last executing test programs: 47.715650409s ago: executing program 0 (id=698): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009b80)=@newtfilter={0xcf4, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xcc4, 0x2, [@TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_POLICE={0x430, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x3, 0x7, 0x40, 0x3, 0x2f, 0x7, 0x2, 0x1, 0x2641, 0xffffffbf, 0x0, 0xf, 0xc1, 0x5, 0x9, 0x5, 0xfffffff7, 0xff, 0xfffbff7f, 0x3, 0x8, 0xffffffff, 0x1, 0x4e4b, 0x4, 0x0, 0x6, 0x5, 0x1, 0x7, 0x10, 0x5, 0x74, 0x4, 0xe5d, 0x400, 0x10000, 0x7, 0x7, 0xffffffff, 0x9, 0x81, 0x0, 0x4, 0x9, 0x3, 0x7fff, 0x7, 0x3d, 0x2, 0x2, 0x8, 0x713, 0x8, 0x1, 0x8, 0x4b2, 0x20f3, 0x3eb, 0x65ad8de0, 0xfffffffd, 0x1, 0x4fe, 0x10001, 0xdafa, 0xc8, 0x827, 0x9, 0x7, 0x1, 0x0, 0x7, 0x7, 0x0, 0x1, 0xcc9, 0x0, 0xc0000000, 0xc07f, 0x95e, 0x80000000, 0xf, 0x9, 0x2, 0x100, 0x25c, 0x3f6ca3f6, 0xd, 0x36f, 0x73b, 0x3, 0xdf72, 0x3, 0x9, 0x4, 0x1, 0x7, 0x3, 0x7ff, 0x6, 0xffffffff, 0x5, 0x2, 0x1000, 0x8008001, 0x4, 0x6, 0x3, 0xfffffff7, 0x7, 0x4, 0x40, 0x7, 0x3, 0xd, 0xa3e7, 0x6, 0x401, 0x1, 0x4, 0xfffffff9, 0x3, 0x2, 0x800, 0x4, 0xfffffff7, 0x10, 0x1, 0xa, 0xffffffff, 0xfff, 0x7, 0x7, 0x10000, 0xc, 0x1, 0x800, 0x1, 0x1000, 0x800, 0x0, 0x9, 0xfffffff7, 0xc74e, 0x81, 0x7, 0x7, 0xf6, 0x8, 0x5, 0x7fffffff, 0x5, 0x46db, 0x9, 0x0, 0x8000, 0x0, 0x1, 0x200, 0x4, 0x5, 0x8, 0xfffffff7, 0x4f, 0xea7, 0x6, 0xd, 0xfb4, 0xd5df, 0x9, 0x1, 0x9, 0x3817, 0xa324, 0x3ff, 0x44620000, 0x4, 0x3, 0x4, 0x4, 0xffffffff, 0x3a, 0x2, 0xe, 0x6, 0x1d8d, 0x101, 0x2, 0x2, 0xff, 0x1, 0x1, 0xffffffff, 0x81, 0xfffffffc, 0x7, 0x3, 0x8, 0xe648, 0x1, 0x9, 0x2, 0x2, 0x6, 0x1000000, 0x8, 0xfffffff0, 0x2, 0x0, 0x9, 0xc, 0x3ff, 0x100, 0x7, 0x2, 0x6, 0x30, 0x9, 0x1, 0x9, 0xae4, 0x9, 0x1, 0x7, 0xffffffff, 0x8, 0x7, 0x6, 0xb56b, 0xf, 0x11812, 0x8, 0x23, 0x0, 0x4, 0x9, 0x200, 0x81, 0x3, 0x4, 0x99, 0x2, 0xfffffffa, 0xe, 0xffff, 0x2, 0x0, 0x1, 0x8, 0x2, 0x7, 0x6, 0x8, 0x7fffffff, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}, @TCA_CGROUP_POLICE={0x854, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xd20}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0xef84, 0x4, 0x9, {0xe, 0x0, 0x5, 0x5b9f, 0x2, 0xf}, {0x5d, 0x0, 0x81, 0x0, 0x8, 0x9}, 0x60b0, 0x0, 0xffff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x16, 0x5, 0x8, 0x0, 0x7, 0x3, 0x3, 0x8, 0x1, 0x0, 0x6cf, 0x3, 0x9, 0x8, 0xd7, 0x10, 0x7, 0x5, 0x6, 0x6, 0x5ec6, 0x67c2, 0x9, 0x400, 0x9, 0x4, 0x18, 0x0, 0x25, 0xfffffffb, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x3, 0x0, 0x0, 0x8, 0x8, 0x0, 0x4, 0x9, 0x28, 0x6, 0x4, 0x4, 0xb1, 0x7, 0x2, 0x8001, 0x2, 0x6, 0xd, 0x0, 0x0, 0x7, 0x26f, 0x4, 0x2, 0x38, 0x6, 0x1, 0x1, 0xffff1e20, 0x3, 0xb, 0x81, 0xaea0, 0x4, 0xa, 0x8, 0x401, 0x0, 0x3, 0xd90, 0x68d, 0x814c, 0x7, 0x2, 0x0, 0x3, 0x8, 0x81, 0x4, 0x401, 0x4, 0x4, 0x8, 0xffffff01, 0x7, 0x4, 0x1, 0x4, 0x3, 0x6, 0xe, 0x9, 0x5, 0xb, 0x2, 0x3, 0x4, 0x409, 0x3, 0x8, 0xe7, 0x2, 0x9, 0x3, 0x7, 0x6, 0x3, 0xc9a, 0x1, 0x81, 0xfff, 0x3, 0x7, 0x80, 0xffffffff, 0x401, 0x0, 0x1, 0xffffffff, 0x3, 0x85, 0x68, 0x1, 0x7, 0x1, 0x40, 0x7, 0x6, 0x100, 0xffffffff, 0xb1, 0x1, 0x2, 0xfffffffc, 0x5, 0xc, 0x5, 0x5, 0x0, 0x8, 0x0, 0x9, 0x7, 0xfff, 0x1, 0x0, 0xfffffffa, 0x3, 0x3, 0x3, 0x7, 0x9, 0x6, 0x101, 0x7, 0x0, 0x3, 0x2, 0x40, 0x7ff, 0x88e6, 0x0, 0x8, 0x101, 0x3, 0x3, 0x2, 0x7, 0x208, 0x7fff, 0x1, 0xad4, 0x2, 0x0, 0xc1, 0x1, 0x6, 0x8, 0x3, 0x3, 0xffff, 0x10001, 0x6, 0x9, 0x7, 0xfffffff8, 0x460f0cda, 0xffff7a33, 0xffffffff, 0x7, 0x1, 0x8, 0x4, 0x1, 0x33, 0x1, 0x2, 0x80, 0x9026, 0x3, 0x1, 0x879, 0x2, 0x0, 0x100, 0x6, 0x5, 0xc00000, 0x8, 0x6, 0x8, 0x5, 0x1, 0x71, 0x444e, 0x9, 0x4, 0x1, 0xdf, 0x4, 0x3, 0x7, 0x200, 0xfffffffa, 0x4, 0x9, 0x6, 0x40, 0x8b7, 0x10000, 0xfffffff8, 0x1, 0x8, 0xa8, 0x7ff, 0x7, 0x2, 0x9, 0x5, 0x3, 0x4, 0x4, 0x1, 0x10001, 0x3, 0x87, 0x200]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0xffff, 0xffff2f1f, 0x4, 0x0, 0x9, 0x8f8, 0x5, 0x971, 0x575, 0x3, 0x6, 0x1, 0x0, 0x8, 0x7ff, 0xffffff95, 0x4e923fee, 0x200000, 0x1, 0xf764, 0x8, 0x2, 0x9a, 0x1020000, 0x4, 0x1, 0x1, 0xea0, 0x6, 0x7fffffff, 0x1c3c6bca, 0x1, 0x0, 0x80, 0x9, 0xa, 0x5, 0x2, 0x4, 0x2, 0x3, 0x3, 0x3, 0x4, 0x7, 0x3, 0xff, 0xff, 0x4, 0x830, 0x3, 0x7, 0x4, 0x2, 0x1, 0x1, 0xfffffffe, 0x8, 0x6b, 0x4, 0x6, 0x4, 0x7, 0x7, 0x3, 0x10, 0x0, 0xe, 0x80000001, 0x8, 0xb, 0x7, 0x20a, 0xb, 0x8, 0x3, 0x5, 0xffffffff, 0x200, 0xf89b, 0x9, 0x4, 0x8, 0x3, 0xfffffc00, 0x7, 0x7, 0x0, 0xfffffffe, 0x0, 0x5, 0x200, 0x0, 0x4, 0x9, 0x28, 0x7, 0xa, 0x0, 0xd3b, 0x23be, 0x7, 0x5, 0x1ff, 0x8, 0x7f, 0x4, 0x4322, 0x1, 0x3, 0x1ff, 0x101, 0x0, 0x3, 0x7, 0x800, 0x2, 0x1, 0xfff, 0x9, 0xfffffff9, 0x18b, 0x6a, 0x7, 0x5a, 0x1, 0x400, 0x1f21, 0x4, 0x4, 0x3ff, 0x8, 0x3, 0x1, 0x6, 0x8fd1, 0x1c000000, 0x9, 0x7, 0x1, 0x9, 0x2, 0x5, 0x2, 0xa, 0x1ff, 0x5, 0x3, 0x0, 0xfffffffc, 0x9, 0x8, 0x1, 0x0, 0x2, 0x10000, 0x2, 0x4, 0xa, 0x2, 0x1c6f, 0x6, 0x6, 0x10, 0x30000000, 0x2, 0x6, 0x6, 0x4, 0xa, 0x1, 0x3, 0x100, 0xd792, 0x5, 0x3, 0x40, 0x101, 0x3, 0x4, 0x1, 0x7f, 0x4, 0x8, 0x9, 0x401, 0x5, 0x6, 0x735, 0x3, 0x7, 0x7abba55c, 0x8, 0xa8fd, 0xb, 0x9, 0x6, 0xe7d, 0x9, 0x4, 0x7, 0x7fff, 0x2, 0x400, 0x1, 0x0, 0xa, 0x200, 0x7, 0x7f, 0x2, 0x3310, 0x401, 0x3, 0x4, 0x8, 0x5, 0xfffffff9, 0x2, 0x1, 0xde000000, 0x2, 0x4068d107, 0x1, 0x100, 0x2, 0x80000001, 0x2a92, 0x4, 0xfffffeff, 0x0, 0x9, 0xfffffffd, 0x0, 0x2, 0x4, 0x4, 0x32a6, 0x8, 0x40000000, 0xf, 0x5, 0x8, 0x101, 0x2, 0x7, 0x0, 0xa4, 0x3, 0x100, 0x40, 0xe03b, 0x4, 0x6]}]}, @TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x10, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0xcf4}}, 0x20040054) 46.176694325s ago: executing program 0 (id=704): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) write$tun(r2, &(0x7f0000000140)={@val={0xa, 0x10}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "000400", 0x0, 0x0, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2}}}}}, 0x3a) r3 = syz_open_dev$vcsa(0x0, 0x1, 0x48042) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r3, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000007c0)}, {&(0x7f0000000900)}], 0x3) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x8800) socket$unix(0x1, 0x1, 0x0) 45.110782341s ago: executing program 0 (id=705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)) 44.931244608s ago: executing program 0 (id=707): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 43.924254852s ago: executing program 0 (id=709): mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x7d, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a70002", 0x47, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9900, [], "0080d5"}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x80000003, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000240)={0x3, 0x2c5, 0x4, 0x7, 0x4, 0x6}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0xe7, 0x0, 0x2, 0x4, 0x0, 0x7, 0x4, 0x7, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 42.722251953s ago: executing program 0 (id=718): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7ffffffd, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r5, 0x1000006) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x1000000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x9c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000100)=0x2) 27.286412403s ago: executing program 32 (id=718): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7ffffffd, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r5, 0x1000006) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x1000000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x9c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000100)=0x2) 10.822198157s ago: executing program 1 (id=851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) socket$nl_netfilter(0x10, 0x3, 0xc) 10.544772079s ago: executing program 1 (id=854): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800, 0xffffffffffffffff}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setitimer(0x0, &(0x7f0000000000)={{0xffffffff}, {0x0, 0x82}}, 0x0) 8.732923417s ago: executing program 4 (id=860): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180), 0x0) capset(0x0, &(0x7f0000000140)={0x0, 0x40000000, 0x80000804, 0x81, 0xfffffffb, 0xffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)={{0x10b, 0x7, 0x7, 0x9b, 0x3cb, 0x6, 0x87, 0x7}}, 0x20) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dff, 0x15}) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000200)=0x17) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x8442, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10010, 0xffffffffffffffff, 0x13074000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x111, 0x4b4, 0x1ac, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffff00, 0xffffff00], [0x0, 0xff000000, 0x0, 0xffffffff], 'ipvlan0\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0xe}, 0x0, 0x188, 0x1ac, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x7b}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'hsr0\x00', 'pim6reg1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x1, 0xfffffffe, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3dc) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) 7.522434068s ago: executing program 1 (id=866): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000280)) r1 = fsopen(&(0x7f00000002c0)='ntfs3\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0\x00', 0x100) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000000)={0x1, {"a17d5e122ebf6b77a4d730bc89b7a4e9", "c83eafe9e9a1fd8c17b3e231364ebe2c", "c579b7fb877c6ec7e0223b61c4730dab"}, 0x80000000, 0x1}) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000180)) fcntl$getownex(r5, 0x10, &(0x7f0000000080)={0x0, 0x0}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r7, 0x6, 0xe, &(0x7f00000003c0)=""/177, &(0x7f0000000480)=0xb1) prlimit64(r6, 0x7, 0x0, &(0x7f00000000c0)) pipe2$watch_queue(0x0, 0x80) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r8, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000100)='%\xff\xff2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\x10\xf7\xb2\xed\x8a\xdc\xa6\x8fO\xc8\xbay,\xae\xd3\xc5*\x15\xdf_\xb2_`\x92', 0x0) 7.503908689s ago: executing program 3 (id=867): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1a}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000300)="a1", 0x1}], 0x1}}], 0x1, 0x200400c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000ec7b6cfc635d0b0ad7017c9d184f843485ad6b0c66e46b4f2b2b3338ded465cc7a55d2a736fbe5caf56af30d84e957c1aff67f265538b2c9243391e98bd0d49249e784ec5865bec706d0ffcc9ee36f168460645fc9b9cbc6444f578ed1a652063ccaf386202986098ad022d4f06ff51960d8c526db848130817a8f2ad3580e6e80bada6adb489c66ee82b00b9777dbaab08233e404107ab405d1056190224cb200"/178, @ANYRES16=r2, @ANYBLOB="0d030000000000000000130000000c0009800800020000000000"], 0x20}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x40, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f0000000500)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x80, 0x0}, 0x4000011) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 6.029998172s ago: executing program 1 (id=870): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r2, 0x58, &(0x7f00000003c0)}, 0x10) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, &(0x7f0000000100)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_FREE_STREAMS(r5, 0xc0105500, &(0x7f0000000140)=ANY=[@ANYBLOB="a1"]) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x2000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000bc0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x15}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}}, &(0x7f0000000380)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe67, 0x0, 0x0, 0x0}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x2f000000, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000040)='./file0\x00', 0x100) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000240009"], 0x1c}}, 0x8800) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020}, 0x2020) 5.37222283s ago: executing program 1 (id=872): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x14, {[@global=@item_012={0x2, 0x1, 0x5, '\t\x00'}, @global=@item_4={0x3, 0x1, 0x1, "b278eaf7"}, @main=@item_4={0x3, 0x0, 0x8, "19a0d42a"}, @global=@item_012={0x1, 0x1, 0x1, "84"}, @main=@item_4={0x3, 0x0, 0xc, 'u\t+5'}]}}, 0x0}, 0x0) 4.948309789s ago: executing program 2 (id=874): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x24d780, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x5, [0x0, 0x0, 0xd1, 0x8b, 0xc]}}) r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$uinput_user_dev(r3, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac1f}, 0x40, [0x3, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0xf08e, 0xfffffe5d, 0x0, 0x8001, 0x1, 0xfffffffd, 0x8000, 0x4, 0xffffffff, 0x2, 0x6, 0x3, 0x4, 0x6a90, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x0, 0xe, 0x8000, 0x1, 0x9d, 0x10000080, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x7, 0x8001, 0xff, 0x7, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x9, 0x4, 0x8, 0xfffff7fb, 0x4, 0x100, 0x5, 0x800000b], [0x7, 0x9d2, 0x7fffffff, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x6, 0x8, 0x80001005, 0x6, 0x0, 0xd, 0xfffffff7, 0x7fffffff, 0x100000, 0x800, 0x2, 0x3, 0x7, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xd, 0x1, 0x4, 0x100, 0x3, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0xfffffffc, 0x1, 0xe8, 0x0, 0x2, 0xb, 0x4, 0x6, 0xbdc, 0x3e6, 0x9, 0x9, 0x0, 0x20008, 0x80000001, 0x6], [0x1, 0xd, 0x7, 0x590, 0xfffffff, 0xb0, 0x8, 0x9, 0x2, 0x4, 0x9, 0x7, 0x7, 0x410003, 0x4, 0xe, 0x8001, 0xfffffffe, 0x0, 0xffff, 0x200, 0x0, 0x79fc, 0x8, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x2, 0x2, 0x8000, 0x10, 0x5, 0x3, 0x1, 0x10, 0xb4, 0x6, 0x80000001, 0x8001, 0x3, 0x1b9, 0x8a8, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x5, 0x74da, 0xec9, 0x140, 0x5, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x0, 0x9, 0x80000000, 0xffff, 0xb7, 0x6, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0x9, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x400, 0x6, 0x6, 0x5, 0x5, 0x20, 0x4, 0xd, 0x6, 0x1, 0x6, 0x2, 0x2, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0xfffffffb]}, 0x45c) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0xfffffffffffffcf5, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.92700842s ago: executing program 3 (id=875): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800, 0xffffffffffffffff}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setitimer(0x0, &(0x7f0000000000)={{0xffffffff}, {0x0, 0x82}}, 0x0) 4.519935897s ago: executing program 4 (id=876): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x20, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @binary="f1d966c6"}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$can_bcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020000000202000001000000", @ANYRES32=0x0, @ANYRES32=0xea60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000006001003aeab97b00c0010118003ec4e61694e462ee"], 0x48}, 0x1, 0x0, 0x0, 0x240040c0}, 0x40840) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000100)={0x2, 0xe, 0x4, 0x2, 0xc}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x464, 0x318, 0x25, 0x148, 0x318, 0x60, 0x3d0, 0x2a8, 0x2a8, 0x3d0, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffffff, 'lo\x00', '\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0x2f8, 0x318, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x5, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x2, 0x0, [{0x6, 0x10, 0xff, 0x80000000}, {0x7, 0x4, 0x8, 0x8}, {0x5, 0x40, 0x6e, 0x8}, {0x1, 0x9, 0x8, 0x10001}, {0x5, 0x6, 0x92, 0x6}, {0xa, 0x96, 0xd3, 0x3}, {0x8, 0x7, 0x3, 0x2}, {0x5, 0xf, 0x40, 0x2}, {0xe, 0x69, 0x2, 0x1}, {0xf2, 0x25, 0xff, 0x10001}, {0x8, 0x7, 0xff, 0x1}, {0x4, 0x1c, 0x2, 0x18}, {0x9, 0x6, 0xa3, 0x9}, {0x8, 0x0, 0x9, 0x5}, {0x2, 0x1, 0xff, 0x7ff}, {0x6c1, 0x8, 0x1, 0x9}, {0x0, 0xd0, 0x6, 0xc5}, {0x1000, 0x8, 0x6, 0x1}, {0x9a6, 0xd, 0x0, 0x800}, {0x7, 0x10, 0x1, 0x1}, {0x8000, 0x96, 0x81, 0xa0000}, {0x9, 0x8, 0x9, 0xff}, {0xb, 0x6, 0x8, 0x9}, {0x862, 0x18, 0x4, 0x9}, {0xffd8, 0xf, 0xae, 0x7fffffff}, {0x8, 0x3, 0x40, 0x3}, {0x4, 0x3, 0x0, 0x2}, {0xffff, 0x3, 0x2, 0x4}, {0x100, 0x3, 0x7, 0x40}, {0x1, 0x58, 0x0, 0x6}, {0x8000, 0x80, 0x4, 0x3}, {0x7, 0x4, 0x5, 0x7f}, {0xc6e, 0x3, 0xc, 0x2}, {0xf, 0x60, 0x1, 0x2}, {0x3af3, 0x3, 0xff, 0x6}, {0xfffe, 0x7, 0x0, 0x2}, {0xc, 0xd1, 0x3}, {0x8, 0x5, 0x8, 0x80000000}, {0xb, 0x7f, 0x0, 0x4}, {0x9f7d, 0xb}, {0x5, 0x9, 0x0, 0x8}, {0x868, 0xc5, 0x12}, {0x7fff, 0xa8, 0x48, 0x10000}, {0x4, 0x0, 0x8, 0x6}, {0x2, 0x2, 0xd, 0xfffffffe}, {0xa3c6, 0x80, 0x60, 0x5}, {0x5c50, 0x6, 0x4, 0x1c000}, {0x99eb, 0x7, 0x80, 0x4}, {0x7f, 0x32, 0xd3, 0x5}, {0x0, 0x9, 0xfc, 0x1}, {0x4, 0x40, 0x7b, 0x5}, {0xd97f, 0x4, 0x8, 0xe}, {0xffc0, 0x4, 0x0, 0x7}, {0x6, 0xd, 0x33, 0x6}, {0x5, 0xf, 0xf9, 0x3}, {0xa, 0x6, 0x80, 0xffff}, {0x3, 0x2, 0x9, 0x2}, {0x50, 0x8, 0x78, 0x8}, {0x820, 0x0, 0xb9, 0x10}, {0xffff, 0x49, 0x1, 0x464}, {0x80, 0x40, 0x76, 0x2}, {0x885, 0x2, 0x9, 0x10000}, {0xe6, 0x0, 0x3, 0x3}, {0x7, 0xc2, 0x8, 0x2}], {0x6}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x10001, 0x10, 'netbios-ns\x00', {0x7}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x4c0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x6, 