x0, 0x401, 0x200, 0x9c2, 0x7, 0x1, 0x400, 0x6686, 0x9e9, 0xfff2, 0x9df4, 0x5300, 0x8, 0x4, 0x5, 0x1, 0x1, 0x1ff, 0x3, 0x0, 0x8, 0x492, 0x8000, 0x0, 0x4, 0x6, 0x0, 0x0, 0xb2, 0xc748, 0x8], 0x7}) keyctl$link(0x8, r0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f00000005c0)={0x1, 0x9}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000640)={0x4, &(0x7f0000000600)=[{0x0, 0x79, 0x4}, {0x0, 0xff, 0x25, 0xfffffffe}, {0xfd93, 0x9, 0x6, 0xffffffff}, {0x2, 0x8, 0x9, 0x4}]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000680), 0x4002, 0x0) syz_open_dev$MSR(&(0x7f00000006c0), 0x79ec4b16, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)=@delqdisc={0x1c4, 0x25, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xc}, {0xffff, 0x4}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x3c, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1d}, @TCA_RED_MAX_P={0x8, 0x3, 0xc986}, @TCA_RED_PARMS={0x14, 0x1, {0x7, 0x3, 0x200, 0xd, 0x2, 0xe, 0x2}}, @TCA_RED_MAX_P={0x8}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x8}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x57, 0x5, 0x1, 0x4, 0x1, 0x5, 0x8, 0x3}}, {0xa, 0x2, [0xb909, 0x3, 0x6]}}, {{0x1c, 0x1, {0x8, 0x40, 0x5, 0x37, 0x2, 0x8, 0x5, 0x5}}, {0xe, 0x2, [0x200, 0x4, 0x1, 0x2, 0x3]}}, {{0x1c, 0x1, {0xe, 0x1, 0x7, 0x3, 0x2, 0x9, 0x8, 0x1}}, {0x6, 0x2, [0xf9b]}}, {{0x1c, 0x1, {0x7, 0x3, 0x7, 0x9, 0x1, 0xaaa, 0xfffffff7, 0x4}}, {0xc, 0x2, [0x100, 0x4, 0x8000, 0xc]}}, {{0x1c, 0x1, {0x6, 0x9, 0x4, 0x8, 0x2, 0x9, 0x41, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x6, 0x10, 0x1, 0x6, 0x2, 0x4, 0xed6, 0x8}}, {0x14, 0x2, [0x8, 0x0, 0xd34, 0x5, 0x101, 0x2, 0x3, 0x2]}}, {{0x1c, 0x1, {0xc1, 0xff, 0x8, 0x7ff, 0x1, 0x1000, 0xa, 0x8}}, {0x14, 0x2, [0x0, 0x1ff, 0xffff, 0xb, 0x8, 0x1, 0xff7f, 0x101]}}, {{0x1c, 0x1, {0x3, 0x64, 0x2b5, 0x4, 0x1, 0x98, 0x5, 0x6}}, {0x10, 0x2, [0x1, 0x4, 0xfff, 0x1, 0x1, 0x6]}}]}]}, 0x1c4}}, 0x20040080) chdir(&(0x7f0000000ac0)='./file0\x00') add_key(&(0x7f0000000b80)='ceph\x00', &(0x7f0000000bc0)={'syz', 0x2}, &(0x7f0000000c00), 0x0, r0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x3) 7.689214813s ago: executing program 1 (id=656): syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0xc, 0x8}, {0x3, 0xb2, 0x87d, 0xffff}}}}, 0x15) 7.590249198s ago: executing program 2 (id=658): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$dsp(r2, &(0x7f00000012c0), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 7.165442821s ago: executing program 1 (id=659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffe1f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc8442, 0x19d) r3 = semget(0x3, 0x0, 0x608) semctl$GETZCNT(r3, 0x1, 0xf, &(0x7f0000000080)=""/81) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x842, 0x0) r6 = socket(0x10, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, r7) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000180)=@nullb, r7, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r5, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) listen(0xffffffffffffffff, 0x6) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000680)={0x1f, 0x1, @none}, 0xe) 6.623824888s ago: executing program 4 (id=661): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000280)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.549253092s ago: executing program 0 (id=662): r0 = socket(0x10, 0x803, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001400b5954000", @ANYRES32=r1, @ANYBLOB="14000200"/13], 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 6.548518982s ago: executing program 2 (id=663): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$kcm(0x10, 0x2, 0x4) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x1000) r5 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r5, &(0x7f0000000000)={0x2020}, 0x96) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000000)=@ethtool_cmd={0x1f, 0x0, 0x1, 0x9, 0xf7, 0x75, 0x8, 0x1, 0xdc, 0xfe, 0x100, 0x8, 0x6, 0x8, 0x8, 0x4, [0x3, 0x7]}}) 5.6215893s ago: executing program 0 (id=664): pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0xfe) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x100, 0x100, 0x4, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x880) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) close(r4) 5.551943114s ago: executing program 4 (id=665): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc8442, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x842, 0x0) setresuid(0x0, 0x0, 0x0) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) 5.527311445s ago: executing program 3 (id=666): r0 = syz_open_dev$usbmon(0x0, 0x7, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x3b, 0x0) mmap(&(0x7f0000129000/0x400000)=nil, 0x400000, 0xf6f01ebf1ddaf827, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x0) readv(r0, 0x0, 0x0) 4.768039254s ago: executing program 1 (id=667): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="269d5dfee993d0b38403e96b97e97a715a61f496e8d05a99f2f7ffb097254c115b53559cdf6bc389cf33de19ecde044c49c904802cbab56a723b55b70ae766974dde77c5c79f0702fe2788bee9efbac286e4e647836fe13591d8e4f6f892c0c30f3cc47661e10a83873be64aa5e1658337be47bbd76b601c099b28db7c1cb3d5d5fb509b429a52f604b4e9d68fe01a5dcc6da564d31171c31fa562a9a41e56a788a4864da6cafe531df80630b311e57caa6d7b219a9e1947ebe94d4dcbb8920efd3d0a8c6a2b88e3bc1054c0a17a498174854654fb6a", 0xd6, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x42) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000240)={{0x3c, @loopback, 0x4e20, 0x3, 'nq\x00', 0x0, 0x9, 0x13}, {@broadcast, 0x4e22, 0x2000, 0x1, 0x8001, 0x200}}, 0x44) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@null, 0x0, 'syzkaller1\x00'}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)=@keyring={'key_or_keyring:', r0}) r4 = fsmount(r2, 0x0, 0x89) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000440)={0x3ff, [0x2, 0x4, 0x1ce, 0x5ff7, 0x6, 0x0, 0x4, 0x8, 0xa, 0x4, 0x3, 0x8000, 0x2, 0x2, 0x400, 0x1, 0x0, 0x0, 0x401, 0x200, 0x9c2, 0x7, 0x1, 0x400, 0x6686, 0x9e9, 0xfff2, 0x9df4, 0x5300, 0x8, 0x4, 0x5, 0x1, 0x1, 0x1ff, 0x3, 0x0, 0x8, 0x492, 0x8000, 0x0, 0x4, 0x6, 0x0, 0x0, 0xb2, 0xc748, 0x8], 0x7}) keyctl$link(0x8, r0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f00000005c0)={0x1, 0x9}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000640)={0x4, &(0x7f0000000600)=[{0x0, 0x79, 0x4}, {0x0, 0xff, 0x25, 0xfffffffe}, {0xfd93, 0x9, 0x6, 0xffffffff}, {0x2, 0x8, 0x9, 0x4}]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000680), 0x4002, 0x0) syz_open_dev$MSR(&(0x7f00000006c0), 0x79ec4b16, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)=@delqdisc={0x1c4, 0x25, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xc}, {0xffff, 0x4}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x3c, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1d}, @TCA_RED_MAX_P={0x8, 0x3, 0xc986}, @TCA_RED_PARMS={0x14, 0x1, {0x7, 0x3, 0x200, 0xd, 0x2, 0xe, 0x2}}, @TCA_RED_MAX_P={0x8}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x8}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x57, 0x5, 0x1, 0x4, 0x1, 0x5, 0x8, 0x3}}, {0xa, 0x2, [0xb909, 0x3, 0x6]}}, {{0x1c, 0x1, {0x8, 0x40, 0x5, 0x37, 0x2, 0x8, 0x5, 0x5}}, {0xe, 0x2, [0x200, 0x4, 0x1, 0x2, 0x3]}}, {{0x1c, 0x1, {0xe, 0x1, 0x7, 0x3, 0x2, 0x9, 0x8, 0x1}}, {0x6, 0x2, [0xf9b]}}, {{0x1c, 0x1, {0x7, 0x3, 0x7, 0x9, 0x1, 0xaaa, 0xfffffff7, 0x4}}, {0xc, 0x2, [0x100, 0x4, 0x8000, 0xc]}}, {{0x1c, 0x1, {0x6, 0x9, 0x4, 0x8, 0x2, 0x9, 0x41, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x6, 0x10, 0x1, 0x6, 0x2, 0x4, 0xed6, 0x8}}, {0x14, 0x2, [0x8, 0x0, 0xd34, 0x5, 0x101, 0x2, 0x3, 0x2]}}, {{0x1c, 0x1, {0xc1, 0xff, 0x8, 0x7ff, 0x1, 0x1000, 0xa, 0x8}}, {0x14, 0x2, [0x0, 0x1ff, 0xffff, 0xb, 0x8, 0x1, 0xff7f, 0x101]}}, {{0x1c, 0x1, {0x3, 0x64, 0x2b5, 0x4, 0x1, 0x98, 0x5, 0x6}}, {0x10, 0x2, [0x1, 0x4, 0xfff, 0x1, 0x1, 0x6]}}]}]}, 0x1c4}}, 0x20040080) chdir(&(0x7f0000000ac0)='./file0\x00') add_key(&(0x7f0000000b80)='ceph\x00', &(0x7f0000000bc0)={'syz', 0x2}, &(0x7f0000000c00), 0x0, r0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x3) 4.65303664s ago: executing program 1 (id=668): read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xcfe}, 0x1c, &(0x7f0000000240)=[{0x0}], 0x1}}], 0x1, 0x20000014) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1800}, @TCA_CT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) 4.313520887s ago: executing program 0 (id=669): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi4\x00', 0xa002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r2, 0x0, 0x13, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "9c979b3226"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe4}}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x5}}}}]}, 0x30}}, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x2000000, 0x0, 0x0, 0x0, 0x10000}]}) 4.253691481s ago: executing program 2 (id=670): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$llc(r0, 0x0, 0x0) 3.093536261s ago: executing program 3 (id=671): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x3, 0x2, {0x5, @vbi={0x0, 0x400000, 0x4, 0x0, [0x200], [0x7ff], 0x1}}}) 2.758120648s ago: executing program 3 (id=672): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = memfd_secret(0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa"], 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd816855", 0x8}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) preadv(r3, &(0x7f0000000880)=[{&(0x7f0000000340)=""/156, 0x9c}, {&(0x7f0000000440)=""/118, 0x76}, {&(0x7f0000000500)=""/42, 0x2a}, {&(0x7f00000006c0)=""/172, 0xac}, {&(0x7f00000007c0)=""/173, 0xad}], 0x5, 0x4e0a, 0x11) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.756247828s ago: executing program 0 (id=673): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xf48, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) 2.591632846s ago: executing program 1 (id=674): add_key$keyring(&(0x7f0000000500), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x6) connect$l2tp(r0, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_create_resource$binfmt(0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x132) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) dup3(r7, r6, 0x80000) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)="2cde8618b35bda549ffcfa26720028102db521bed9bd37309aa31a460359d5fc3e", 0x21}, 0x1, 0x0, 0x0, 0x4000}, 0x4480) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) 2.533562909s ago: executing program 0 (id=675): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000280)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) accept4(r2, 0x0, 0x0, 0x800) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.111615861s ago: executing program 2 (id=676): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x2004c840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.661790395s ago: executing program 3 (id=677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffe1f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc8442, 0x19d) r3 = semget(0x3, 0x0, 0x608) semctl$GETZCNT(r3, 0x1, 0xf, &(0x7f0000000080)=""/81) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x842, 0x0) r6 = socket(0x10, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, r7) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000180)=@nullb, r7, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r5, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) listen(0xffffffffffffffff, 0x6) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000680)={0x1f, 