0x1, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x20000009, 0x3, 0x7fffffff, 0xffffffff, 0xca9f, 0x7f, 0x200008, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0x40, 0x0, 0xfffffff8]}) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000040), 0x1) io_uring_setup(0x44dc, &(0x7f0000000000)={0x0, 0xbfffeffb, 0x1000, 0x1000b, 0x2}) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='net/mcfilter\x00') socket$inet_mptcp(0x2, 0x1, 0x106) preadv(r8, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c) 4.42683647s ago: executing program 5 (id=790): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) 4.294146896s ago: executing program 2 (id=877): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x5452, 0x0) r2 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000380)={0x20, 0x12, 0x11, "b89b939d2ee58edc0719a623cb67cc5d68"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r3, &(0x7f00000007c0)="0bcde56ca9a62cbf", 0x8) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7a, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2a, 0x9d, 0x7b, 0x8, 0x102c, 0x6151, 0x4a36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1f, 0x1, 0x0, 0xd, "", [{{0x9, 0x4, 0xc5, 0x9, 0x0, 0xb4, 0x2, 0xad}}]}}]}}, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_disconnect(r4) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x8, 0x0, 0x7, {0x8, 0xb, 0x0, 0x1, 0x1, 0xa, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x101, 0xa, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x7, 0xc8, {0x8, 0x25, 0x1, 0x0, 0x3, 0xba, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0x3, 0x2b, {0x8, 0x25, 0x1, 0x3, 0x33, 0x1, 0x6}}}}}}}}]}}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x56, &(0x7f0000000500)=@string={0x56, 0x3, "0c001e022d27ed67fb1dc148127c2af7070655cf7bf1bebae5eee4cc41595f87dd477602a8e171d334b8b99c9abd22d3ceabd5b31fc47209d386b6cbff638344a22fb34d99b0cbb3be4c573c9ef211b44c91caae"}}, {0x0, 0x0}, {0x0, 0x0}]}) 4.056081777s ago: executing program 3 (id=878): r0 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0xffffffc0, 0x20080) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000940)=""/4096) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x4, 0x10, 0xfffffffffffffffa, 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={r5, 0x1}, 0x8) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000000), 0x0, 0x40000102, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ioctl$UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000000c40)={0x0, 0xaaaaaaaaaaaaaae, [{0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000}, {0xffffffffffffffff, 0x0, 0x1000000}]}) close(0x3) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x20001, 0x0, 0x11}, 0x18) 3.464164332s ago: executing program 4 (id=879): fsopen(&(0x7f0000000080)='vfat\x00', 0x1) 3.357229507s ago: executing program 4 (id=880): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x1cef000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r3, 0x1, 0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) 3.248246911s ago: executing program 5 (id=881): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0200000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) 3.188284804s ago: executing program 2 (id=882): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800682237b3663000010"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 3.05079059s ago: executing program 3 (id=883): add_key$keyring(&(0x7f0000000980), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9f, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0x2563, 0x4) sendto$inet(r6, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvfrom$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000340)={r5, 0x1, 0x6, @local}, 0x10) 2.800180451s ago: executing program 5 (id=884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 2.777767052s ago: executing program 2 (id=885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.287788002s ago: executing program 5 (id=886): r0 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x5, 0x1) write(r0, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0xd, "b7aa19cd92c1e7d5ba56be5124"}, &(0x7f0000000240)=0x15) fcntl$notify(r1, 0x402, 0x5) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8940) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) 2.114378s ago: executing program 4 (id=887): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e20, 0xe40, @private2, 0x4}}, 0x0, 0x0, 0x1d, 0x0, "0bee84a0d6b8edc96c0d7e487f86ab23307066bcf140ddd3d1c838ca4d53ca64534c6302d618caa5ba02000000b3e8a6bd7055dc50689c5d81b60f4fb2494bb0ca8a7cd3f6fccfd90000000000004000"}, 0xd8) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @local, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe7}}}}}}, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0xffffffffffffffff, &(0x7f0000000180)=0x32) 2.055117862s ago: executing program 1 (id=888): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800, 0xffffffffffffffff}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setitimer(0x0, &(0x7f0000000000)={{0xffffffff}, {0x0, 0x82}}, 0x0) 1.264420966s ago: executing program 2 (id=889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) 1.186463689s ago: executing program 3 (id=890): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) write$tun(r2, &(0x7f0000000140)={@val={0xa, 0x10}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "000400", 0x0, 0x0, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2}}}}}, 0x3a) r3 = syz_open_dev$vcsa(0x0, 0x1, 0x48042) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r3, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21c", 0x2}, {0x0}, {&(0x7f0000000900)}], 0x4) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x8800) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 1.1861116s ago: executing program 4 (id=891): socket$inet6_tcp(0xa, 0x1, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x6) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='jfs\x00', 0x400080, &(0x7f00000001c0)='discard') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x738, 0x0, 0x228, 0x0, 0x5b8, 0x5b8, 0x6d0, 0x6d0, 0x6d0, 0x6d0, 0x6d0, 0x6, &(0x7f0000000380), {[{{@ipv6={@empty, @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xff], 'veth1_virt_wifi\x00', 'batadv0\x00', {}, {0x1cd2af259700f990}, 0x33, 0x66, 0x0, 0x60}, 0x0, 0x1dc, 0x220, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0x10, 0x5], 0x2, 0xa11b7ddcf662e78e, 0x4, [@loopback, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @local, @loopback, @dev={0xfe, 0x80, '\x00', 0x21}, @loopback, @dev={0xfe, 0x80, '\x00', 0x10}, @loopback, @mcast2, @local, @loopback, @private0, @private1], 0xf}}]}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010101, @ipv4=@local, 0x80, 0x2c, 0x4}}}, {{@uncond, 0x0, 0x110, 0x134, 0x0, {}, [@common=@icmp6={{0x24}, {0x12, "b02b"}}, @common=@hbh={{0x48}, {0x386b, 0x3, 0x0, [0x347, 0x9, 0x81, 0x6, 0x0, 0xd, 0x1, 0x8000, 0xe5, 0xff, 0xff01, 0x5, 0x3, 0x5, 0x8, 0x6], 0x10}}]}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x2, 0x6c03, @ipv4=@private=0xa010101, 0x4e22}}}, {{@uncond, 0x0, 0xec, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xc}}, @inet=@rpfilter={{0x24}, {0x3}}]}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@remote, 0x21, 0x35, 0x500}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x37}, [0x0, 0xff, 0x0, 0xffffffff], [0xff000000, 0x0, 0xff, 0xff], 'bridge_slave_0\x00', 'gretap0\x00', {0xff}, {}, 0x8, 0xf, 0x1, 0x20}, 0x0, 0xc8, 0x10c, 0x0, {}, [@common=@ipv6header={{0x24}, {0x20, 0x21, 0x1}}]}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@mcast2, 0x30, 0x3b, 0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x794) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r5 = userfaultfd(0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) close(0x3) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000180)=0x6f) dup2(r8, r8) 126.494275ms ago: executing program 3 (id=892): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x5452, 0x0) r2 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000380)={0x20, 0x12, 0x12, "b89b939d2ee58edc0719a623cb67cc5d68c2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r3, &(0x7f00000007c0)="0bcde56ca9a62cbf", 0x8) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7a, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2a, 0x9d, 0x7b, 0x8, 0x102c, 0x6151, 0x4a36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1f, 0x1, 0x0, 0xd, "", [{{0x9, 0x4, 0xc5, 0x9, 0x0, 0xb4, 0x2, 0xad}}]}}]}}, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_disconnect(r4) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x8, 0x0, 0x7, {0x8, 0xb, 0x0, 0x1, 0x1, 0xa, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x101, 0xa, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x7, 0xc8, {0x8, 0x25, 0x1, 0x0, 0x3, 0xba, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0x3, 0x2b, {0x8, 0x25, 0x1, 0x3, 0x33, 0x1, 0x6}}}}}}}}]}}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x56, &(0x7f0000000500)=@string={0x56, 0x3, "0c001e022d27ed67fb1dc148127c2af7070655cf7bf1bebae5eee4cc41595f87dd477602a8e171d334b8b99c9abd22d3ceabd5b31fc47209d386b6cbff638344a22fb34d99b0cbb3be4c573c9ef211b44c91caae"}}, {0x0, 0x0}, {0x0, 0x0}]}) 0s ago: executing program 2 (id=893): socket(0x15, 0x5, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$ocfs2_control(0xffffff9c, 0x0, 0x60000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027a67000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b007abe9a22a2c8d7dfefb51ce15272ec18b08ecc0ac3a4516774a034eca6fa07aa5fe02148600129067336a33460e6e888b5a313d2ece1e873ac54b36f7702fc49821cca10dbc15d04a8d46d6d5029fac9789e2bf53040d71ee98f77367870f55403aa49174befa95f66d6734cf4941627f80b61904a0d3c6c5f", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0xfffffffe, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x243, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x9, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x5, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x8, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x80000005, 0x0, 0xa, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x80096, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0xffffffff, 0x1, 0x8, 0x7, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7a, 0x401, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x1, 0x2000b, 0x8a5, 0x8a, 0x46, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0x5328ed0e, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) readv(r4, &(0x7f00000001c0)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0xfffd}, 0x10) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000103d10000140000102030109026e000301d8100c080b"], 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r6, r5, 0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) kernel console output (not intermixed with test programs): e: batadv_slave_0 [ 67.772267][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.798742][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.817012][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.825307][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.851599][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.889307][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.914438][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.924455][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.932681][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.958801][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.971628][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.978671][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.005493][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.022860][ T4190] device hsr_slave_0 entered promiscuous mode [ 68.030147][ T4190] device hsr_slave_1 entered promiscuous mode [ 68.038774][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.056171][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.088295][ T4189] device hsr_slave_0 entered promiscuous mode [ 68.095288][ T4189] device hsr_slave_1 entered promiscuous mode [ 68.102491][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.110789][ T4189] Cannot create hsr debugfs directory [ 68.139532][ T4192] team0: Port device team_slave_0 added [ 68.147895][ T4188] team0: Port device team_slave_0 added [ 68.172867][ T4192] team0: Port device team_slave_1 added [ 68.180182][ T4188] team0: Port device team_slave_1 added [ 68.246081][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.253381][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.279692][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.296057][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.303156][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.330039][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.349380][ T4191] device hsr_slave_0 entered promiscuous mode [ 68.356711][ T4191] device hsr_slave_1 entered promiscuous mode [ 68.367675][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.375362][ T4191] Cannot create hsr debugfs directory [ 68.390873][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.397867][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.424063][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.440547][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.447551][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.473790][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.539961][ T4195] Bluetooth: hci0: command 0x0409 tx timeout [ 68.546683][ T4195] Bluetooth: hci4: command 0x0409 tx timeout [ 68.550195][ T1347] Bluetooth: hci1: command 0x0409 tx timeout [ 68.568773][ T1347] Bluetooth: hci2: command 0x0409 tx timeout [ 68.607269][ T4188] device hsr_slave_0 entered promiscuous mode [ 68.614033][ T4188] device hsr_slave_1 entered promiscuous mode [ 68.621491][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.629583][ T1347] Bluetooth: hci3: command 0x0409 tx timeout [ 68.635492][ T4188] Cannot create hsr debugfs directory [ 68.653255][ T4192] device hsr_slave_0 entered promiscuous mode [ 68.660495][ T4192] device hsr_slave_1 entered promiscuous mode [ 68.667202][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.675172][ T4192] Cannot create hsr debugfs directory [ 68.904915][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.926455][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.936342][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.946692][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.016284][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.026254][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.041458][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.055308][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.089366][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.111446][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.124492][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.146248][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.212562][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.222841][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.236882][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.254920][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.265177][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.290255][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.297302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.307768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.356440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.366286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.377715][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.385060][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.397518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.406525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.416225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.426220][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.433656][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.462472][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.485762][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.495486][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.507489][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.519364][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.542916][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.560489][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.569932][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.579884][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.587924][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.598515][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.622074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.632229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.643241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.652808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.661785][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.668906][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.677675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.686691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.695489][