0x1, @none}, 0xe) 828.736337ms ago: executing program 4 (id=678): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="269d5dfee993d0b38403e96b97e97a715a61f496e8d05a99f2f7ffb097254c115b53559cdf6bc389cf33de19ecde044c49c904802cbab56a723b55b70ae766974dde77c5c79f0702fe2788bee9efbac286e4e647836fe13591d8e4f6f892c0c30f3cc47661e10a83873be64aa5e1658337be47bbd76b601c099b28db7c1cb3d5d5fb509b429a52f604b4e9d68fe01a5dcc6da564d31171c31fa562a9a41e56a788a4864da6cafe531df80630b311e57caa6d7b219a9e1947ebe94d4dcbb8920efd3d0a8c6a2b88e3bc1054c0a17a498174854654fb6a", 0xd6, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x42) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000240)={{0x3c, @loopback, 0x4e20, 0x3, 'nq\x00', 0x0, 0x9, 0x13}, {@broadcast, 0x4e22, 0x2000, 0x1, 0x8001, 0x200}}, 0x44) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@null, 0x0, 'syzkaller1\x00'}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)=@keyring={'key_or_keyring:', r0}) r4 = fsmount(r2, 0x0, 0x89) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000440)={0x3ff, [0x2, 0x4, 0x1ce, 0x5ff7, 0x6, 0x0, 0x4, 0x8, 0xa, 0x4, 0x3, 0x8000, 0x2, 0x2, 0x400, 0x1, 0x0, 0x0, 0x401, 0x200, 0x9c2, 0x7, 0x1, 0x400, 0x6686, 0x9e9, 0xfff2, 0x9df4, 0x5300, 0x8, 0x4, 0x5, 0x1, 0x1, 0x1ff, 0x3, 0x0, 0x8, 0x492, 0x8000, 0x0, 0x4, 0x6, 0x0, 0x0, 0xb2, 0xc748, 0x8], 0x7}) keyctl$link(0x8, r0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f00000005c0)={0x1, 0x9}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000640)={0x4, &(0x7f0000000600)=[{0x0, 0x79, 0x4}, {0x0, 0xff, 0x25, 0xfffffffe}, {0xfd93, 0x9, 0x6, 0xffffffff}, {0x2, 0x8, 0x9, 0x4}]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000680), 0x4002, 0x0) syz_open_dev$MSR(&(0x7f00000006c0), 0x79ec4b16, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)=@delqdisc={0x1c4, 0x25, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xc}, {0xffff, 0x4}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x3c, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1d}, @TCA_RED_MAX_P={0x8, 0x3, 0xc986}, @TCA_RED_PARMS={0x14, 0x1, {0x7, 0x3, 0x200, 0xd, 0x2, 0xe, 0x2}}, @TCA_RED_MAX_P={0x8}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x8}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x57, 0x5, 0x1, 0x4, 0x1, 0x5, 0x8, 0x3}}, {0xa, 0x2, [0xb909, 0x3, 0x6]}}, {{0x1c, 0x1, {0x8, 0x40, 0x5, 0x37, 0x2, 0x8, 0x5, 0x5}}, {0xe, 0x2, [0x200, 0x4, 0x1, 0x2, 0x3]}}, {{0x1c, 0x1, {0xe, 0x1, 0x7, 0x3, 0x2, 0x9, 0x8, 0x1}}, {0x6, 0x2, [0xf9b]}}, {{0x1c, 0x1, {0x7, 0x3, 0x7, 0x9, 0x1, 0xaaa, 0xfffffff7, 0x4}}, {0xc, 0x2, [0x100, 0x4, 0x8000, 0xc]}}, {{0x1c, 0x1, {0x6, 0x9, 0x4, 0x8, 0x2, 0x9, 0x41, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x6, 0x10, 0x1, 0x6, 0x2, 0x4, 0xed6, 0x8}}, {0x14, 0x2, [0x8, 0x0, 0xd34, 0x5, 0x101, 0x2, 0x3, 0x2]}}, {{0x1c, 0x1, {0xc1, 0xff, 0x8, 0x7ff, 0x1, 0x1000, 0xa, 0x8}}, {0x14, 0x2, [0x0, 0x1ff, 0xffff, 0xb, 0x8, 0x1, 0xff7f, 0x101]}}, {{0x1c, 0x1, {0x3, 0x64, 0x2b5, 0x4, 0x1, 0x98, 0x5, 0x6}}, {0x10, 0x2, [0x1, 0x4, 0xfff, 0x1, 0x1, 0x6]}}]}]}, 0x1c4}}, 0x20040080) chdir(&(0x7f0000000ac0)='./file0\x00') add_key(&(0x7f0000000b80)='ceph\x00', &(0x7f0000000bc0)={'syz', 0x2}, &(0x7f0000000c00), 0x0, r0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x3) 643.510467ms ago: executing program 3 (id=679): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f0000000540)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafa", 0x91}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736f1ca", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d7e918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac708818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e5707be06bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a2e2a151d9aa4fc9c5", 0xb3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="e6bac1668e5b309efda177b827c14e1e59e57a59774d9a207d394f8b262cb974444d941c9401556676af700fd38224908adba4b8aee34bca25112816982b78c0be11782e21f26b871d9870f08d7834856d8a5dc7b179af4e0195037bf8f88583e76883590a3b12847f967a26b34ee3189936", 0x72}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000001c0)="d59f41c0418ebad512facf22d697f3c97fa25becae148b518203467ee73c881817657efe92a415cd70d9ae44e7de8d81f558e67adb0be705fcdae72a6125b0a47c9267278147923ab3f54170671e0918c5d3fa469152f3ec9191578240878db51753dbc15f7852f7e1614e75c90c1a0440a4cb3df109e647bf01db4235", 0x7d}, {&(0x7f0000000700)="73347c742785f90aa563b4c01785f8371c6c153843eb25bce2d86628414138f6d3eb90c44817fbcc958e331db94a8d1119eefe09b541e73e4789594b627b7ba94f6c14265df07fabab61972e1be26c0cb37d32c3a771e304e6f8cc49bdbdb05c7569b6300fef45f8992df412b3f5905c23ae4503aa74d9fca9224332942529f26a5775237db47e838d478fa852f9cecd4a33d022d908d78e33f7fefaa1f92a1a2dd193e2484b2d719f288f1b036c64f6f3da5d91a8a65ed54c2ce9a8b5ca53", 0xbf}, {0x0}, {&(0x7f00000008c0)="54586baeba0fbf8b", 0x8}], 0x4}}], 0x5, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 603.183499ms ago: executing program 4 (id=680): pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0xfe) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x100, 0x100, 0x4, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x880) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) close(r4) 425.496488ms ago: executing program 3 (id=681): r0 = syz_open_dev$usbmon(0x0, 0x7, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x3b, 0x0) mmap(&(0x7f0000129000/0x400000)=nil, 0x400000, 0xf6f01ebf1ddaf827, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0x0) readv(r0, 0x0, 0x0) 28.881709ms ago: executing program 2 (id=682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x100}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4840) 0s ago: executing program 0 (id=683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xa0000000000, 0x1000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) write(r6, 0x0, 0x300) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 0s ago: executing program 2 (id=684): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x15) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000280)='*', 0x1}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. [ 73.616547][ T4174] cgroup: Unknown subsys name 'net' [ 73.725207][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.379804][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.951905][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 76.976760][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 77.018982][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 77.103567][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 77.123520][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 77.233269][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.244787][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.253293][ T4188] device bridge_slave_0 entered promiscuous mode [ 77.265520][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.272710][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.282024][ T4186] device bridge_slave_0 entered promiscuous mode [ 77.294337][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.301692][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.309983][ T4186] device bridge_slave_1 entered promiscuous mode [ 77.322067][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.329369][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.337516][ T4197] device bridge_slave_0 entered promiscuous mode [ 77.346021][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.353366][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.362060][ T4188] device bridge_slave_1 entered promiscuous mode [ 77.385575][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.392855][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.401885][ T4197] device bridge_slave_1 entered promiscuous mode [ 77.462200][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.479757][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.499746][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.511314][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.521762][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.529710][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.538122][ T4187] device bridge_slave_0 entered promiscuous mode [ 77.547138][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.556547][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.563900][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.572573][ T4194] device bridge_slave_0 entered promiscuous mode [ 77.582346][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.599683][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.606794][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.616302][ T4187] device bridge_slave_1 entered promiscuous mode [ 77.630645][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.638146][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.646169][ T4194] device bridge_slave_1 entered promiscuous mode [ 77.676529][ T4188] team0: Port device team_slave_0 added [ 77.699468][ T4186] team0: Port device team_slave_0 added [ 77.721822][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.732060][ T4188] team0: Port device team_slave_1 added [ 77.746971][ T4186] team0: Port device team_slave_1 added [ 77.755309][ T4197] team0: Port device team_slave_0 added [ 77.763358][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.780863][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.797123][ T4197] team0: Port device team_slave_1 added [ 77.818753][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.858127][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.865160][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.891745][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.912320][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.919798][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.946216][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.964995][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.972305][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.998827][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.013835][ T4187] team0: Port device team_slave_0 added [ 78.028748][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.035756][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.062266][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.074350][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.081601][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.110096][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.125222][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.130438][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.132524][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.147270][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.173596][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.187956][ T4194] team0: Port device team_slave_0 added [ 78.201908][ T4187] team0: Port device team_slave_1 added [ 78.218838][ T4194] team0: Port device team_slave_1 added [ 78.258043][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.265096][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.291564][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.319432][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.326632][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.353038][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.371708][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.379076][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.405356][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.439959][ T4188] device hsr_slave_0 entered promiscuous mode [ 78.446974][ T4188] device hsr_slave_1 entered promiscuous mode [ 78.455629][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.462755][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.489671][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.513135][ T4197] device hsr_slave_0 entered promiscuous mode [ 78.520453][ T4197] device hsr_slave_1 entered promiscuous mode [ 78.527091][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.535290][ T4197] Cannot create hsr debugfs directory [ 78.544621][ T4186] device hsr_slave_0 entered promiscuous mode [ 78.552012][ T4186] device hsr_slave_1 entered promiscuous mode [ 78.559222][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.566802][ T4186] Cannot create hsr debugfs directory [ 78.588593][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 78.588593][ T4191] Bluetooth: hci1: command 0x0409 tx timeout [ 78.590105][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 78.667750][ T4191] Bluetooth: hci0: command 0x0409 tx timeout [ 78.668228][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 78.686525][ T4194] device hsr_slave_0 entered promiscuous mode [ 78.693787][ T4194] device hsr_slave_1 entered promiscuous mode [ 78.700735][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.708515][ T4194] Cannot create hsr debugfs directory [ 78.741215][ T4187] device hsr_slave_0 entered promiscuous mode [ 78.748339][ T4187] device hsr_slave_1 entered promiscuous mode [ 78.754867][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.763657][ T4187] Cannot create hsr debugfs directory [ 79.091497][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.110206][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.121083][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.131528][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.175296][ T4197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.188854][ T4197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.199821][ T4197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.223554][ T4197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.279845][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.303976][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.333629][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.356315][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.381585][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.395441][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.409637][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.438839][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.451076][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.490444][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.502308][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.531448][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.559462][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.575354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.584654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.594826][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.602348][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.613135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.634503][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.651236][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.662023][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.675218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.685676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.695469][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.702633][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.711790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.738369][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.748419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.760686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.770197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.780503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.793259][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.801968][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.819966][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.830682][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.843735][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.870518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.880451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.890493][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.897698][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.906647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.917061][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.926421][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.951757][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.960891][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.970632][ T3031] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.977882][ T3031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.003555][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.021504][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.032022][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.041842][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.052093][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.061238][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.070244][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.084013][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.093280][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.102708][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.113190][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.123966][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.149457][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.173057][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.185907][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.209675][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.223335][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.233079][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.243106][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.253215][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.278597][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.310855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.319506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.327510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.350078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.365857][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.373146][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.387964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.396948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.411902][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.419187][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.450417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.468558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.481555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.490857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.500809][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.508101][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.516672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.526749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.536142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.545738][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.552847][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.584600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.605229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.621281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.634710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.647196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.660093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.668510][ T1111] Bluetooth: hci3: command 0x041b tx timeout [ 80.668568][ T1111] Bluetooth: hci1: command 0x041b tx timeout [ 80.668596][ T1111] Bluetooth: hci2: command 0x041b tx timeout [ 80.690801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.699898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.709567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.726913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.739323][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.750566][ T1111] Bluetooth: hci4: command 0x041b tx timeout [ 80.756851][ T1111] Bluetooth: hci0: command 0x041b tx timeout [ 80.765725][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.792145][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.802482][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.812600][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.821380][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.830828][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.840177][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.852644][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.896160][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.909776][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.916966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.939738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.953853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.964327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.979532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.993450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.004721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.013416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.024423][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.038066][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.061908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.080594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.136557][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.168294][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.188279][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.207766][ T3070] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.215008][ T3070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.226757][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.236924][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.246505][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.281247][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.307008][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.322747][ T3070] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.329946][ T3070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.368617][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.388190][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.397407][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.407302][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.416957][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.424979][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.432788][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.442074][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.451420][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.459932][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.469822][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.494759][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.505675][ T4186] device veth0_vlan entered promiscuous mode [ 81.538195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.547081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.557453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.566393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.575539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.583528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.593697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.602675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.619843][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.637926][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.669336][ T4186] device veth1_vlan entered promiscuous mode [ 81.679022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.687183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.698009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.706725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.717312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.764658][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.781075][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.796807][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.813289][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.822716][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.869125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.880187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.904147][ T4194] device veth0_vlan entered promiscuous mode [ 81.916283][ T4197] device veth0_vlan entered promiscuous mode [ 81.930582][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.944279][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.954465][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.963464][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.973058][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.985385][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.000314][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.013371][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.023201][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.032880][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.042126][ T4186] device veth0_macvtap entered promiscuous mode [ 82.063806][ T4194] device veth1_vlan entered promiscuous mode [ 82.075009][ T4188] device veth0_vlan entered promiscuous mode [ 82.102682][ T4197] device veth1_vlan entered promiscuous mode [ 82.114115][ T4186] device veth1_macvtap entered promiscuous mode [ 82.126929][ T4188] device veth1_vlan entered promiscuous mode [ 82.157261][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.203071][ T4197] device veth0_macvtap entered promiscuous mode [ 82.211203][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.220561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.229145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.237379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.246787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.255677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.264968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.274652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.283708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.293876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.304138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.312466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.321096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.330401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.341040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.354389][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.366050][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.380916][ T4188] device veth0_macvtap entered promiscuous mode [ 82.391598][ T4197] device veth1_macvtap entered promiscuous mode [ 82.406822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.417152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.427018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.437355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.449644][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.459667][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.468782][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.478034][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.502843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.513296][ T4188] device veth1_macvtap entered promiscuous mode [ 82.546916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.555913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.565519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.604157][ T4194] device veth0_macvtap entered promiscuous mode [ 82.623346][ T4194] device veth1_macvtap entered promiscuous mode [ 82.634309][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.645482][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.659035][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.667359][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.679908][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.690332][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.701232][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.712946][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.732311][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.740632][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.748520][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 82.756060][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.759915][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 82.769961][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.778781][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 82.785289][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.794719][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.804232][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.813292][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.826206][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.837688][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 82.844252][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 82.848665][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.865212][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.890078][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.900353][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.910784][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.920058][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.935037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.954165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.984544][ T4187] device veth0_vlan entered promiscuous mode [ 82.995143][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.006156][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.017567][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.028361][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.040276][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.052969][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.062626][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.072233][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.082938][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.092944][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.101471][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.117831][ T4187] device veth1_vlan entered promiscuous mode [ 83.136611][ T4197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.149569][ T4197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.159377][ T4197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.168761][ T4197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.190230][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.203335][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.214736][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.225319][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.235932][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.248618][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.260882][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.303560][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.312981][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.326338][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.336029][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.347732][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.358517][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.369347][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.380326][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.391615][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.402665][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.414850][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.443145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.454329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.471876][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.482719][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.492618][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.502064][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.528528][ T3070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.536998][ T3070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.547051][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.603012][ T4187] device veth0_macvtap entered promiscuous mode [ 83.615612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.625156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.637158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.655461][ T4187] device veth1_macvtap entered promiscuous mode [ 83.689427][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.697314][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.729222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.737477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.759749][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.775065][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.813723][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.829840][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.840083][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.850658][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.861010][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.871821][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.882596][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.894142][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.909877][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.918614][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.926786][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.936226][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.954491][ T3070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.962900][ T3070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.977122][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.988444][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.001555][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.015712][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.033269][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.043321][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.054357][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.064597][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.075807][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.088358][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.102073][ T3070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.102110][ T3070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.128843][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.145102][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.156954][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.172297][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.186797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.203115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.213723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.260301][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.300565][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.325204][ T3091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.348364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.368942][ T3091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.376914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.458520][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.471873][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.594048][ T3091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.602742][ T3070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.662144][ T3070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.685501][ T3091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.711888][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.729795][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.754013][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.108724][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 86.132432][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 86.328470][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 86.917701][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 86.924177][ T1111] Bluetooth: hci0: command 0x0419 tx timeout [ 87.254323][ T4297] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 87.678190][ T4271] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.728166][ T4310] loop4: detected capacity change from 0 to 1024 [ 88.068478][ T4312] tipc: Started in network mode [ 88.073617][ T4312] tipc: Node identity 4, cluster identity 4711 [ 88.080090][ T4312] tipc: Node number set to 4 [ 88.907873][ T4271] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 88.929958][ T4271] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 88.971068][ T4271] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.188072][ T4271] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 89.215457][ T4271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.261470][ T4271] usb 4-1: Product: syz [ 89.285125][ T4271] usb 4-1: Manufacturer: syz [ 89.316217][ T4271] usb 4-1: SerialNumber: syz [ 89.461719][ T4271] hub 4-1:1.0: bad descriptor, ignoring hub [ 89.468294][ T4271] hub: probe of 4-1:1.0 failed with error -5 [ 89.707231][ T4271] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 90.739490][ T4271] usb 4-1: USB disconnect, device number 2 [ 90.752169][ T4271] usblp0: removed [ 90.945532][ T4323] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 90.954129][ T4323] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 90.962733][ T4323] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 92.287154][ T4333] loop3: detected capacity change from 0 to 4096 [ 92.324853][ T4336] loop0: detected capacity change from 0 to 64 [ 93.427598][ C0] sched: RT throttling activated [ 94.205094][ T1325] cfg80211: failed to load regulatory.db [ 94.229561][ T4336] ======================================================= [ 94.229561][ T4336] WARNING: The mand mount option has been deprecated and [ 94.229561][ T4336] and is ignored by this kernel. Remove the mand [ 94.229561][ T4336] option from the mount to silence this warning. [ 94.229561][ T4336] ======================================================= [ 94.316716][ T4333] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 98.614892][ T4379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27'. [ 98.624197][ T4379] 8021q: VLANs not supported on vcan0 [ 98.738393][ T4378] loop0: detected capacity change from 0 to 2048 [ 98.785515][ T4378] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 98.795663][ T4378] NILFS (loop0): unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿ" [ 99.728083][ T4268] udevd[4268]: incorrect nilfs2 checksum on /dev/loop0 [ 99.936283][ T4391] loop1: detected capacity change from 0 to 2048 [ 100.075264][ T4400] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.157615][ T4391] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.160115][ T4404] loop0: detected capacity change from 0 to 512 [ 100.248248][ T4404] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 100.268284][ T4404] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.503687][ T4404] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,dioread_nolock,abort,grpjquota=,lazytime,auto_da_alloc,mblk_io_submit,max_dir_size_kb=0x0000000000000100,min_batch_time=0x000000000000007a,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 100.549365][ T4404] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.602712][ T4411] loop1: detected capacity change from 0 to 512 [ 100.682172][ T4411] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 100.732272][ T4381] loop3: detected capacity change from 0 to 32768 [ 101.031600][ T4417] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.101029][ T4230] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 101.341636][ T4381] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.28 (4381) [ 101.898558][ T4381] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 102.117138][ T4381] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 102.568589][ T4230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 102.649695][ T4230] usb 1-1: not running at top speed; connect to a high speed hub [ 102.687013][ T4381] BTRFS info (device loop3): use zstd compression, level 3 [ 102.921131][ T4381] BTRFS info (device loop3): using free space tree [ 102.961835][ T4381] BTRFS info (device loop3): has skinny extents [ 102.998259][ T4230] usb 1-1: config 5 has an invalid interface number: 246 but max is 0 [ 103.018859][ T4230] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 103.140585][ T4230] usb 1-1: config 5 has no interface number 0 [ 103.357656][ T4230] usb 1-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 103.461745][ T4448] capability: warning: `syz.4.42' uses 32-bit capabilities (legacy support in use) [ 104.137070][ T4230] usb 1-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 104.178142][ T4230] usb 1-1: config 5 interface 246 has no altsetting 0 [ 104.270582][ T4230] usb 1-1: string descriptor 0 read error: -71 [ 104.277013][ T4230] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 104.327732][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.417927][ T4230] usb 1-1: can't set config #5, error -71 [ 104.471390][ T4230] usb 1-1: USB disconnect, device number 2 [ 104.612215][ T4381] BTRFS error (device loop3): open_ctree failed: -12 [ 104.661798][ T4444] loop1: detected capacity change from 0 to 131072 [ 104.705883][ T4268] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by udevd (4268) [ 104.832861][ T4455] xt_hashlimit: size too large, truncated to 1048576 [ 105.100058][ T4444] F2FS-fs (loop1): Test dummy encryption mode enabled [ 105.151289][ T4444] F2FS-fs (loop1): Found nat_bits in checkpoint [ 105.213465][ T4444] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 105.267743][ T4449] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.667850][ T4449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.697641][ T4449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.727775][ T4449] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.751765][ T4449] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.772078][ T4449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.795011][ T4449] usb 1-1: config 0 descriptor?? [ 106.187946][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.304267][ T4449] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 106.342286][ T4449] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 106.437909][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 106.558849][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.572088][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.584249][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.594598][ T7] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 106.605645][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.624261][ T7] usb 3-1: config 0 descriptor?? [ 106.962085][ T4482] loop3: detected capacity change from 0 to 512 [ 107.019162][ T4482] EXT4-fs (loop3): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 107.230553][ T7] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 107.266757][ T7] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 107.350206][ T4484] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.070981][ T7] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 108.080191][ T7] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 108.088135][ T7] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 108.118953][ T4460] usb 1-1: string descriptor 0 read error: -2 [ 108.157946][ T7] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf3 found [ 108.165838][ T7] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf4 found [ 108.258592][ T7] usb 3-1: USB disconnect, device number 2 [ 110.015101][ T4271] usb 1-1: USB disconnect, device number 3 [ 113.417831][ T4531] ODEBUG: Out of memory. ODEBUG disabled [ 113.467579][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 113.477560][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 113.487559][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 113.497566][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 113.507577][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 113.517565][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 113.527760][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 113.537579][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 113.547560][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 113.557561][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 117.170667][ T4556] loop2: detected capacity change from 0 to 2048 [ 117.266481][ T4559] loop3: detected capacity change from 0 to 512 [ 117.293610][ T4556] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 117.362247][ T4562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.63'. [ 117.565911][ T4556] NILFS (loop2): unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿ" [ 117.699904][ T4559] EXT4-fs (loop3): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 119.012436][ T4539] udevd[4539]: incorrect nilfs2 checksum on /dev/loop2 [ 119.082065][ T4580] Zero length message leads to an empty skb [ 125.725305][ T4615] loop0: detected capacity change from 0 to 512 [ 125.799602][ T4617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.78'. [ 126.102299][ T4615] EXT4-fs (loop0): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 126.115483][ T1325] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 127.861337][ T1325] usb 3-1: config 0 has no interfaces? [ 127.871466][ T1325] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 