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.702630][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.713221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.721649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.730400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.739676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.765815][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.786250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.794561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.802860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.813142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.822388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.831705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.840746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.859653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.868414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.877580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.886211][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.893320][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.902154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.911464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.920676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.929942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.961693][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.971724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.983791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.993354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.003472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.012843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.022353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.031348][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.038433][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.063018][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.077964][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.091071][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.101622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.110759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.120749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.146756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.179684][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.187572][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.204461][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.216326][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.234240][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.244854][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.259148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.279713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.325230][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.342857][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.367286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.376819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.395579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.406970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.421851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.435105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.445992][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.453159][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.462639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.470665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.486428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.495367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.508335][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.515513][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.552313][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.566113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.577762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.595303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.606767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.621026][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 70.629056][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 70.638861][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 70.645095][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.659625][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 70.669776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.678448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.690590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.705535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.709897][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 70.716823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.728261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.743293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.767374][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.805794][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.817506][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.838157][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.846013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.854253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.863289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.873102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.882767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.891674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.901381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.909363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.960237][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.967514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.984634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.997775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.009641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.018161][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.025302][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.034550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.048029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.062610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.071307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.102226][ T4189] device veth0_vlan entered promiscuous mode [ 71.130565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.139833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.147922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.161349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.170519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.179469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.188252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.197927][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.205063][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.213234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.222467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.233956][ T4191] device veth0_vlan entered promiscuous mode [ 71.270538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.284005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.292266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.302162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.311246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.320957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.333219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.345827][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.347381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.352668][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.378256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.400241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.409344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.417935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.427581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.444028][ T4191] device veth1_vlan entered promiscuous mode [ 71.457061][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.469649][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.479057][ T4190] device veth0_vlan entered promiscuous mode [ 71.495355][ T4189] device veth1_vlan entered promiscuous mode [ 71.505168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.514225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.522351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.531718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.550074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.557546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.584345][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.598510][ T4190] device veth1_vlan entered promiscuous mode [ 71.643268][ T4191] device veth0_macvtap entered promiscuous mode [ 71.656175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.676425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.686298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.711136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.733788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.756288][ T4189] device veth0_macvtap entered promiscuous mode [ 71.772339][ T4189] device veth1_macvtap entered promiscuous mode [ 71.783795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.794222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.803482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.813454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.849188][ T4191] device veth1_macvtap entered promiscuous mode [ 71.882556][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.918255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.932081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.944530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.955450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.964285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.987137][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.001064][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.013185][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.025067][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.035660][ T4190] device veth0_macvtap entered promiscuous mode [ 72.044218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.056861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.071900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.084244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.096191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.112079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.123603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.138039][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.148975][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.167572][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.179137][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.190996][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.200059][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.209452][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.218214][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.249113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.257871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.269226][ T4190] device veth1_macvtap entered promiscuous mode [ 72.277582][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.288519][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.297729][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.307954][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.339349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.349930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.394141][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.407740][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.418390][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.430385][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.441180][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.452244][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.464530][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.493129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.514343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.525508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.540047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.549995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.557966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.572032][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.584134][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.594364][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.605801][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.619920][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.630444][ T4188] device veth0_vlan entered promiscuous mode [ 72.647835][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.656692][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.666783][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.676437][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.686949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.696177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.705012][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 72.709940][ T4271] Bluetooth: hci0: command 0x040f tx timeout [ 72.716251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.717685][ T4271] Bluetooth: hci1: command 0x040f tx timeout [ 72.731252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.748763][ T4271] Bluetooth: hci2: command 0x040f tx timeout [ 72.761878][ T4192] device veth0_vlan entered promiscuous mode [ 72.779527][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 72.801475][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.813787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.819356][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.830198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.840170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.854155][ T4188] device veth1_vlan entered promiscuous mode [ 72.895420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.939393][ T4192] device veth1_vlan entered promiscuous mode [ 72.960522][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.968454][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.986562][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.996052][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.014596][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.030767][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.039087][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.047208][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.056451][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.067678][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.076734][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.123506][ T4192] device veth0_macvtap entered promiscuous mode [ 73.140036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.149689][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.157550][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.167196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.177434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.200086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.218096][ T4188] device veth0_macvtap entered promiscuous mode [ 73.237828][ T4192] device veth1_macvtap entered promiscuous mode [ 73.254380][ T4188] device veth1_macvtap entered promiscuous mode [ 73.271929][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.297360][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.320947][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.341881][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.352178][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.390114][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.407163][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.420777][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.462415][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.485550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.505373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.513291][ T4278] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.526324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.543840][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.556239][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.568386][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.579347][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.590444][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.600991][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.611379][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.622833][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.634406][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.663095][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.678255][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.712062][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.734952][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.746680][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.757479][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.770247][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.778285][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.789877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.800163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.813154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.834313][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.845715][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.856921][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.869727][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.880021][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.890922][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.916584][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.935780][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.946531][ T4286] loop1: detected capacity change from 0 to 512 [ 73.956236][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.976980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.986328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.015231][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.030319][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.043729][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.055515][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.065621][ T4286] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.8: inode has both inline data and extents flags [ 74.084511][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.096543][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.096855][ T4286] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.8: couldn't read orphan inode 15 (err -117) [ 74.105424][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.127457][ T4286] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.139833][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.154033][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.162671][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.194315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.339306][ T4289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.347197][ T4289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.376981][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.377547][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.410688][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.433402][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.491702][ T4289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.518264][ T4289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.531747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.557822][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.596572][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.646789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.684043][ T4296] input: syz0 as /devices/virtual/input/input5 [ 74.780456][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 74.789474][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 74.981764][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 74.988907][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 74.995836][ T4235] Bluetooth: hci3: command 0x0419 tx timeout [ 75.081601][ T4311] loop1: detected capacity change from 0 to 512 [ 76.723640][ T4322] loop4: detected capacity change from 0 to 128 [ 76.746725][ T4311] EXT4-fs (loop1): Ignoring removed nobh option [ 76.854224][ T4311] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 76.972358][ T4311] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.980828][ T4326] loop3: detected capacity change from 0 to 256 [ 77.049127][ T4322] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 77.174589][ T4322] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.549077][ T4236] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.610257][ T4343] loop3: detected capacity change from 0 to 128 [ 78.489035][ T4236] usb 2-1: Using ep0 maxpacket: 32 [ 78.552985][ T4343] FAT-fs (loop3): bogus logical sector size 65535 [ 78.579586][ T4343] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 78.607197][ T4352] binder: 4351:4352 ioctl c018620c 200000000300 returned -1 [ 78.618776][ T4343] FAT-fs (loop3): Can't find a valid FAT filesystem [ 78.629926][ T4236] usb 2-1: device descriptor read/all, error -71 [ 78.674062][ T4354] loop2: detected capacity change from 0 to 512 [ 78.749709][ T4354] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.808938][ T4354] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.658626][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.764650][ T4354] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 79.799269][ T4354] EXT4-fs (loop2): 1 truncate cleaned up [ 79.808767][ T4354] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 80.142093][ T4382] wireguard: wg1: Could not create IPv4 socket [ 80.298626][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 80.318613][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 80.328612][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 80.338612][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 80.348610][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 80.358612][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 80.378621][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 80.388618][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 80.398612][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 80.728877][ T4379] loop0: detected capacity change from 0 to 2048 [ 80.807700][ T4391] loop2: detected capacity change from 0 to 512 [ 80.847673][ T4379] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.879749][ T4391] ======================================================= [ 80.879749][ T4391] WARNING: The mand mount option has been deprecated and [ 80.879749][ T4391] and is ignored by this kernel. Remove the mand [ 80.879749][ T4391] option from the mount to silence this warning. [ 80.879749][ T4391] ======================================================= [ 80.926716][ T4395] loop4: detected capacity change from 0 to 512 [ 80.958246][ T4391] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.976876][ T4391] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 33554437)! [ 80.995048][ T4391] EXT4-fs (loop2): group descriptors corrupted! [ 81.005191][ T4395] EXT4-fs (loop4): Ignoring removed nobh option [ 81.063352][ T4395] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 81.078963][ T4395] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.108681][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.227640][ T4422] loop3: detected capacity change from 0 to 1024 [ 82.368738][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 82.509004][ T7] usb 5-1: config 0 has an invalid descriptor of length 180, skipping remainder of the config [ 82.552721][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.662266][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 82.717770][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.776876][ T7] usb 5-1: config 0 descriptor?? [ 82.841890][ T7] hub 5-1:0.0: bad descriptor, ignoring hub [ 82.866037][ T7] hub: probe of 5-1:0.0 failed with error -5 [ 82.893703][ T7] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 83.152518][ T4431] loop1: detected capacity change from 0 to 2048 [ 83.384532][ T4431] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.974206][ T4451] input: syz1 as /devices/virtual/input/input6 [ 84.240067][ T4235] usb 5-1: USB disconnect, device number 2 [ 84.497801][ T4479] loop3: detected capacity change from 0 to 2048 [ 84.538527][ T4479] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.567818][ T26] audit: type=1800 audit(1778637106.780:2): pid=4479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.66" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 84.872171][ T4487] loop2: detected capacity change from 0 to 512 [ 84.986713][ T4487] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 85.364817][ T4497] loop4: detected capacity change from 0 to 512 [ 85.385987][ T4487] EXT4-fs (loop2): failed to open journal device unknown-block(11,127) -6 [ 85.449100][ T4497] EXT4-fs (loop4): Ignoring removed nobh option [ 85.559498][ T4497] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 85.609079][ T4497] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.758799][ T4518] netlink: 'syz.0.81': attribute type 3 has an invalid length. [ 85.828150][ T4522] loop1: detected capacity change from 0 to 512 [ 85.928671][ T4290] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.168686][ T4290] usb 5-1: Using ep0 maxpacket: 32 [ 86.365168][ T4535] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 86.402337][ T4535] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 86.667359][ T4290] usb 5-1: config 0 has an invalid descriptor of length 180, skipping remainder of the config [ 86.688676][ T4290] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.705408][ T1335] cfg80211: failed to load regulatory.db [ 86.748728][ T4290] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 86.757824][ T4290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.807865][ T4290] usb 5-1: config 0 descriptor?? [ 86.869946][ T4290] hub 5-1:0.0: bad descriptor, ignoring hub [ 86.875939][ T4290] hub: probe of 5-1:0.0 failed with error -5 [ 86.910484][ T4290] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 87.231640][ T4547] loop2: detected capacity change from 0 to 1024 [ 87.275675][ T4547] EXT4-fs (loop2): Ignoring removed nobh option [ 87.282754][ T4547] EXT4-fs (loop2): inline encryption not supported [ 87.290251][ T4547] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.307123][ T4547] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 87.307123][ T4547] [ 88.207184][ T4563] device syzkaller0 entered promiscuous mode [ 88.463984][ T13] usb 5-1: USB disconnect, device number 3 [ 88.778598][ C1] sched: RT throttling activated [ 89.189585][ T4579] loop1: detected capacity change from 0 to 256 [ 89.205676][ T4579] FAT-fs (loop1): Unrecognized mount option "shovtname=mixed" or missing value [ 89.208302][ T4580] input: syz1 as /devices/virtual/input/input7 [ 89.453056][ T4589] loop1: detected capacity change from 0 to 512 [ 89.536387][ T4589] EXT4-fs (loop1): Ignoring removed nobh option [ 89.597548][ T4589] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 89.628434][ T4589] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.750017][ T4599] netlink: 'syz.0.113': attribute type 3 has an invalid length. [ 89.798786][ T1347] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.909603][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 90.168878][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 90.219359][ T1347] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.310563][ T13] usb 2-1: config 0 has an invalid descriptor of length 180, skipping remainder of the config [ 90.327129][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.346686][ T13] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 90.356572][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.372995][ T13] usb 2-1: config 0 descriptor?? [ 90.430301][ T13] hub 2-1:0.0: bad descriptor, ignoring hub [ 90.436288][ T13] hub: probe of 2-1:0.0 failed with error -5 [ 90.443335][ T1347] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.453629][ T1347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.464536][ T13] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 90.472578][ T1347] usb 5-1: Product: syz [ 90.476810][ T1347] usb 5-1: Manufacturer: syz [ 90.499176][ T1347] usb 5-1: SerialNumber: syz [ 90.988833][ T1347] cdc_ncm 5-1:1.0: bind() failure [ 91.018778][ T1347] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 91.038742][ T1347] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 91.058776][ T1347] usbtest: probe of 5-1:1.1 failed with error -71 [ 91.081740][ T1347] usb 5-1: USB disconnect, device number 4 [ 91.326994][ T4614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.334688][ T4614] IPv6: NLM_F_CREATE should be set when creating new route [ 91.445755][ T4616] input: syz1 as /devices/virtual/input/input8 [ 91.868865][ T1347] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.168686][ T1347] usb 3-1: Using ep0 maxpacket: 16 [ 92.309394][ T1347] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 92.317690][ T1347] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.356208][ T1347] usb 3-1: config 0 has no interface number 0 [ 92.558976][ T4234] usb 2-1: USB disconnect, device number 4 [ 92.569739][ T1347] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 92.583433][ T1347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.633186][ T1347] usb 3-1: Product: syz [ 92.643328][ T1347] usb 3-1: Manufacturer: syz [ 92.652550][ T1347] usb 3-1: SerialNumber: syz [ 92.676914][ T1347] usb 3-1: config 0 descriptor?? [ 92.929072][ T1347] usb 3-1: Found UVC 0.00 device syz (046d:08d3) [ 92.935520][ T1347] usb 3-1: No valid video chain found. [ 93.144991][ T1347] usb 3-1: USB disconnect, device number 2 [ 93.170134][ T4643] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.177402][ T4643] IPv6: NLM_F_CREATE should be set when creating new route [ 93.265823][ T4638] loop0: detected capacity change from 0 to 4096 [ 93.908844][ T4656] netlink: 'syz.1.136': attribute type 3 has an invalid length. [ 94.085852][ T4660] loop2: detected capacity change from 0 to 2048 [ 94.098028][ T4662] loop4: detected capacity change from 0 to 256 [ 94.152958][ T4662] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.165989][ T4660] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 94.179313][ T4660] UDF-fs: Scanning with blocksize 512 failed [ 94.185501][ T4662] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 94.198754][ T4290] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.209602][ T4660] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.226813][ T4662] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 94.390436][ T4290] usb 2-1: device descriptor read/64, error -71 [ 94.408073][ T4664] loop2: detected capacity change from 0 to 1024 [ 94.452432][ T4664] EXT4-fs (loop2): Ignoring removed bh option [ 94.518880][ T4664] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 94.538798][ T4664] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.557103][ T4674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.564459][ T4674] IPv6: NLM_F_CREATE should be set when creating new route [ 94.585320][ T4673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 94.666058][ T4664] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.140: lblock 3 mapped to illegal pblock 3 (length 3) [ 94.681693][ T4290] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 94.691220][ T4680] loop4: detected capacity change from 0 to 16 [ 94.750370][ T4680] erofs: (device loop4): mounted with root inode @ nid 36. [ 94.763907][ T4664] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 94.783756][ T4679] loop3: detected capacity change from 0 to 4096 [ 94.798746][ T4664] EXT4-fs (loop2): This should not happen!! Data will be lost [ 94.798746][ T4664] [ 94.819258][ T4681] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.140: lblock 3 mapped to illegal pblock 3 (length 1) [ 94.837163][ T4663] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.140: lblock 3 mapped to illegal pblock 3 (length 1) [ 94.910556][ T4663] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.140: lblock 3 mapped to illegal pblock 3 (length 1) [ 94.946833][ T4679] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.973827][ T4681] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.140: lblock 3 mapped to illegal pblock 3 (length 1) [ 94.999067][ T4670] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 95.052246][ T4290] usb 2-1: device descriptor read/64, error -71 [ 95.065163][ T4663] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.140: lblock 3 mapped to illegal pblock 3 (length 1) [ 95.095254][ T4681] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.140: lblock 3 mapped to illegal pblock 3 (length 1) [ 95.113343][ T4663] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.140: lblock 3 mapped to illegal pblock 3 (length 1) [ 95.159402][ T4681] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.140: lblock 3 mapped to illegal pblock 3 (length 1) [ 95.203796][ T4290] usb usb2-port1: attempt power cycle [ 95.237546][ T4684] attempt to access beyond end of device [ 95.237546][ T4684] loop4: rw=524288, want=34359738368, limit=16 [ 95.499601][ T26] audit: type=1326 audit(1778637117.590:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.4.146" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2ff2ae59 code=0x7ffc0000 [ 95.623802][ T4684] syz.4.146 (4684) used greatest stack depth: 20880 bytes left [ 95.751700][ T4290] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 95.784832][ T26] audit: type=1326 audit(1778637117.590:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.4.146" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2ff2ae59 code=0x7ffc0000 [ 95.890684][ T26] audit: type=1800 audit(1778637117.840:5): pid=4684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.146" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 95.899648][ T4290] usb 