127.887486][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.940395][ T1325] usb 3-1: config 0 descriptor?? [ 129.123859][ T4451] usb 3-1: USB disconnect, device number 3 [ 131.054251][ T4649] loop2: detected capacity change from 0 to 1024 [ 131.175923][ T4649] EXT4-fs (loop2): Ignoring removed bh option [ 131.268853][ T4649] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 131.330434][ T4656] hugetlbfs: syz.4.92 (4656): Using mlock ulimits for SHM_HUGETLB is deprecated [ 132.172216][ T4649] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 134.058552][ T4677] tipc: Started in network mode [ 134.063638][ T4677] tipc: Node identity 4, cluster identity 4711 [ 134.070121][ T4677] tipc: Node number set to 4 [ 134.926551][ T4681] loop2: detected capacity change from 0 to 512 [ 135.017663][ T4681] EXT4-fs (loop2): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 135.066475][ T4685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.100'. [ 135.347437][ T4685] loop1: detected capacity change from 0 to 4096 [ 135.377756][ T4233] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.992119][ T4233] usb 1-1: device descriptor read/all, error -71 [ 137.199556][ T4701] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.780362][ T4713] blktrace: Concurrent blktraces are not allowed on loop4 [ 139.654771][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.661212][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.285880][ T4725] loop2: detected capacity change from 0 to 32768 [ 141.792047][ T4741] tipc: Started in network mode [ 141.797200][ T4741] tipc: Node identity 4, cluster identity 4711 [ 141.803548][ T4741] tipc: Node number set to 4 [ 142.133310][ T4725] XFS (loop2): Mounting V5 Filesystem [ 142.819116][ T4725] XFS (loop2): Ending clean mount [ 142.834074][ T4725] XFS (loop2): Quotacheck needed: Please wait. [ 142.968628][ T4725] XFS (loop2): Quotacheck: Done. [ 143.519509][ T26] audit: type=1800 audit(1776970663.260:2): pid=4749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.110" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 143.627386][ T4750] loop4: detected capacity change from 0 to 2048 [ 143.651483][ T4194] XFS (loop2): Unmounting Filesystem [ 145.274235][ T4759] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.715767][ T26] audit: type=1800 audit(1776970665.730:3): pid=4750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.114" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 146.615570][ T4750] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 146.677397][ T4750] Remounting filesystem read-only [ 146.788123][ T4750] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 147.335102][ T4197] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 147.367582][ T4773] loop2: detected capacity change from 0 to 512 [ 147.444647][ T4773] EXT4-fs (loop2): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 151.008956][ T4230] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 153.590033][ T4826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.132'. [ 154.019350][ T4829] loop4: detected capacity change from 0 to 4096 [ 154.421538][ T4835] loop1: detected capacity change from 0 to 512 [ 154.502945][ T4835] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 155.714493][ T4845] loop4: detected capacity change from 0 to 1024 [ 155.775423][ T4845] EXT4-fs (loop4): Ignoring removed bh option [ 155.937384][ T4845] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 157.087649][ T1325] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 160.113615][ T4890] loop4: detected capacity change from 0 to 512 [ 160.353863][ T4891] loop3: detected capacity change from 0 to 32768 [ 161.079470][ T4890] EXT4-fs (loop4): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 162.229264][ T4891] XFS (loop3): Mounting V5 Filesystem [ 162.846670][ T4891] XFS (loop3): Ending clean mount [ 162.899843][ T4914] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 163.270856][ T4912] loop1: detected capacity change from 0 to 1024 [ 163.486729][ T4912] EXT4-fs (loop1): Ignoring removed bh option [ 163.509922][ T4891] XFS (loop3): Quotacheck needed: Please wait. [ 164.741866][ T4891] XFS (loop3): Quotacheck: Done. [ 164.805355][ T4188] XFS (loop3): Unmounting Filesystem [ 164.853677][ T4912] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 168.603256][ T4961] loop3: detected capacity change from 0 to 512 [ 168.703140][ T4961] EXT4-fs (loop3): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 170.748652][ T4971] loop2: detected capacity change from 0 to 32768 [ 170.824939][ T4975] loop1: detected capacity change from 0 to 512 [ 170.974901][ T4984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.167'. [ 171.896508][ T4971] XFS (loop2): Mounting V5 Filesystem [ 171.896851][ T4984] loop3: detected capacity change from 0 to 4096 [ 172.474092][ T4971] XFS (loop2): Ending clean mount [ 172.482909][ T4971] XFS (loop2): Quotacheck needed: Please wait. [ 172.550342][ T4975] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 172.651053][ T4975] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 172.711105][ T4971] XFS (loop2): Quotacheck: Done. [ 172.716607][ T4975] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.168: Failed to acquire dquot type 1 [ 172.752175][ T4194] XFS (loop2): Unmounting Filesystem [ 172.760782][ T4975] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 172.773770][ T4975] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 172.793192][ T4975] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.168: Failed to acquire dquot type 1 [ 172.819184][ T4975] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.168: bg 0: block 248: padding at end of block bitmap is not set [ 172.873668][ T5005] fuse: Bad value for 'fd' [ 173.386605][ T4975] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 173.397383][ T4975] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 173.437306][ T4975] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 173.460327][ T4975] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.168: Failed to acquire dquot type 1 [ 173.502064][ T4975] EXT4-fs (loop1): 1 orphan inode deleted [ 173.516972][ T4975] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 173.544537][ T4975] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.890488][ T5011] loop4: detected capacity change from 0 to 512 [ 173.975764][ T5011] EXT4-fs (loop4): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 177.353041][ T5049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.185'. [ 177.516275][ T5046] loop2: detected capacity change from 0 to 32768 [ 177.587701][ T4452] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 177.605996][ T5050] loop3: detected capacity change from 0 to 4096 [ 177.786797][ T5046] XFS (loop2): Mounting V5 Filesystem [ 178.131073][ T5046] XFS (loop2): Ending clean mount [ 178.144405][ T5046] XFS (loop2): Quotacheck needed: Please wait. [ 178.294811][ T5046] XFS (loop2): Quotacheck: Done. [ 178.549316][ T26] audit: type=1800 audit(1776970698.570:4): pid=5071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.184" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 179.938963][ T4194] XFS (loop2): Unmounting Filesystem [ 181.350548][ T26] audit: type=1326 audit(1776970701.370:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 181.422493][ T26] audit: type=1326 audit(1776970701.390:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 181.769446][ T26] audit: type=1326 audit(1776970701.390:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 182.447582][ T26] audit: type=1326 audit(1776970701.390:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 183.277779][ T5102] loop2: detected capacity change from 0 to 512 [ 183.364746][ T5102] EXT4-fs (loop2): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 183.425735][ T26] audit: type=1326 audit(1776970701.390:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 183.708975][ T26] audit: type=1326 audit(1776970701.390:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 183.731709][ T26] audit: type=1326 audit(1776970701.390:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 183.798607][ T26] audit: type=1326 audit(1776970701.390:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 183.880738][ T26] audit: type=1326 audit(1776970701.390:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 183.919236][ T26] audit: type=1326 audit(1776970701.390:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 185.336681][ T26] audit: type=1326 audit(1776970701.400:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 185.389347][ T26] audit: type=1326 audit(1776970701.400:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 185.471358][ T26] audit: type=1326 audit(1776970701.400:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 189.131274][ T26] audit: type=1326 audit(1776970701.400:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 189.155236][ T26] audit: type=1326 audit(1776970701.400:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 189.179737][ T26] audit: type=1326 audit(1776970701.400:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 189.203436][ T26] audit: type=1326 audit(1776970701.400:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 189.399092][ T26] audit: type=1326 audit(1776970701.400:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 189.427083][ T26] audit: type=1326 audit(1776970701.400:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 189.513786][ T26] audit: type=1326 audit(1776970701.400:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 190.752149][ T26] audit: type=1326 audit(1776970701.400:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 191.310280][ T26] audit: type=1326 audit(1776970701.400:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 191.335422][ T26] audit: type=1326 audit(1776970701.400:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28971c8819 code=0x7fc00000 [ 191.407690][ T5182] loop4: detected capacity change from 0 to 512 [ 191.540830][ T5182] EXT4-fs (loop4): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 196.488487][ T5228] blktrace: Concurrent blktraces are not allowed on loop8 [ 198.433017][ T5262] loop4: detected capacity change from 0 to 512 [ 198.616021][ T5262] EXT4-fs (loop4): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 200.870697][ T5300] blktrace: Concurrent blktraces are not allowed on loop4 [ 201.614379][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.620993][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.238236][ T4452] Bluetooth: hci4: command 0x0406 tx timeout [ 203.257816][ T4452] Bluetooth: hci3: command 0x0406 tx timeout [ 203.264223][ T4452] Bluetooth: hci2: command 0x0406 tx timeout [ 203.276324][ T4452] Bluetooth: hci0: command 0x0406 tx timeout [ 203.285552][ T4452] Bluetooth: hci1: command 0x0406 tx timeout [ 205.056650][ T5366] loop4: detected capacity change from 0 to 512 [ 205.205127][ T5366] EXT4-fs (loop4): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 206.884177][ T5382] loop4: detected capacity change from 0 to 4096 [ 207.447726][ T23] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 207.466458][ T5393] fuse: Bad value for 'fd' [ 209.040982][ T23] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 209.080052][ T23] usb 4-1: can't read configurations, error -71 [ 210.679779][ T5441] loop2: detected capacity change from 0 to 1024 [ 210.721086][ T5441] EXT4-fs (loop2): Ignoring removed bh option [ 210.960758][ T5441] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 213.527394][ T5479] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 213.536123][ T5479] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 213.544780][ T5479] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 214.331780][ T5515] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 217.415535][ T5542] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 218.658835][ T5547] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 218.752663][ T5547] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 218.761836][ T5547] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 221.045791][ T5596] tipc: Started in network mode [ 221.051320][ T5596] tipc: Node identity 4, cluster identity 4711 [ 221.057943][ T5596] tipc: Node number set to 4 [ 223.035413][ T5614] loop3: detected capacity change from 0 to 2048 [ 223.158333][ T5619] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.043657][ T5634] loop4: detected capacity change from 0 to 4096 [ 229.011078][ T5703] loop3: detected capacity change from 0 to 4096 [ 230.422925][ T5724] tipc: Started in network mode [ 230.428400][ T5724] tipc: Node identity 4, cluster identity 4711 [ 230.434787][ T5724] tipc: Node number set to 4 [ 234.367873][ T4451] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 235.026084][ T5775] device ipvlan2 entered promiscuous mode [ 239.047345][ T5821] loop1: detected capacity change from 0 to 1024 [ 239.156097][ T5821] EXT4-fs (loop1): Ignoring removed bh option [ 239.244409][ T5821] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 239.339833][ T5820] loop0: detected capacity change from 0 to 32768 [ 239.666828][ T5820] XFS (loop0): Mounting V5 Filesystem [ 239.775847][ T5820] XFS (loop0): Ending clean mount [ 239.785763][ T5820] XFS (loop0): Quotacheck needed: Please wait. [ 239.867156][ T5820] XFS (loop0): Quotacheck: Done. [ 240.959003][ T4186] XFS (loop0): Unmounting Filesystem [ 242.462769][ T5862] fuse: Bad value for 'fd' [ 245.256922][ T5896] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 245.673314][ T5901] loop1: detected capacity change from 0 to 512 [ 245.685588][ T5902] fuse: Bad value for 'fd' [ 245.752298][ T5901] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 246.183271][ T5904] loop0: detected capacity change from 0 to 8192 [ 246.471564][ T5904] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.529018][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 246.529034][ T26] audit: type=1800 audit(1776970766.550:72): pid=5904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.367" name="file2" dev="loop0" ino=1048590 res=0 errno=0 [ 246.626808][ T5904] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 246.690961][ T5904] FAT-fs (loop0): Filesystem has been set read-only [ 247.707101][ T5928] process 'syz.2.374' launched '/dev/fd/3' with NULL argv: empty string added [ 249.334514][ T5939] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 249.343136][ T5939] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 249.351883][ T5939] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 252.895958][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.388'. [ 253.890862][ T5980] loop4: detected capacity change from 0 to 512 [ 253.972260][ T5980] EXT4-fs (loop4): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 254.046082][ T5984] loop1: detected capacity change from 0 to 256 [ 254.226065][ T5984] FAT-fs (loop1): Directory bread(block 64) failed [ 254.282688][ T5984] FAT-fs (loop1): Directory bread(block 65) failed [ 254.333284][ T5984] FAT-fs (loop1): Directory bread(block 66) failed [ 254.393766][ T5984] FAT-fs (loop1): Directory bread(block 67) failed [ 254.443216][ T5984] FAT-fs (loop1): Directory bread(block 68) failed [ 254.473021][ T5984] FAT-fs (loop1): Directory bread(block 69) failed [ 254.505859][ T5984] FAT-fs (loop1): Directory bread(block 70) failed [ 254.540524][ T5984] FAT-fs (loop1): Directory bread(block 71) failed [ 254.584669][ T5984] FAT-fs (loop1): Directory bread(block 72) failed [ 254.658378][ T5984] FAT-fs (loop1): Directory bread(block 73) failed [ 254.718728][ T5989] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 254.727595][ T5989] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 254.736131][ T5989] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 257.914476][ T6023] loop1: detected capacity change from 0 to 8192 [ 257.966609][ T6023] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 258.060814][ T26] audit: type=1800 audit(1776970778.080:73): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.406" name="file2" dev="loop1" ino=1048593 res=0 errno=0 [ 258.092636][ T6023] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 258.138335][ T6023] FAT-fs (loop1): Filesystem has been set read-only [ 258.188915][ T6023] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 258.227753][ T6023] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 258.256124][ T6023] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 258.287598][ T6023] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 258.315343][ T6023] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 258.370656][ T6023] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 258.405559][ T6023] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 258.448057][ T6023] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 258.480904][ T6023] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 258.508883][ T6029] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 258.517723][ T6029] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 258.526799][ T6029] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 259.803608][ T6046] loop1: detected capacity change from 0 to 16 [ 259.852437][ T6046] erofs: (device loop1): mounted with root inode @ nid 36. [ 259.880064][ T6044] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 261.059261][ T6058] loop6: detected capacity change from 0 to 8 [ 261.240621][ T6065] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 261.249230][ T6065] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 261.258124][ T6065] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 262.430299][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.436734][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.571091][ T6078] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 262.697781][ T6080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.423'. [ 262.784831][ T6080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.423'. [ 262.898131][ T6086] netlink: 'syz.3.425': attribute type 1 has an invalid length. [ 262.969829][ T6086] device bond1 entered promiscuous mode [ 262.975697][ T6086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.209558][ T6090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.291216][ T6090] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 263.417758][ T6090] bond1: (slave sit1): Setting fail_over_mac to active for active-backup mode [ 263.449935][ T6090] bond1: (slave sit1): making interface the new active one [ 263.457418][ T6090] device sit1 entered promiscuous mode [ 263.475342][ T6090] bond1: (slave sit1): Enslaving as an active interface with an up link [ 263.713924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 264.529248][ T6106] loop3: detected capacity change from 0 to 16 [ 264.571661][ T6106] erofs: (device loop3): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 264.884696][ T6113] team0: Port device syz_tun added [ 266.093857][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.438'. [ 266.255814][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 266.497756][ T6130] device hsr_slave_1 left promiscuous mode [ 268.597228][ T6161] loop0: detected capacity change from 0 to 16 [ 268.813215][ T6161] erofs: (device loop0): mounted with root inode @ nid 36. [ 268.912821][ T4451] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 268.932727][ T4451] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 268.962615][ T4191] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 269.088183][ T6173] capability: warning: `syz.2.455' uses deprecated v2 capabilities in a way that may be insecure [ 269.713101][ T23] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 269.793372][ T23] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 273.270254][ T6217] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 273.303684][ T6223] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 273.319809][ T6223] EXT4-fs (loop5): unable to read superblock [ 273.337811][ T6224] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 273.397590][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 276.081492][ T6255] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 276.183455][ T6253] loop4: detected capacity change from 0 to 32768 [ 276.269138][ T6261] overlayfs: filesystem on './file0' not supported as upperdir [ 276.403395][ T6257] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 276.412573][ T6257] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 276.502120][ T6271] netlink: 'syz.1.485': attribute type 7 has an invalid length. [ 276.510378][ T6271] netlink: 'syz.1.485': attribute type 8 has an invalid length. [ 276.840503][ T6253] XFS (loop4): Mounting V5 Filesystem [ 277.194310][ T6253] XFS (loop4): Ending clean mount [ 277.216000][ T6253] XFS (loop4): Quotacheck needed: Please wait. [ 277.297938][ T6253] XFS (loop4): Quotacheck: Done. [ 278.226080][ T26] audit: type=1800 audit(1776970797.640:74): pid=6252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.481" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 278.291142][ T6283] fuse: Bad value for 'fd' [ 278.382818][ T4197] XFS (loop4): Unmounting Filesystem [ 280.137099][ T6305] netlink: 'syz.1.494': attribute type 3 has an invalid length. [ 280.289687][ T6311] netlink: 32 bytes leftover after parsing attributes in process `syz.0.496'. [ 280.367789][ T6315] netlink: 32 bytes leftover after parsing attributes in process `syz.0.496'. [ 280.751045][ T6322] loop2: detected capacity change from 0 to 32768 [ 281.456889][ T6322] XFS (loop2): Mounting V5 Filesystem [ 281.563653][ T6322] XFS (loop2): Ending clean mount [ 281.572253][ T6322] XFS (loop2): Quotacheck needed: Please wait. [ 281.614716][ T6333] loop4: detected capacity change from 0 to 8192 [ 281.632319][ T6322] XFS (loop2): Quotacheck: Done. [ 281.993521][ T26] audit: type=1800 audit(1776970801.960:75): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.500" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 282.741583][ T6342] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 282.848711][ T6342] FAT-fs (loop4): Filesystem has been set read-only [ 282.884994][ T6354] loop0: detected capacity change from 0 to 16 [ 282.918055][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 283.052058][ T6354] erofs: (device loop0): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 283.193711][ T4194] XFS (loop2): Unmounting Filesystem [ 283.477456][ T26] audit: type=1326 audit(1776970803.490:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cf35d819 code=0x7ffc0000 [ 283.597619][ T26] audit: type=1326 audit(1776970803.500:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cf35d819 code=0x7ffc0000 [ 283.686948][ T6359] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 283.705073][ T26] audit: type=1326 audit(1776970803.500:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cf35d819 