2-1: device descriptor read/8, error -71 [ 95.921712][ T4635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.197104][ T4694] loop3: detected capacity change from 0 to 16 [ 96.208398][ T4290] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 96.994040][ T4694] erofs: (device loop3): mounted with root inode @ nid 36. [ 97.088798][ T4290] usb 2-1: device descriptor read/8, error -71 [ 97.250509][ T4290] usb usb2-port1: unable to enumerate USB device [ 97.432035][ T4709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.510904][ T4722] loop2: detected capacity change from 0 to 2048 [ 98.832930][ T26] audit: type=1326 audit(1778637121.040:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4726 comm="syz.3.158" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7baa6ce59 code=0x7ffc0000 [ 100.449344][ T4735] input: syz1 as /devices/virtual/input/input9 [ 100.466081][ T4699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.149'. [ 100.475284][ T26] audit: type=1326 audit(1778637121.040:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4726 comm="syz.3.158" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7baa6ce59 code=0x7ffc0000 [ 100.589115][ T4729] loop4: detected capacity change from 0 to 4096 [ 100.660490][ T4722] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.075494][ T4746] netlink: 'syz.2.163': attribute type 3 has an invalid length. [ 101.209626][ T4749] loop1: detected capacity change from 0 to 8192 [ 101.362407][ T4749] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 101.387123][ T4749] UDF-fs: Scanning with blocksize 512 failed [ 101.455773][ T4749] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 101.488730][ T4749] UDF-fs: Scanning with blocksize 1024 failed [ 101.503301][ T4749] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 101.519157][ T4749] UDF-fs: Scanning with blocksize 2048 failed [ 101.581936][ T4232] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.919935][ T4724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.374327][ T4749] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.524832][ T26] audit: type=1804 audit(1778637124.680:8): pid=4749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.165" name="/newroot/39/file0/file1" dev="loop1" ino=818 res=1 errno=0 [ 102.559053][ T4232] usb 3-1: Using ep0 maxpacket: 32 [ 102.658223][ T4762] loop0: detected capacity change from 0 to 512 [ 103.389057][ T4232] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.438223][ T4232] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.458258][ T4762] EXT4-fs (loop0): Ignoring removed nobh option [ 103.601272][ T4775] loop1: detected capacity change from 0 to 16 [ 103.618808][ T4232] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 103.633739][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.635918][ T4762] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #3: comm syz.0.161: corrupted inode contents [ 103.643088][ T4232] usb 3-1: Product: syz [ 103.659884][ T4232] usb 3-1: Manufacturer: syz [ 103.664456][ T4775] erofs: (device loop1): mounted with root inode @ nid 36. [ 103.671971][ T4232] usb 3-1: SerialNumber: syz [ 103.676879][ T4232] usb 3-1: config 0 descriptor?? [ 103.834744][ T4762] EXT4-fs (loop0): Remounting filesystem read-only [ 103.852062][ T4762] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #3: comm syz.0.161: mark_inode_dirty error [ 103.914498][ T4762] EXT4-fs (loop0): Remounting filesystem read-only [ 103.925575][ T4762] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #3: comm syz.0.161: corrupted inode contents [ 104.799117][ T4784] attempt to access beyond end of device [ 104.799117][ T4784] loop1: rw=524288, want=34359738368, limit=16 [ 105.139039][ T4784] syz.1.170 (4784) used greatest stack depth: 20816 bytes left [ 105.332937][ T26] audit: type=1326 audit(1778637127.150:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.1.170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4f7e9e59 code=0x7ffc0000 [ 105.380120][ T4762] EXT4-fs (loop0): Remounting filesystem read-only [ 105.415006][ T4233] usb 3-1: USB disconnect, device number 3 [ 105.431731][ T26] audit: type=1326 audit(1778637127.150:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.1.170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4f7e9e59 code=0x7ffc0000 [ 105.450067][ T4762] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.161: mark_inode_dirty error [ 105.456559][ T26] audit: type=1800 audit(1778637127.360:11): pid=4784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.170" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 105.571649][ T4762] EXT4-fs (loop0): Remounting filesystem read-only [ 105.607047][ T4762] Quota error (device loop0): write_blk: dquota write failed [ 105.666375][ T4762] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 105.703787][ T4794] loop1: detected capacity change from 0 to 2048 [ 105.718388][ T4762] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.161: Failed to acquire dquot type 0 [ 105.770043][ T4762] EXT4-fs (loop0): Remounting filesystem read-only [ 105.832013][ T4794] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.839542][ T4762] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.161: corrupted inode contents [ 105.895840][ T4762] EXT4-fs (loop0): Remounting filesystem read-only [ 105.927660][ T4762] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #16: comm syz.0.161: mark_inode_dirty error [ 106.038874][ T4762] EXT4-fs (loop0): Remounting filesystem read-only [ 106.045681][ T4762] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.161: corrupted inode contents [ 106.064409][ T4762] EXT4-fs (loop0): Remounting filesystem read-only [ 106.082580][ T4762] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.161: mark_inode_dirty error [ 106.106683][ T4762] EXT4-fs (loop0): Remounting filesystem read-only [ 106.114152][ T4762] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.161: corrupted inode contents [ 106.153934][ T4762] EXT4-fs (loop0): Remounting filesystem read-only [ 106.174495][ T4762] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 106.197057][ T4762] EXT4-fs (loop0): Remounting filesystem read-only [ 106.214112][ T4762] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.161: corrupted inode contents [ 106.274506][ T4762] EXT4-fs (loop0): Remounting filesystem read-only [ 106.307774][ T4762] EXT4-fs error (device loop0): ext4_truncate:4286: inode #16: comm syz.0.161: mark_inode_dirty error [ 106.394178][ T4762] EXT4-fs (loop0): Remounting filesystem read-only [ 106.490247][ T4762] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 106.673031][ T4762] EXT4-fs (loop0): Remounting filesystem read-only [ 106.895908][ T4762] EXT4-fs (loop0): 1 truncate cleaned up [ 107.082300][ T4762] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback. [ 107.184090][ T4762] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.348488][ T4818] loop4: detected capacity change from 0 to 16 [ 107.416759][ T4818] erofs: (device loop4): mounted with root inode @ nid 36. [ 107.809466][ T4823] attempt to access beyond end of device [ 107.809466][ T4823] loop4: rw=524288, want=34359738368, limit=16 [ 108.061027][ T26] audit: type=1800 audit(1778637130.200:12): pid=4823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.183" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 108.392514][ T4830] netlink: 'syz.3.185': attribute type 3 has an invalid length. [ 108.718404][ T4841] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 108.789797][ T4841] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 109.010575][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.648640][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 109.848907][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.868709][ T23] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 110.072975][ T4850] device syzkaller0 entered promiscuous mode [ 110.141475][ T23] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 110.164891][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.203903][ T23] usb 4-1: Product: syz [ 110.208149][ T23] usb 4-1: Manufacturer: syz [ 110.235461][ T23] usb 4-1: SerialNumber: syz [ 110.289985][ T23] usb 4-1: config 0 descriptor?? [ 110.411662][ T4858] netlink: 'syz.0.191': attribute type 4 has an invalid length. [ 111.341002][ T1347] usb 4-1: USB disconnect, device number 2 [ 111.865759][ T4872] loop0: detected capacity change from 0 to 16 [ 111.891695][ T4872] erofs: (device loop0): mounted with root inode @ nid 36. [ 112.325234][ T4876] attempt to access beyond end of device [ 112.325234][ T4876] loop0: rw=524288, want=34359738368, limit=16 [ 112.491233][ T26] audit: type=1800 audit(1778637134.710:13): pid=4876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.196" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 113.128764][ T1347] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.308967][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 113.669589][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.766702][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.813775][ T4890] netlink: 'syz.4.203': attribute type 3 has an invalid length. [ 113.918316][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.049116][ T23] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.088802][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.193379][ T23] usb 2-1: config 0 descriptor?? [ 114.438784][ T1347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.458726][ T1347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.469066][ T4290] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 114.495839][ T1347] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.538760][ T1347] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.547901][ T1347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.590469][ T1347] usb 4-1: config 0 descriptor?? [ 114.697167][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 114.708783][ T4290] usb 5-1: Using ep0 maxpacket: 32 [ 114.730075][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 114.758150][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 114.785740][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 114.803680][ T4907] loop0: detected capacity change from 0 to 512 [ 114.806337][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 114.829767][ T4290] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.858848][ T4290] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 114.868092][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 114.890778][ T23] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 114.920961][ T4907] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.208: inode has both inline data and extents flags [ 114.940643][ T23] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 114.969179][ T4907] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.208: couldn't read orphan inode 15 (err -117) [ 114.985277][ T23] usb 2-1: USB disconnect, device number 9 [ 115.015705][ T4907] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.039637][ T4290] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 115.055783][ T4290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.065668][ T4290] usb 5-1: Product: syz [ 115.073010][ T1347] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 115.085624][ T4290] usb 5-1: Manufacturer: syz [ 115.090902][ T4290] usb 5-1: SerialNumber: syz [ 115.119303][ T4290] usb 5-1: config 0 descriptor?? [ 115.141059][ T1347] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 115.247389][ T4910] fido_id[4910]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 115.305776][ T23] usb 4-1: USB disconnect, device number 3 [ 115.371473][ T4232] usb 5-1: USB disconnect, device number 5 [ 115.479035][ T4914] fido_id[4914]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 115.647649][ T4917] loop1: detected capacity change from 0 to 16 [ 115.693768][ T4917] erofs: (device loop1): mounted with root inode @ nid 36. [ 115.716403][ T4920] loop2: detected capacity change from 0 to 16 [ 115.731187][ T4920] erofs: (device loop2): mounted with root inode @ nid 36. [ 118.029528][ T4924] attempt to access beyond end of device [ 118.029528][ T4924] loop1: rw=524288, want=34359738368, limit=16 [ 118.074336][ T26] audit: type=1326 audit(1778637140.230:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.2.212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b1232e59 code=0x7ffc0000 [ 118.464562][ T26] audit: type=1326 audit(1778637140.240:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.2.212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b1232e59 code=0x7ffc0000 [ 118.505310][ T26] audit: type=1326 audit(1778637140.250:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.2.212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f45b1232e59 code=0x7ffc0000 [ 118.584602][ T26] audit: type=1326 audit(1778637140.250:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.2.212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f45b1232bc2 code=0x7ffc0000 [ 118.609515][ T26] audit: type=1326 audit(1778637140.250:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.2.212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f45b11f368e code=0x7ffc0000 [ 118.634287][ T26] audit: type=1326 audit(1778637140.260:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.2.212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f45b1232c87 code=0x7ffc0000 [ 118.666260][ T26] audit: type=1326 audit(1778637140.260:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.2.212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45b11f368e code=0x7ffc0000 [ 118.758654][ T26] audit: type=1326 audit(1778637140.260:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.2.212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45b1232aeb code=0x7ffc0000 [ 118.900924][ T26] audit: type=1326 audit(1778637140.260:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.2.212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45b1232aeb code=0x7ffc0000 [ 119.085011][ T26] audit: type=1326 audit(1778637140.260:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.2.212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f45b11f368e code=0x7ffc0000 [ 119.339714][ T4957] input: syz1 as /devices/virtual/input/input10 [ 119.463584][ T4960] loop0: detected capacity change from 0 to 16 [ 119.568522][ T4960] erofs: (device loop0): mounted with root inode @ nid 36. [ 119.978308][ T4967] attempt to access beyond end of device [ 119.978308][ T4967] loop0: rw=524288, want=34359738368, limit=16 [ 120.760742][ T4972] device syzkaller0 entered promiscuous mode [ 121.371872][ T4988] input: syz1 as /devices/virtual/input/input11 [ 124.164485][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 124.164504][ T26] audit: type=1326 audit(1778637146.090:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4992 comm="syz.3.238" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7baa6ce59 code=0x7ffc0000 [ 124.263366][ T26] audit: type=1326 audit(1778637146.090:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4992 comm="syz.3.238" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7baa6ce59 code=0x7ffc0000 [ 124.364240][ T5008] device syzkaller0 entered promiscuous mode [ 125.455386][ T26] audit: type=1326 audit(1778637147.670:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.3.252" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7baa6ce59 code=0x7ffc0000 [ 126.001226][ T26] audit: type=1326 audit(1778637147.670:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.3.252" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7baa6ce59 code=0x7ffc0000 [ 126.656975][ T5061] device syzkaller0 entered promiscuous mode [ 127.130842][ T5076] loop4: detected capacity change from 0 to 16 [ 127.166030][ T5076] erofs: (device loop4): mounted with root inode @ nid 36. [ 129.662836][ T5080] attempt to access beyond end of device [ 129.662836][ T5080] loop4: rw=524288, want=34359738368, limit=16 [ 129.843918][ T26] audit: type=1800 audit(1778637152.060:35): pid=5080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.265" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 130.467619][ T5099] device syzkaller0 entered promiscuous mode [ 130.519776][ T5096] loop4: detected capacity change from 0 to 2048 [ 130.684458][ T5096] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.920771][ T5116] loop1: detected capacity change from 0 to 16 [ 131.031119][ T5116] erofs: (device loop1): mounted with root inode @ nid 36. [ 131.439915][ T5126] attempt to access beyond end of device [ 131.439915][ T5126] loop1: rw=524288, want=34359738368, limit=16 [ 131.609543][ T26] audit: type=1800 audit(1778637153.820:36): pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.279" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 132.064652][ T5133] device syzkaller0 entered promiscuous mode [ 133.446965][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.453469][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.274152][ T26] audit: type=1326 audit(1778637156.480:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.3.295" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7baa6ce59 code=0x7ffc0000 [ 134.762454][ T26] audit: type=1326 