code=0x7ffc0000 [ 283.734762][ T6359] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 283.743734][ T26] audit: type=1326 audit(1776970803.550:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f03cf35d819 code=0x7ffc0000 [ 283.772981][ T26] audit: type=1326 audit(1776970803.550:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cf35d819 code=0x7ffc0000 [ 283.802925][ T26] audit: type=1326 audit(1776970803.550:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cf35d819 code=0x7ffc0000 [ 283.854386][ T26] audit: type=1326 audit(1776970803.550:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f03cf35d819 code=0x7ffc0000 [ 283.931132][ T26] audit: type=1326 audit(1776970803.550:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f03cf35d819 code=0x7ffc0000 [ 283.998808][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.515'. [ 284.842873][ T6381] netlink: 'syz.0.516': attribute type 1 has an invalid length. [ 285.058106][ T6389] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 285.067303][ T6389] overlayfs: missing 'lowerdir' [ 285.472486][ T6383] bond1: (slave gretap1): making interface the new active one [ 285.644569][ T6383] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 286.732184][ T6395] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 286.740654][ T6395] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 286.749308][ T6395] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 286.767614][ T6383] syz.0.516 (6383) used greatest stack depth: 20176 bytes left [ 288.983964][ T6414] netlink: 204 bytes leftover after parsing attributes in process `syz.0.526'. [ 291.119203][ T6453] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 291.128126][ T6453] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 291.136757][ T6453] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 292.487666][ T4451] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 293.445582][ T6485] netlink: 'syz.2.543': attribute type 4 has an invalid length. [ 293.453652][ T4451] usb 1-1: Using ep0 maxpacket: 8 [ 293.591728][ T4451] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.800508][ T4451] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 293.816908][ T4451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.841178][ T4451] usb 1-1: Product: syz [ 293.845665][ T4451] usb 1-1: Manufacturer: syz [ 293.858387][ T4451] usb 1-1: SerialNumber: syz [ 293.897047][ T4451] usb 1-1: config 0 descriptor?? [ 294.016524][ T4451] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 294.180378][ T4451] usb 1-1: USB disconnect, device number 8 [ 299.139553][ T26] audit: type=1326 audit(1776970819.160:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81288a819 code=0x7ffc0000 [ 299.295866][ T26] audit: type=1326 audit(1776970819.160:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81288a819 code=0x7ffc0000 [ 299.327219][ T26] audit: type=1326 audit(1776970819.160:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81288a819 code=0x7ffc0000 [ 299.381241][ T26] audit: type=1326 audit(1776970819.160:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81288a819 code=0x7ffc0000 [ 299.446057][ T6525] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 299.454353][ T6525] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 299.463391][ T6525] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 299.511167][ T6528] hub 1-0:1.0: USB hub found [ 299.516231][ T26] audit: type=1326 audit(1776970819.190:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff81288a819 code=0x7ffc0000 [ 299.528722][ T6528] hub 1-0:1.0: 1 port detected [ 299.549959][ T26] audit: type=1326 audit(1776970819.190:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81288a819 code=0x7ffc0000 [ 299.606860][ T26] audit: type=1326 audit(1776970819.190:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81288a819 code=0x7ffc0000 [ 299.636023][ T26] audit: type=1326 audit(1776970819.190:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff81288a819 code=0x7ffc0000 [ 299.666092][ T26] audit: type=1326 audit(1776970819.190:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff81288a819 code=0x7ffc0000 [ 301.437042][ T6551] overlayfs: failed to clone upperpath [ 302.117589][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 304.519776][ T6570] netlink: 84 bytes leftover after parsing attributes in process `syz.2.570'. [ 311.306905][ T6622] netem: change failed [ 312.957902][ T6631] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 312.966451][ T6631] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 313.073490][ T6631] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 317.965223][ T6678] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 318.147653][ T6678] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 319.200791][ T6678] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 320.085781][ T6700] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 320.094456][ T6700] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 320.103149][ T6700] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 321.957687][ T4233] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 322.425660][ T4233] usb 4-1: device descriptor read/64, error -71 [ 322.727702][ T4233] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 322.754409][ T6719] autofs4:pid:6719:autofs_fill_super: called with bogus options [ 322.917582][ T4233] usb 4-1: device descriptor read/64, error -71 [ 323.118610][ T4233] usb usb4-port1: attempt power cycle [ 323.929471][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.935951][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.217611][ T4233] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 324.230374][ T6730] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 324.239331][ T6730] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 324.248706][ T6730] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 324.426580][ T4233] usb 4-1: device descriptor read/8, error -71 [ 332.393447][ T6777] loop2: detected capacity change from 0 to 512 [ 332.642236][ T6777] EXT4-fs (loop2): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 334.077912][ T6786] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 334.086561][ T6786] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 334.095438][ T6786] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 337.175901][ T6797] device erspan0 entered promiscuous mode [ 337.196907][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.625'. [ 339.151971][ T6817] autofs4:pid:6817:autofs_fill_super: called with bogus options [ 341.157788][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 344.638479][ T6854] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 344.680662][ T6854] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 344.692722][ T6854] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 344.788171][ T146] Bluetooth: Wrong link type (-22) [ 344.795629][ T146] Bluetooth: hci1: link tx timeout [ 344.802961][ T146] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 344.812564][ T146] Bluetooth: hci1: link tx timeout [ 344.817919][ T146] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 346.917763][ T4233] Bluetooth: hci1: command 0x0406 tx timeout [ 348.527533][ T6914] overlayfs: failed to clone upperpath [ 348.562441][ T6914] overlayfs: failed to clone upperpath [ 349.381328][ T6909] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 349.390462][ T6909] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 349.399069][ T6909] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 350.813338][ T6930] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.642277][ T6954] INFO: trying to register non-static key. [ 352.648136][ T6954] The code is fine but needs lockdep annotation, or maybe [ 352.655349][ T6954] you didn't initialize this object before use? [ 352.661613][ T6954] turning off the locking correctness validator. [ 352.668044][ T6954] CPU: 0 PID: 6954 Comm: syz.2.684 Not tainted syzkaller #0 [ 352.675397][ T6954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 352.685511][ T6954] Call Trace: [ 352.688981][ T6954] [ 352.691987][ T6954] dump_stack_lvl+0x188/0x250 [ 352.696792][ T6954] ? show_regs_print_info+0x20/0x20 [ 352.702033][ T6954] ? load_image+0x400/0x400 [ 352.706599][ T6954] ? cpumask_next+0xb3/0xd0 [ 352.711185][ T6954] ? __is_module_percpu_address+0x2a7/0x410 [ 352.717123][ T6954] ? is_kernel_percpu_address+0x143/0x160 [ 352.722908][ T6954] assign_lock_key+0x1ec/0x200 [ 352.727801][ T6954] ? SOFTIRQ_verbose+0x10/0x10 [ 352.732620][ T6954] ? verify_lock_unused+0x140/0x140 [ 352.737848][ T6954] ? mark_lock+0x94/0x320 [ 352.742209][ T6954] register_lock_class+0x21d/0x890 [ 352.747408][ T6954] ? __lock_acquire+0x13bc/0x7d10 [ 352.752553][ T6954] ? is_dynamic_key+0x1f0/0x1f0 [ 352.757450][ T6954] __lock_acquire+0x16f/0x7d10 [ 352.762299][ T6954] ? mark_lock+0x94/0x320 [ 352.766676][ T6954] ? __lock_acquire+0x12e8/0x7d10 [ 352.771865][ T6954] ? verify_lock_unused+0x140/0x140 [ 352.777108][ T6954] ? unwind_get_return_address+0x49/0x80 [ 352.782875][ T6954] ? arch_stack_walk+0xf2/0x140 [ 352.787900][ T6954] ? verify_lock_unused+0x140/0x140 [ 352.793145][ T6954] ? __might_sleep+0xf0/0xf0 [ 352.797841][ T6954] lock_acquire+0x19e/0x400 [ 352.802484][ T6954] ? gsmld_write+0x57/0x120 [ 352.807124][ T6954] ? read_lock_is_recursive+0x10/0x10 [ 352.812620][ T6954] ? _copy_from_iter+0x5cb/0x1170 [ 352.817741][ T6954] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 352.823292][ T6954] ? lockdep_hardirqs_off+0x70/0x100 [ 352.828679][ T6954] _raw_spin_lock_irqsave+0xb0/0x100 [ 352.834073][ T6954] ? gsmld_write+0x57/0x120 [ 352.838683][ T6954] ? _raw_spin_lock+0x40/0x40 [ 352.843483][ T6954] ? __virt_addr_valid+0x3c6/0x470 [ 352.848904][ T6954] gsmld_write+0x57/0x120 [ 352.853419][ T6954] file_tty_write+0x557/0x910 [ 352.858219][ T6954] ? gsmld_read+0x10/0x10 [ 352.862650][ T6954] do_iter_readv_writev+0x47e/0x5f0 [ 352.868110][ T6954] ? aa_path_link+0x880/0x880 [ 352.872963][ T6954] ? generic_file_rw_checks+0x280/0x280 [ 352.878763][ T6954] ? common_file_perm+0x171/0x1c0 [ 352.884227][ T6954] ? fsnotify_perm+0x5d/0x560 [ 352.889282][ T6954] ? security_file_permission+0x75/0xa0 [ 352.894943][ T6954] do_iter_write+0x205/0x7b0 [ 352.899651][ T6954] ? import_iovec+0x6f/0xa0 [ 352.904224][ T6954] do_writev+0x281/0x480 [ 352.908716][ T6954] ? do_readv+0x460/0x460 [ 352.913321][ T6954] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 352.919406][ T6954] ? lock_chain_count+0x20/0x20 [ 352.924270][ T6954] ? vtime_user_exit+0x2c8/0x3e0 [ 352.929566][ T6954] ? lockdep_hardirqs_on+0x94/0x140 [ 352.935065][ T6954] do_syscall_64+0x4c/0xa0 [ 352.939599][ T6954] ? clear_bhb_loop+0x30/0x80 [ 352.944295][ T6954] ? clear_bhb_loop+0x30/0x80 [ 352.949219][ T6954] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 352.955388][ T6954] RIP: 0033:0x7f9194e88819 [ 352.959855][ T6954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.980143][ T6954] RSP: 002b:00007f91930e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 352.988743][ T6954] RAX: ffffffffffffffda RBX: 00007f9195101fa0 RCX: 00007f9194e88819 [ 352.996820][ T6954] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 353.005011][ T6954] RBP: 00007f9194f1ec91 R08: 0000000000000000 R09: 0000000000000000 [ 353.013559][ T6954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.021870][ T6954] R13: 00007f9195102038 R14: 00007f9195101fa0 R15: 00007ffd2b600538 [ 353.030061][ T6954]