audit(1778637156.490:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.3.295" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7baa6ce59 code=0x7ffc0000 [ 135.248945][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 136.357369][ T5188] loop4: detected capacity change from 0 to 2048 [ 136.398990][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.625520][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.644293][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.674989][ T7] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.687354][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.698214][ T5188] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.739193][ T7] usb 4-1: config 0 descriptor?? [ 136.887359][ T5203] capability: warning: `syz.1.310' uses 32-bit capabilities (legacy support in use) [ 136.888251][ T5205] loop2: detected capacity change from 0 to 16 [ 136.973312][ T5205] erofs: (device loop2): mounted with root inode @ nid 36. [ 137.365506][ T5212] attempt to access beyond end of device [ 137.365506][ T5212] loop2: rw=524288, want=34359738368, limit=16 [ 137.536691][ T26] audit: type=1800 audit(1778637159.750:39): pid=5212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.312" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 137.909704][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 137.918519][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 137.945607][ T7] usb 4-1: USB disconnect, device number 4 [ 142.491233][ T5246] loop1: detected capacity change from 0 to 8192 [ 142.602148][ T5246] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 142.610782][ T5246] UDF-fs: Scanning with blocksize 512 failed [ 142.658836][ T5246] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 142.684194][ T5252] loop0: detected capacity change from 0 to 16 [ 142.709906][ T5246] UDF-fs: Scanning with blocksize 1024 failed [ 142.731894][ T5246] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 142.777133][ T5252] erofs: (device loop0): mounted with root inode @ nid 36. [ 142.791953][ T5246] UDF-fs: Scanning with blocksize 2048 failed [ 143.031160][ T5246] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.321603][ T5264] attempt to access beyond end of device [ 143.321603][ T5264] loop0: rw=524288, want=34359738368, limit=16 [ 144.072691][ T26] audit: type=1800 audit(1778637166.000:40): pid=5264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.325" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 144.202221][ T26] audit: type=1804 audit(1778637166.320:41): pid=5246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.323" name="/newroot/70/file0/file1" dev="loop1" ino=818 res=1 errno=0 [ 145.369707][ T4235] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 145.931857][ T5289] loop1: detected capacity change from 0 to 16 [ 146.083004][ T5289] erofs: (device loop1): mounted with root inode @ nid 36. [ 146.229578][ T4235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.010597][ T5295] attempt to access beyond end of device [ 147.010597][ T5295] loop1: rw=524288, want=34359738368, limit=16 [ 147.204932][ T26] audit: type=1800 audit(1778637169.420:42): pid=5295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.333" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 147.423876][ T4235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.434112][ T4235] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.464766][ T4235] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.474337][ T4235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.633233][ T4235] usb 3-1: config 0 descriptor?? [ 147.659716][ T4235] usb 3-1: can't set config #0, error -71 [ 147.673413][ T5302] loop2: detected capacity change from 0 to 512 [ 147.699072][ T4235] usb 3-1: USB disconnect, device number 4 [ 147.813454][ T5307] loop1: detected capacity change from 0 to 16 [ 147.847961][ T5302] EXT4-fs (loop2): Ignoring removed nobh option [ 147.928882][ T5307] erofs: (device loop1): mounted with root inode @ nid 36. [ 147.936544][ T5302] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 148.048935][ T5302] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.388793][ T4290] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 148.849346][ T5321] attempt to access beyond end of device [ 148.849346][ T5321] loop1: rw=524288, want=34359738368, limit=16 [ 149.438772][ T26] audit: type=1800 audit(1778637171.500:43): pid=5321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.340" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 149.590584][ T4290] usb 3-1: Using ep0 maxpacket: 32 [ 149.716642][ T4290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 31940, setting to 1024 [ 149.779513][ T4290] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 149.835108][ T4290] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 149.872044][ T4290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.906636][ T4290] usb 3-1: config 0 descriptor?? [ 149.938952][ T5302] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 149.960067][ T4290] hub 3-1:0.0: bad descriptor, ignoring hub [ 150.019044][ T4290] hub: probe of 3-1:0.0 failed with error -5 [ 150.067649][ T4290] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 152.029272][ T4290] usb 3-1: USB disconnect, device number 5 [ 153.245436][ T5349] loop4: detected capacity change from 0 to 2048 [ 153.392806][ T5349] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.522091][ T5362] loop2: detected capacity change from 0 to 8192 [ 156.219651][ T5362] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 156.404991][ T5362] UDF-fs: Scanning with blocksize 512 failed [ 156.425589][ T5362] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 156.489235][ T5362] UDF-fs: Scanning with blocksize 1024 failed [ 156.518340][ T5362] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 156.536650][ T5362] UDF-fs: Scanning with blocksize 2048 failed [ 156.635631][ T5362] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.206539][ T5403] loop2: detected capacity change from 0 to 2048 [ 157.219332][ T4233] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 157.293046][ T5403] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.634488][ T5424] netlink: 'syz.2.380': attribute type 3 has an invalid length. [ 158.669829][ T5428] loop0: detected capacity change from 0 to 16 [ 158.869723][ T5428] erofs: (device loop0): mounted with root inode @ nid 36. [ 159.727995][ T5431] attempt to access beyond end of device [ 159.727995][ T5431] loop0: rw=524288, want=34359738368, limit=16 [ 159.743795][ T4290] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 160.002552][ T26] audit: type=1800 audit(1778637182.060:44): pid=5431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.382" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 160.218789][ T4290] usb 3-1: Using ep0 maxpacket: 32 [ 160.300587][ T4233] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 160.316073][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.548783][ T4233] usb 2-1: can't set config #1, error -71 [ 160.548791][ T4290] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 160.548817][ T4290] usb 3-1: config 0 has no interface number 0 [ 160.560816][ T4233] usb 2-1: USB disconnect, device number 10 [ 160.615101][ T4290] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 160.631078][ T4290] usb 3-1: config 0 interface 184 has no altsetting 0 [ 163.538806][ T4290] usb 3-1: string descriptor 0 read error: -71 [ 163.553396][ T4290] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 163.579436][ T4290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.639680][ T4290] usb 3-1: config 0 descriptor?? [ 163.654422][ T5477] loop0: detected capacity change from 0 to 16 [ 163.663575][ T4290] usb 3-1: can't set config #0, error -71 [ 163.674880][ T4290] usb 3-1: USB disconnect, device number 6 [ 163.711578][ T5477] erofs: (device loop0): mounted with root inode @ nid 36. [ 164.259200][ T4236] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 164.320412][ T5489] attempt to access beyond end of device [ 164.320412][ T5489] loop0: rw=524288, want=34359738368, limit=16 [ 164.578730][ T26] audit: type=1800 audit(1778637186.730:45): pid=5489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.399" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 164.919041][ T4236] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 164.966703][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.994156][ T4236] usb 4-1: Product: syz [ 165.003911][ T4236] usb 4-1: Manufacturer: syz [ 165.009934][ T4236] usb 4-1: SerialNumber: syz [ 165.784038][ T5509] netlink: 'syz.0.407': attribute type 3 has an invalid length. [ 165.920215][ T4236] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 166.172516][ T5517] loop1: detected capacity change from 0 to 2048 [ 166.269344][ T5517] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.381628][ T5520] udc-core: couldn't find an available UDC or it's busy [ 166.457375][ T5520] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 166.668052][ T4290] usb 4-1: USB disconnect, device number 5 [ 166.678676][ C0] usblp0: nonzero write bulk status received: -71 [ 166.736363][ T5535] loop1: detected capacity change from 0 to 2048 [ 166.897433][ T4231] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 167.226540][ T5520] usblp0: removed [ 167.458748][ T4231] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.469620][ T4231] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 167.688748][ T4231] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.706161][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.721120][ T4231] usb 3-1: Product: syz [ 167.732954][ T4231] usb 3-1: Manufacturer: syz [ 167.738778][ T4231] usb 3-1: SerialNumber: syz [ 167.999966][ T4231] usb 3-1: USB disconnect, device number 7 [ 168.785223][ T5559] loop2: detected capacity change from 0 to 2048 [ 168.860247][ T5559] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.269178][ T5585] netlink: 'syz.0.432': attribute type 3 has an invalid length. [ 170.650257][ T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 171.210123][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.253815][ T13] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 171.625151][ T13] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.654130][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.684394][ T13] usb 4-1: Product: syz [ 171.693825][ T13] usb 4-1: Manufacturer: syz [ 171.703996][ T13] usb 4-1: SerialNumber: syz [ 172.525655][ T4236] usb 4-1: USB disconnect, device number 6 [ 175.132621][ T5644] loop1: detected capacity change from 0 to 8 [ 176.358677][ T4231] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 176.409875][ T5664] netlink: 'syz.0.457': attribute type 3 has an invalid length. [ 176.758880][ T4231] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.778880][ T4231] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 176.998841][ T4231] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.028353][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.047453][ T4231] usb 3-1: Product: syz [ 177.058620][ T4231] usb 3-1: Manufacturer: syz [ 177.073548][ T4231] usb 3-1: SerialNumber: syz [ 177.337490][ T4236] usb 3-1: USB disconnect, device number 8 [ 178.200877][ T4231] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 178.434070][ T4231] usb 3-1: device descriptor read/64, error -71 [ 178.732812][ T4231] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 178.948922][ T4231] usb 3-1: device descriptor read/64, error -71 [ 179.100366][ T4231] usb usb3-port1: attempt power cycle [ 179.658725][ T4231] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 179.738999][ T5687] loop0: detected capacity change from 0 to 8192 [ 179.761664][ T4231] usb 3-1: device descriptor read/8, error -71 [ 179.768382][ T5687] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 179.788856][ T5687] UDF-fs: Scanning with blocksize 512 failed [ 179.831700][ T5687] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 179.875592][ T5687] UDF-fs: Scanning with blocksize 1024 failed [ 179.969949][ T5687] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 180.026222][ T5687] UDF-fs: Scanning with blocksize 2048 failed [ 180.068733][ T4231] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 180.110100][ T5687] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.878941][ T4231] usb 3-1: device descriptor read/8, error -71 [ 181.008970][ T4231] usb usb3-port1: unable to enumerate USB device [ 182.223704][ T5722] loop1: detected capacity change from 0 to 16 [ 182.297266][ T5719] loop0: detected capacity change from 0 to 4096 [ 182.375212][ T5722] erofs: (device loop1): mounted with root inode @ nid 36. [ 182.496912][ T5724] netlink: 'syz.2.476': attribute type 3 has an invalid length. [ 182.828311][ T5736] attempt to access beyond end of device [ 182.828311][ T5736] loop1: rw=524288, want=34359738368, limit=16 [ 182.998418][ T5736] syz.1.475 (5736) used greatest stack depth: 20432 bytes left [ 183.029118][ T26] audit: type=1800 audit(1778637205.210:46): pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.475" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 183.629390][ T4234] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 184.548665][ T4234] usb 3-1: Using ep0 maxpacket: 32 [ 184.609553][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 184.667590][ T5753] loop1: detected capacity change from 0 to 8192 [ 184.674563][ T4234] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 184.691094][ T4234] usb 3-1: config 0 has no interface number 0 [ 184.706838][ T5753] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 184.707962][ T4234] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 184.735561][ T4234] usb 3-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 184.749651][ T5753] UDF-fs: Scanning with blocksize 512 failed [ 184.756476][ T4234] usb 3-1: config 0 interface 184 has no altsetting 0 [ 184.777207][ T5753] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 184.789797][ T5753] UDF-fs: Scanning with blocksize 1024 failed [ 184.818758][ T13] usb 5-1: device descriptor read/64, error -71 [ 184.828468][ T5753] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 184.850354][ T5753] UDF-fs: Scanning with blocksize 2048 failed [ 184.865327][ T5753] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.938933][ T4234] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 184.948038][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.977244][ T4234] usb 3-1: Product: syz [ 184.984579][ T4234] usb 3-1: Manufacturer: syz [ 184.993086][ T4234] usb 3-1: SerialNumber: syz [ 185.023231][ T4234] usb 3-1: config 0 descriptor?? [ 185.075546][ T4234] smsc75xx v1.0.0 [ 185.079565][ T4234] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 185.097127][ T4234] smsc75xx: probe of 3-1:0.184 failed with error -22 [ 185.108851][ T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 185.394037][ T13] usb 5-1: device descriptor read/64, error -71 [ 185.409625][ T1347] usb 3-1: USB disconnect, device number 13 [ 186.223900][ T13] usb usb5-port1: attempt power cycle [ 188.883158][ T26] audit: type=1326 audit(1778637209.470:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5770 comm="syz.3.490" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7baa6ce59 code=0x7ffc0000 [ 189.346967][ T26] audit: type=1326 audit(1778637209.470:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5770 comm="syz.3.490" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7baa6ce59 code=0x7ffc0000 [ 189.656544][ T5802] Cannot find add_set index 0 as target [ 189.687232][ T5793] loop0: detected capacity change from 0 to 8192 [ 189.773860][ T5793] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 189.822280][ T5793] UDF-fs: Scanning with blocksize 512 failed [ 189.848788][ T5793] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 189.881396][ T5793] UDF-fs: Scanning with blocksize 1024 failed [ 189.939916][ T5793] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 189.947592][ T5793] UDF-fs: Scanning with blocksize 2048 failed [ 190.017165][ T5793] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.095162][ T5821] netlink: 'syz.4.506': attribute type 3 has an invalid length. [ 191.271252][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 191.288616][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 191.294758][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 191.336491][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 191.356964][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 192.208736][ T13] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 192.348647][ T4236] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 192.448590][ T13] usb 3-1: device descriptor read/64, error -71 [ 192.588646][ T4236] usb 5-1: Using ep0 maxpacket: 32 [ 192.708877][ T4236] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 192.717112][ T4236] usb 5-1: config 0 has no interface number 0 [ 192.743140][ T4236] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 192.748754][ T13] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 192.784065][ T4236] usb 5-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 192.798911][ T4236] usb 5-1: config 0 interface 184 has no altsetting 0 [ 192.959077][ T4236] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 192.978475][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.987242][ T4236] usb 5-1: Product: syz [ 193.004090][ T4236] usb 5-1: Manufacturer: syz [ 193.017451][ T4236] usb 5-1: SerialNumber: syz [ 193.018898][ T13] usb 3-1: device descriptor read/64, error -71 [ 193.038121][ T4236] usb 5-1: config 0 descriptor?? [ 193.079807][ T4236] smsc75xx v1.0.0 [ 193.083507][ T4236] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 193.121094][ T4236] smsc75xx: probe of 5-1:0.184 failed with error -22 [ 193.148843][ T13] usb usb3-port1: attempt power cycle [ 193.281474][ T1335] usb 5-1: USB disconnect, device number 9 [ 194.269218][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.275580][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.358895][ T13] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 194.458795][ T13] usb 3-1: device descriptor read/8, error -71 [ 194.582311][ T5857] loop2: detected capacity change from 0 to 2048 [ 194.672925][ T5857] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 195.099721][ T5872] Cannot find add_set index 0 as target [ 195.518770][ T13] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 196.871054][ T5892] loop1: detected capacity change from 0 to 1024 [ 196.895865][ T5892] hfsplus: unable to parse mount options [ 197.873280][ T5893] loop0: detected capacity change from 0 to 2048 [ 197.918884][ T13] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 197.928038][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.940502][ T5901] loop1: detected capacity change from 0 to 128 [ 197.970882][ T13] usb 3-1: Product: syz [ 197.975765][ T13] usb 3-1: Manufacturer: syz [ 197.989076][ T13] usb 3-1: SerialNumber: syz [ 198.022023][ T5901] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 198.040172][ T5893] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 198.165880][ T13] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 198.203590][ T5901] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.225856][ T13] usb 3-1: USB disconnect, device number 17 [ 198.262777][ T13] usblp0: removed [ 198.514431][ T154] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.808355][ T5923] device syzkaller0 entered promiscuous mode [ 201.228413][ T5942] syz.4.547 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 201.883349][ T5939] loop0: detected capacity change from 0 to 2048 [ 203.104770][ T5939] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.604225][ T5995] loop1: detected capacity change from 0 to 512 [ 205.649033][ T5995] EXT4-fs (loop1): Ignoring removed bh option [ 205.668369][ T5995] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 205.718089][ T5995] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 205.889928][ T6002] loop4: detected capacity change from 0 to 16 [ 205.925882][ T6002] erofs: (device loop4): mounted with root inode @ nid 36. [ 205.951021][ T5995] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,mblk_io_submit,nojournal_checksum,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 205.984826][ T5995] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.166215][ T6002] Cannot find add_set index 0 as target [ 208.434345][ T6027] loop1: detected capacity change from 0 to 2048 [ 208.572869][ T6027] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.956365][ T6045] 9pnet: Insufficient options for proto=fd [ 210.081188][ T6063] loop0: detected capacity change from 0 to 512 [ 210.658892][ T6063] EXT4-fs (loop0): Ignoring removed nobh option [ 210.750149][ T6063] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 210.794220][ T6063] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.943093][ T6084] loop1: detected capacity change from 0 to 16 [ 211.118965][ T6084] erofs: (device loop1): mounted with root inode @ nid 36. [ 211.592219][ T6091] 9pnet: Insufficient options for proto=fd [ 212.558621][ T13] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 212.968873][ T13] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 213.016858][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.096586][ T13] usb 5-1: config 0 descriptor?? [ 215.989181][ T13] usb 5-1: Cannot set MAC address [ 215.994584][ T13] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 216.029772][ T13] usb 5-1: USB disconnect, device number 10 [ 217.390322][ T6147] loop2: detected capacity change from 0 to 4096 [ 217.528664][ T4290] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 218.558647][ T4290] usb 2-1: Using ep0 maxpacket: 32 [ 219.066819][ T4290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 222, changing to 11 [ 219.078149][ T4290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25796, setting to 1024 [ 219.115485][ T4290] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 219.125649][ T4290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.158039][ T4290] usb 2-1: config 0 descriptor?? [ 219.178980][ T6140] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 219.199729][ T4290] hub 2-1:0.0: USB hub found [ 219.719243][ T4290] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 220.059127][ T4290] usbhid 2-1:0.0: can't add hid device: -71 [ 220.310101][ T4290] usbhid: probe of 2-1:0.0 failed with error -71 [ 220.389867][ T4290] usb 2-1: USB disconnect, device number 11 [ 221.721679][ T13] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 222.043135][ T6203] loop0: detected capacity change from 0 to 512 [ 222.129151][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.143363][ T6203] EXT4-fs (loop0): Ignoring removed nobh option [ 222.179006][ T13] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 222.229368][ T13] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.238477][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.336945][ T6203] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 222.368982][ T6203] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.402161][ T13] usb 3-1: config 0 descriptor?? [ 225.533628][ T21] usb 3-1: USB disconnect, device number 18 [ 225.609486][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.840229][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.078734][ T21] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 228.342428][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 228.463736][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 222, changing to 11 [ 228.504894][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25796, setting to 1024 [ 228.535405][ T21] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 228.565759][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.586834][ T21] usb 5-1: config 0 descriptor?? [ 228.779089][ T6272] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 228.799774][ T21] hub 5-1:0.0: USB hub found [ 229.618720][ T21] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 229.728860][ T21] usbhid 5-1:0.0: can't add hid device: -71 [ 229.734907][ T21] usbhid: probe of 5-1:0.0 failed with error -71 [ 229.819588][ T21] usb 5-1: USB disconnect, device number 11 [ 229.939367][ T6313] device syzkaller0 entered promiscuous mode [ 231.018822][ T6331] netlink: 'syz.0.668': attribute type 1 has an invalid length. [ 231.106356][ T6331] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.162415][ T6332] bond1: (slave vlan2): making interface the new active one [ 231.172915][ T6332] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 231.259081][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 232.558964][ T4234] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 232.919019][ T4234] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.010505][ T4234] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 233.119223][ T4234] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.134511][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.172852][ T4234] usb 5-1: config 0 descriptor?? [ 233.230033][ T4234] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 233.266456][ T6358] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 233.306217][ T6358] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 235.133093][ T6393] loop0: detected capacity change from 0 to 512 [ 235.354878][ T4234] usb 5-1: USB disconnect, device number 12 [ 242.611544][ T6481] loop2: detected capacity change from 0 to 4096 [ 242.788407][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.719'. [ 243.135681][ T6506] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 245.245200][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'. [ 246.309546][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 246.761112][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.804443][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.396339][ T6616] kvm [6615]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x40000000382, nop [ 249.614008][ T6616] kvm [6615]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x2000 [ 249.641112][ T6616] kvm [6615]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 250.522828][ T6637] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 250.595438][ T6637] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 251.468608][ T4290] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 251.949064][ T4290] usb 2-1: Using ep0 maxpacket: 32 [ 252.080095][ T4290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 222, changing to 11 [ 252.256463][ T4290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25796, setting to 1024 [ 252.349598][ T4290] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 252.535307][ T4290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.244846][ T4290] usb 2-1: config 0 descriptor?? [ 253.508919][ T6669] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 253.530719][ T4290] hub 2-1:0.0: USB hub found [ 253.738781][ T4290] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 254.038827][ T4290] usbhid 2-1:0.0: can't add hid device: -71 [ 254.048689][ T4290] usbhid: probe of 2-1:0.0 failed with error -71 [ 254.130359][ T4290] usb 2-1: USB disconnect, device number 12 [ 255.671299][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.678304][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.135007][ T6731] kvm [6728]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 257.167402][ T6731] kvm [6728]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 258.848971][ T6718] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 259.158658][ T6718] usb 4-1: Using ep0 maxpacket: 32 [ 259.368871][ T6718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 222, changing to 11 [ 259.404524][ T6718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25796, setting to 1024 [ 259.446681][ T6718] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 259.511210][ T6718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.562413][ T6718] usb 4-1: config 0 descriptor?? [ 259.600087][ T6767] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 259.627444][ T6718] hub 4-1:0.0: USB hub found [ 259.757847][ T4697] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.858897][ T6718] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 259.963165][ T4697] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.027600][ T6790] device syzkaller0 entered promiscuous mode [ 260.128621][ T4697] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.174579][ T6718] usbhid 4-1:0.0: can't add hid device: -71 [ 260.182381][ T6718] usbhid: probe of 4-1:0.0 failed with error -71 [ 260.475833][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 260.776636][ T6718] usb 4-1: USB disconnect, device number 7 [ 260.783265][ T4697] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.817089][ T6804] loop2: detected capacity change from 0 to 128 [ 260.837228][ T6771] chnl_net:caif_netlink_parms(): no params data found [ 262.268219][ T6771] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.275576][ T6771] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.284441][ T6771] device bridge_slave_0 entered promiscuous mode [ 262.293779][ T6771] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.301773][ T6771] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.310378][ T6771] device bridge_slave_1 entered promiscuous mode [ 262.539445][ T4236] Bluetooth: hci5: command 0x041b tx timeout [ 263.349723][ T6771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.187198][ T6771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.428258][ T6862] device syzkaller0 entered promiscuous mode [ 264.494864][ T6771] team0: Port device team_slave_0 added [ 264.618993][ T4290] Bluetooth: hci5: command 0x040f tx timeout [ 264.645282][ T6771] team0: Port device team_slave_1 added [ 264.825691][ T6871] lo: Caught tx_queue_len zero misconfig [ 264.916237][ T6871] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 264.991873][ T6771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.055579][ T6771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.260805][ T6771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.301091][ T6771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.401431][ T6771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.380643][ T6771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.775601][ T4236] Bluetooth: hci5: command 0x0419 tx timeout [ 267.175386][ T6771] device hsr_slave_0 entered promiscuous mode [ 267.313715][ T6771] device hsr_slave_1 entered promiscuous mode [ 267.326784][ T6771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.343171][ T6771] Cannot create hsr debugfs directory [ 267.412981][ T6914] device syzkaller0 entered promiscuous mode [ 269.567247][ T6771] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 269.630106][ T6771] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 269.651285][ T6771] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 269.952024][ T6771] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 270.471610][ T4697] device hsr_slave_0 left promiscuous mode [ 270.522931][ T4697] device hsr_slave_1 left promiscuous mode [ 270.593346][ T4697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.772955][ T4697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.078976][ T4236] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 271.101555][ T4697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.302870][ T4697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.373875][ T4697] device bridge_slave_1 left promiscuous mode [ 271.386313][ T4697] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.450179][ T4697] device bridge_slave_0 left promiscuous mode [ 271.456466][ T4697] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.498852][ T4236] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 271.521927][ T4236] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 271.551625][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.561682][ T4697] device veth1_macvtap left promiscuous mode [ 271.568395][ T4697] device veth0_macvtap left promiscuous mode [ 271.594882][ T4697] device veth1_vlan left promiscuous mode [ 271.595071][ T4236] usb 2-1: config 0 descriptor?? [ 271.615525][ T4697] device veth0_vlan left promiscuous mode [ 271.668177][ T4236] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 271.956440][ T4697] bond1 (unregistering): (slave vlan2): Releasing active interface [ 271.996303][ T4697] bond1 (unregistering): Released all slaves [ 272.256219][ T4697] team0 (unregistering): Port device team_slave_1 removed [ 272.272279][ T4697] team0 (unregistering): Port device team_slave_0 removed [ 272.290057][ T4697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.306730][ T4697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.399150][ T4697] bond0 (unregistering): Released all slaves [ 272.494525][ T6771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.524210][ T6771] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.584608][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.605107][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.636448][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.656445][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.675088][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.682295][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.696043][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.705821][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.715420][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.722604][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.874840][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.891195][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.912350][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.922181][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.934294][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.965054][ T6991] ubi31: attaching mtd0 [ 272.979496][ T6991] ubi31: scanning is finished [ 272.984272][ T6991] ubi31: empty MTD device detected [ 273.154772][ T6991] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 273.172308][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.409854][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.419997][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.430289][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.455689][ T6771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.597938][ T6771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.636403][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.673689][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.698804][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.732418][ T4235] usb 2-1: USB disconnect, device number 13 [ 275.039761][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.047353][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.691695][ T6771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.745499][ T7037] Zero length message leads to an empty skb [ 275.988088][ T7047] device syzkaller0 entered promiscuous mode [ 276.439630][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.509084][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.669906][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 276.708127][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.747486][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.766905][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.813291][ T6771] device veth0_vlan entered promiscuous mode [ 276.860852][ T6771] device veth1_vlan entered promiscuous mode [ 276.921875][ T7070] netlink: 'syz.3.865': attribute type 1 has an invalid length. [ 276.932660][ T7070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 276.940016][ T7070] IPv6: NLM_F_CREATE should be set when creating new route [ 276.956447][ T7071] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 276.987873][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 276.999617][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 277.018088][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.428954][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.491985][ T6771] device veth0_macvtap entered promiscuous mode [ 277.595469][ T7081] lo speed is unknown, defaulting to 1000 [ 277.601963][ T7081] lo speed is unknown, defaulting to 1000 [ 277.619192][ T7081] lo speed is unknown, defaulting to 1000 [ 277.650905][ T7081] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 277.683453][ T7081] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 277.793759][ T6771] device veth1_macvtap entered promiscuous mode [ 277.873753][ T7080] syz.2.868 uses obsolete (PF_INET,SOCK_PACKET) [ 277.909614][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.942848][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.968836][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.047217][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.095406][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.136044][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.183105][ T6771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.209968][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.221853][ T7077] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 278.238820][ T7077] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 278.245823][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 278.262817][ T7077] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 278.280780][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.313223][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.381964][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.424959][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.486288][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.506409][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.524140][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.575156][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.605891][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.619524][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.640108][ T6771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.655857][ T7090] usb usb9: usbfs: process 7090 (syz.1.870) did not claim interface 37 before use [ 278.667298][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.686498][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.706995][ T6771] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.720948][ T7081] lo speed is unknown, defaulting to 1000 [ 278.737987][ T6771] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.766041][ T6771] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.793678][ T6771] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.827017][ T7081] lo speed is unknown, defaulting to 1000 [ 278.835006][ T7081] lo speed is unknown, defaulting to 1000 [ 278.857995][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'. [ 278.879756][ T7081] lo speed is unknown, defaulting to 1000 [ 278.923229][ T7081] lo speed is unknown, defaulting to 1000 [ 279.070449][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.099824][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.256091][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 279.292753][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.653660][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.699032][ T7107] netlink: 20 bytes leftover after parsing attributes in process `syz.2.874'. [ 279.712495][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 279.740372][ T4290] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 279.911844][ T26] audit: type=1326 audit(1778637302.130:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.2.874" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b1232e59 code=0x7ffc0000 [ 279.971949][ T7113] veth1: Caught tx_queue_len zero misconfig [ 280.056954][ T26] audit: type=1326 audit(1778637302.160:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.2.874" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45b1232aeb code=0x7ffc0000 [ 280.176827][ T26] audit: type=1326 audit(1778637302.160:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.2.874" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45b1232aeb code=0x7ffc0000 [ 280.238927][ T4290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.238962][ T4290] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.239005][ T4290] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.239030][ T4290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.240869][ T4290] usb 2-1: config 0 descriptor?? [ 280.281064][ T4290] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 280.305855][ T26] audit: type=1326 audit(1778637302.160:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.2.874" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45b1232aeb code=0x7ffc0000 [ 280.305904][ T26] audit: type=1326 audit(1778637302.160:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.2.874" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45b1232aeb code=0x7ffc0000 [ 280.305943][ T26] audit: type=1326 audit(1778637302.160:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.2.874" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45b1232aeb code=0x7ffc0000 [ 280.305982][ T26] audit: type=1326 audit(1778637302.160:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.2.874" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45b1232aeb code=0x7ffc0000 [ 280.306022][ T26] audit: type=1326 audit(1778637302.160:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.2.874" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45b1232aeb code=0x7ffc0000 [ 280.306071][ T26] audit: type=1326 audit(1778637302.160:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.2.874" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45b1232aeb code=0x7ffc0000 [ 280.306109][ T26] audit: type=1326 audit(1778637302.160:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.2.874" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45b1232aeb code=0x7ffc0000 [ 280.842802][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.921992][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.973004][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.435143][ T7153] netlink: set zone limit has 8 unknown bytes [ 281.664662][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.880'. [ 281.679419][ T7153] netlink: del zone limit has 8 unknown bytes [ 282.486189][ T4290] usb 2-1: USB disconnect, device number 14 [ 283.400371][ T7184] JFS: discard option not supported on device [ 283.411477][ T7184] Mount JFS Failure: -22 [ 283.415790][ T7184] jfs_mount failed w/return code = -22 [ 283.536766][ T7188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.889'. [ 284.631865][ T146] ================================================================== [ 284.640205][ T146] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x130d/0x3c90 [ 284.648029][ T146] Read of size 1 at addr ffff888073529c00 by task kworker/u5:0/146 [ 284.655926][ T146] [ 284.658301][ T146] CPU: 1 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 284.665760][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 284.675825][ T146] Workqueue: hci3 hci_rx_work SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 284.680537][ T146] Call Trace: [ 284.683843][ T146] [ 284.686801][ T146] dump_stack_lvl+0x188/0x250 [ 284.691529][ T146] ? show_regs_print_info+0x20/0x20 [ 284.696847][ T146] ? load_image+0x400/0x400 [ 284.701388][ T146] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 284.706896][ T146] ? mutex_lock_io_nested+0x60/0x60 [ 284.712162][ T146] print_address_description+0x60/0x2d0 [ 284.717766][ T146] ? hci_le_meta_evt+0x130d/0x3c90 [ 284.722922][ T146] kasan_report+0xdf/0x130 [ 284.727385][ T146] ? hci_le_meta_evt+0x130d/0x3c90 [ 284.732547][ T146] hci_le_meta_evt+0x130d/0x3c90 [ 284.737543][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 284.743651][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 284.749299][ T146] ? mark_lock+0x94/0x320 [ 284.753637][ T146] ? mutex_unlock+0x10/0x10 [ 284.758158][ T146] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 284.764180][ T146] ? lock_chain_count+0x20/0x20 [ 284.769051][ T146] ? __rwlock_init+0x140/0x140 [ 284.773826][ T146] hci_event_packet+0xe48/0x1370 [ 284.778789][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 284.784031][ T146] ? rcu_lock_release+0x20/0x20 [ 284.788903][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 284.794167][ T146] hci_rx_work+0x255/0xa10 [ 284.798621][ T146] process_one_work+0x85f/0x1010 [ 284.803589][ T146] ? worker_detach_from_pool+0x240/0x240 [ 284.809235][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 284.814532][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 284.819563][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 284.825116][ T146] ? wq_worker_running+0x97/0x170 [ 284.830243][ T146] worker_thread+0xaa6/0x1290 [ 284.834972][ T146] kthread+0x436/0x520 [ 284.839053][ T146] ? rcu_lock_release+0x20/0x20 [ 284.843934][ T146] ? kthread_blkcg+0xd0/0xd0 [ 284.848548][ T146] ret_from_fork+0x1f/0x30 [ 284.852994][ T146] [ 284.856023][ T146] [ 284.858351][ T146] Allocated by task 7201: [ 284.862703][ T146] __kasan_kmalloc+0xb5/0xf0 [ 284.867301][ T146] __alloc_skb+0x22c/0x750 [ 284.871725][ T146] vhci_write+0xbc/0x450 [ 284.875983][ T146] vfs_write+0x745/0xd60 [ 284.880237][ T146] ksys_write+0x152/0x260 [ 284.884584][ T146] do_syscall_64+0x4c/0xa0 [ 284.889023][ T146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.894939][ T146] [ 284.897406][ T146] Last potentially related work creation: [ 284.903129][ T146] kasan_save_stack+0x35/0x60 [ 284.907841][ T146] kasan_record_aux_stack+0xb8/0x100 [ 284.913140][ T146] kvfree_call_rcu+0x105/0x7d0 [ 284.917913][ T146] neigh_periodic_work+0x407/0xc70 [ 284.923035][ T146] process_one_work+0x85f/0x1010 [ 284.927981][ T146] worker_thread+0xaa6/0x1290 [ 284.932664][ T146] kthread+0x436/0x520 [ 284.936735][ T146] ret_from_fork+0x1f/0x30 [ 284.941162][ T146] [ 284.943511][ T146] The buggy address belongs to the object at ffff888073529800 [ 284.943511][ T146] which belongs to the cache kmalloc-1k of size 1024 [ 284.957653][ T146] The buggy address is located 0 bytes to the right of [ 284.957653][ T146] 1024-byte region [ffff888073529800, ffff888073529c00) [ 284.971458][ T146] The buggy address belongs to the page: [ 284.977101][ T146] page:ffffea0001cd4a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x73528 [ 284.987256][ T146] head:ffffea0001cd4a00 order:3 compound_mapcount:0 compound_pincount:0 [ 284.995593][ T146] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 285.003589][ T146] raw: 00fff00000010200 0000000000000000 0000000a00000001 ffff888016c41dc0 [ 285.012262][ T146] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 285.020846][ T146] page dumped because: kasan: bad access detected [ 285.027253][ T146] page_owner tracks the page as allocated [ 285.032965][ T146] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4235, ts 71917998129, free_ts 71849108445 [ 285.049981][ T146] get_page_from_freelist+0x1bbd/0x1ca0 [ 285.055541][ T146] __alloc_pages+0x1ee/0x480 [ 285.060133][ T146] new_slab+0xc0/0x4b0 [ 285.064208][ T146] ___slab_alloc+0x80a/0xdd0 [ 285.068808][ T146] __kmalloc+0x1cd/0x330 [ 285.073049][ T146] ___neigh_create+0x6d2/0x2250 [ 285.077903][ T146] ip6_finish_output2+0x9f6/0x1510 [ 285.083010][ T146] ndisc_send_skb+0xc2a/0x1500 [ 285.087792][ T146] ndisc_send_ns+0x648/0x850 [ 285.092401][ T146] addrconf_dad_work+0xa63/0x1540 [ 285.097529][ T146] process_one_work+0x85f/0x1010 [ 285.102475][ T146] worker_thread+0xaa6/0x1290 [ 285.107151][ T146] kthread+0x436/0x520 [ 285.111220][ T146] ret_from_fork+0x1f/0x30 [ 285.115640][ T146] page last free stack trace: [ 285.120331][ T146] free_unref_page_prepare+0x637/0x6c0 [ 285.125798][ T146] free_unref_page+0x8f/0x2a0 [ 285.130501][ T146] __unfreeze_partials+0x1a5/0x200 [ 285.135627][ T146] put_cpu_partial+0x12d/0x190 [ 285.140394][ T146] qlist_free_all+0x35/0x90 [ 285.144905][ T146] kasan_quarantine_reduce+0x150/0x160 [ 285.150363][ T146] __kasan_slab_alloc+0x2f/0xd0 [ 285.155214][ T146] slab_post_alloc_hook+0x4c/0x380 [ 285.160443][ T146] kmem_cache_alloc_node+0x12d/0x2d0 [ 285.165735][ T146] __alloc_skb+0xf4/0x750 [ 285.170093][ T146] netlink_sendmsg+0x654/0xbe0 [ 285.174862][ T146] __sys_sendto+0x46d/0x620 [ 285.179660][ T146] __x64_sys_sendto+0xda/0xf0 [ 285.184359][ T146] do_syscall_64+0x4c/0xa0 [ 285.188778][ T146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.194697][ T146] [ 285.197026][ T146] Memory state around the buggy address: [ 285.202660][ T146] ffff888073529b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 285.210758][ T146] ffff888073529b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 285.218854][ T146] >ffff888073529c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 285.226921][ T146] ^ [ 285.231133][ T146] ffff888073529c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 285.239213][ T146] ffff888073529d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 285.247292][ T146] ================================================================== [ 285.255752][ T146] Disabling lock debugging due to kernel taint [ 285.261911][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.271431][ T146] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 285.278678][ T146] CPU: 1 PID: 146 Comm: kworker/u5:0 Tainted: G B syzkaller #0 [ 285.287704][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.297804][ T146] Workqueue: hci3 hci_rx_work [ 285.302540][ T146] Call Trace: [ 285.305838][ T146] [ 285.308774][ T146] dump_stack_lvl+0x188/0x250 [ 285.313465][ T146] ? show_regs_print_info+0x20/0x20 [ 285.318678][ T146] ? load_image+0x400/0x400 [ 285.323216][ T146] panic+0x2e5/0x810 [ 285.327305][ T146] ? bpf_jit_dump+0xd0/0xd0 [ 285.331818][ T146] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 285.337808][ T146] ? _raw_spin_unlock+0x40/0x40 [ 285.342662][ T146] ? hci_le_meta_evt+0x130d/0x3c90 [ 285.347781][ T146] check_panic_on_warn+0x80/0xa0 [ 285.352727][ T146] ? hci_le_meta_evt+0x130d/0x3c90 [ 285.357842][ T146] end_report+0x6d/0xf0 [ 285.362006][ T146] kasan_report+0x102/0x130 [ 285.366519][ T146] ? hci_le_meta_evt+0x130d/0x3c90 [ 285.371654][ T146] hci_le_meta_evt+0x130d/0x3c90 [ 285.377247][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 285.383390][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 285.389062][ T146] ? mark_lock+0x94/0x320 [ 285.393399][ T146] ? mutex_unlock+0x10/0x10 [ 285.397910][ T146] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 285.403900][ T146] ? lock_chain_count+0x20/0x20 [ 285.408927][ T146] ? __rwlock_init+0x140/0x140 [ 285.413706][ T146] hci_event_packet+0xe48/0x1370 [ 285.418655][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 285.423889][ T146] ? rcu_lock_release+0x20/0x20 [ 285.428760][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 285.433983][ T146] hci_rx_work+0x255/0xa10 [ 285.438518][ T146] process_one_work+0x85f/0x1010 [ 285.443492][ T146] ? worker_detach_from_pool+0x240/0x240 [ 285.449133][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 285.454444][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 285.459486][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 285.465037][ T146] ? wq_worker_running+0x97/0x170 [ 285.470065][ T146] worker_thread+0xaa6/0x1290 [ 285.474770][ T146] kthread+0x436/0x520 [ 285.478852][ T146] ? rcu_lock_release+0x20/0x20 [ 285.483706][ T146] ? kthread_blkcg+0xd0/0xd0 [ 285.488317][ T146] ret_from_fork+0x1f/0x30 [ 285.492743][ T146] [ 285.496064][ T146] Kernel Offset: disabled [ 285.500408][ T146] Rebooting in 86400 seconds..