last executing test programs: 9.375030347s ago: executing program 0 (id=1404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)=""/194, &(0x7f0000000300)=0xc2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x801000e}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) socket$kcm(0x29, 0x2, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3ff}, 0x8) ioctl$int_in(r7, 0x5421, &(0x7f0000001100)=0x2000000009) close(r7) 7.85662157s ago: executing program 4 (id=1408): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)=""/194, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x801000e}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3ff}, 0x8) ioctl$int_in(r7, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed}, 0x8) 7.722138139s ago: executing program 0 (id=1409): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) clock_adjtime(0x7, &(0x7f0000000040)={0x241, 0x7fff, 0xd108, 0x10000000006482, 0xfffffffffffffffe, 0x7ff, 0x1, 0x2, 0x1ff, 0x8001, 0xfffffffffffffff7, 0x4000000000000007, 0x3, 0x6, 0x7, 0xd04, 0xd, 0x581d, 0x3, 0x1, 0x6, 0x6, 0x3, 0x0, 0x7fffffffffffffff, 0x3e}) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x8fb}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 6.233329741s ago: executing program 0 (id=1411): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x6b2a, &(0x7f0000000340)={0x0, 0x162c, 0x80, 0x1, 0x19}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0xf5}, 0x1c) r5 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x11, 0x80, 0x0, 0x280) write(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 6.125394281s ago: executing program 4 (id=1412): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200e5ffffffffffffff00000000000000000000000000000000000000000000000000000200000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008401050000000000000000000000000000000000000000006c00000000000000640101020000000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001000000000000000000000000000000e0000002000000000000000000000000000000003300000002000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003300000002000000ff020000000000000000000000000001000000000000000000000000000000000000000020010000000000000000000000000002000000003200000002"], 0x23c}}, 0x0) 5.804856524s ago: executing program 4 (id=1413): accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = dup(r1) write$UHID_INPUT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 5.519872327s ago: executing program 4 (id=1415): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @sack_perm, @sack_perm, @timestamp, @sack_perm, @window={0x3, 0x6, 0x1001}], 0x8) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0x40) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 5.37902233s ago: executing program 3 (id=1416): accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 5.361719424s ago: executing program 1 (id=1417): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x2], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) 5.312894023s ago: executing program 4 (id=1418): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x143c40, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x10) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socket$inet(0x2, 0x5, 0xe4f9) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @remote, @local}, 0xc) 4.331774429s ago: executing program 1 (id=1419): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 4.321128826s ago: executing program 2 (id=1420): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000000080102000000000000000000000000090001007379863000000000040004800600024000000000050003"], 0x34}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 4.197209339s ago: executing program 1 (id=1421): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bind$can_raw(r0, &(0x7f00000001c0), 0x10) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0xd619}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) 4.19577772s ago: executing program 0 (id=1422): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) write$FUSE_INIT(r3, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000004, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0}) 4.176572655s ago: executing program 3 (id=1423): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x4000844) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 4.059634522s ago: executing program 2 (id=1424): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x2], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) preadv(r3, &(0x7f0000003780)=[{&(0x7f0000001300)=""/170, 0xaa}], 0x1, 0xffff, 0x0) 3.270171036s ago: executing program 1 (id=1425): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(0x0, &(0x7f00000000c0)={0x0, 0xa1, 0xfffffffc, 0x0, 0xf7cc}) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000000280)) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) shmctl$SHM_LOCK(0x0, 0xb) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34010000120000082abd7000fedbdfdc463725180400ee4e204e24dd920000e3000000af0100000010000003000000010000000600000000040000", @ANYRES32=0x0, @ANYBLOB="a30000000c0000000900000003000000e5000100b86806efed556bdd80416e7b5e73cddd333f528843896a5fb8f0041ba51872e600d0afb3d8e68dbd14c38ca37b676ded49bcf679508be30c38c1198e35790654f06415901e228c8dbf4f0ff92507a6e6d3a6ecfa78869c294dad374c5a7504001197b31be9e93249accb8ca10de3548ab7e0a693cb3c6ce11e1d41b88c4799b73591ed7a444f7c31746ab257697b402c716867cdb36be020291430473b854c44fd83408bca32d1994e2572617c95833e911449686629c60b331a549d51276ca2279f2d184f784d93fe8c46f9262c17cfcb7eb4c7fd2afc37388c4e59b61705adb8"], 0x134}, 0x1, 0x0, 0x0, 0x14}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) 3.22448497s ago: executing program 0 (id=1426): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000351f12e200605f811a0bf0102030109021200010967"], &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, 0x0, 0x0}, 0x0) 3.1772377s ago: executing program 3 (id=1427): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r2, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0x0, 0x67], [], [0x0, 0x3]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r8}) close_range(r0, 0xffffffffffffffff, 0x0) 1.888626756s ago: executing program 2 (id=1428): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b708000000020000"], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f0000", @ANYRES8], 0x125) io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) r3 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0}) listen(r2, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) 1.626190789s ago: executing program 3 (id=1429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)=""/194, &(0x7f0000000300)=0xc2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x801000e}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3ff}, 0x8) ioctl$int_in(r6, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r6, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r6) 1.583623719s ago: executing program 1 (id=1430): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x2], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) 690.20684ms ago: executing program 2 (id=1431): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x1e9, &(0x7f0000000700)="$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") 621.03621ms ago: executing program 3 (id=1432): r0 = socket$inet6(0xa, 0x806, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) 612.417172ms ago: executing program 4 (id=1433): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x6b2a, &(0x7f0000000340)={0x0, 0x162c, 0x80, 0x1, 0x19}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0xf5}, 0x1c) r5 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x11, 0x80, 0x0, 0x280) write(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 411.026478ms ago: executing program 2 (id=1434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c0002800800014000000011080002400000000108000340000000110900010073797a30000000"], 0x80}}, 0x0) 353.560149ms ago: executing program 3 (id=1435): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)=""/194, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x801000e}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3ff}, 0x8) ioctl$int_in(r7, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed}, 0x8) 226.795082ms ago: executing program 2 (id=1436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)=""/194, &(0x7f0000000300)=0xc2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x801000e}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3ff}, 0x8) ioctl$int_in(r7, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r7) 105.843503ms ago: executing program 0 (id=1437): accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 0s ago: executing program 1 (id=1438): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x4e20, 0x1000001, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. [ 35.175504][ T6406] cgroup: Unknown subsys name 'net' [ 35.441254][ T6406] cgroup: Unknown subsys name 'cpuset' [ 35.444551][ T6406] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.779010][ T6406] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 38.382321][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.395063][ T6427] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.409200][ T6430] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.410915][ T6430] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.413863][ T6430] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.415493][ T6430] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.417672][ T6430] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 38.420089][ T6430] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.423156][ T6430] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.425578][ T6430] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.426891][ T6432] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.427424][ T6430] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.430876][ T6430] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.432791][ T6430] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 38.434395][ T6430] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.435344][ T6433] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.439013][ T6420] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.443042][ T6433] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 38.444731][ T6433] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.447604][ T6433] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 38.452502][ T6433] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 38.457810][ T6433] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.459441][ T6432] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.470351][ T6420] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 38.473624][ T6420] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 38.475138][ T6420] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 38.476688][ T6420] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.478451][ T6420] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.480593][ T6420] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.482064][ T6420] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 38.657642][ T6425] chnl_net:caif_netlink_parms(): no params data found [ 38.688908][ T6426] chnl_net:caif_netlink_parms(): no params data found [ 38.697725][ T6418] chnl_net:caif_netlink_parms(): no params data found [ 38.717119][ T6421] chnl_net:caif_netlink_parms(): no params data found [ 38.745026][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.746578][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.748262][ T6425] bridge_slave_0: entered allmulticast mode [ 38.750074][ T6425] bridge_slave_0: entered promiscuous mode [ 38.810022][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.811422][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.812843][ T6425] bridge_slave_1: entered allmulticast mode [ 38.814581][ T6425] bridge_slave_1: entered promiscuous mode [ 38.853067][ T6418] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.854558][ T6418] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.856039][ T6418] bridge_slave_0: entered allmulticast mode [ 38.857872][ T6418] bridge_slave_0: entered promiscuous mode [ 38.861045][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.862521][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.864016][ T6426] bridge_slave_0: entered allmulticast mode [ 38.865926][ T6426] bridge_slave_0: entered promiscuous mode [ 38.889257][ T6418] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.890785][ T6418] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.892212][ T6418] bridge_slave_1: entered allmulticast mode [ 38.893922][ T6418] bridge_slave_1: entered promiscuous mode [ 38.895574][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.897130][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.899478][ T6426] bridge_slave_1: entered allmulticast mode [ 38.901347][ T6426] bridge_slave_1: entered promiscuous mode [ 38.912263][ T6425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.916023][ T6425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.927666][ T6421] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.929323][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.930864][ T6421] bridge_slave_0: entered allmulticast mode [ 38.932782][ T6421] bridge_slave_0: entered promiscuous mode [ 38.950168][ T6425] team0: Port device team_slave_0 added [ 38.957708][ T6421] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.959713][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.961286][ T6421] bridge_slave_1: entered allmulticast mode [ 38.963101][ T6421] bridge_slave_1: entered promiscuous mode [ 38.975472][ T6418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.983098][ T6426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.986062][ T6425] team0: Port device team_slave_1 added [ 39.001346][ T6421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.004420][ T6418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.007346][ T6426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.020559][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.021951][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.027006][ T6425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.030899][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.032319][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.037766][ T6425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.042250][ T6421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.050430][ T6417] chnl_net:caif_netlink_parms(): no params data found [ 39.058165][ T6426] team0: Port device team_slave_0 added [ 39.060609][ T6426] team0: Port device team_slave_1 added [ 39.071645][ T6418] team0: Port device team_slave_0 added [ 39.082660][ T6421] team0: Port device team_slave_0 added [ 39.088171][ T6421] team0: Port device team_slave_1 added [ 39.090465][ T6418] team0: Port device team_slave_1 added [ 39.097031][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.102102][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.107273][ T6426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.132002][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.133565][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.142043][ T6426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.200154][ T6425] hsr_slave_0: entered promiscuous mode [ 39.248496][ T6425] hsr_slave_1: entered promiscuous mode [ 39.296592][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.298040][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.303341][ T6421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.306253][ T6418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.307766][ T6418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.313494][ T6418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.329333][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.330736][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.335693][ T6421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.340616][ T6418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.342132][ T6418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.347642][ T6418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.367320][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.369112][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.370643][ T6417] bridge_slave_0: entered allmulticast mode [ 39.372336][ T6417] bridge_slave_0: entered promiscuous mode [ 39.374861][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.376273][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.377845][ T6417] bridge_slave_1: entered allmulticast mode [ 39.380556][ T6417] bridge_slave_1: entered promiscuous mode [ 39.404684][ T6417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.460349][ T6426] hsr_slave_0: entered promiscuous mode [ 39.488433][ T6426] hsr_slave_1: entered promiscuous mode [ 39.528307][ T6426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.529920][ T6426] Cannot create hsr debugfs directory [ 39.534295][ T6417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.589783][ T6418] hsr_slave_0: entered promiscuous mode [ 39.628676][ T6418] hsr_slave_1: entered promiscuous mode [ 39.668242][ T6418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.670118][ T6418] Cannot create hsr debugfs directory [ 39.729648][ T6421] hsr_slave_0: entered promiscuous mode [ 39.769066][ T6421] hsr_slave_1: entered promiscuous mode [ 39.818286][ T6421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.820048][ T6421] Cannot create hsr debugfs directory [ 39.888860][ T6417] team0: Port device team_slave_0 added [ 39.907098][ T6417] team0: Port device team_slave_1 added [ 39.952402][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.953692][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.959788][ T6417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.974885][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.976338][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.982450][ T6417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.070595][ T6417] hsr_slave_0: entered promiscuous mode [ 40.108576][ T6417] hsr_slave_1: entered promiscuous mode [ 40.148292][ T6417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.149899][ T6417] Cannot create hsr debugfs directory [ 40.168233][ T6425] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.172211][ T6425] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.183478][ T6425] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.194449][ T6425] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.239896][ T6418] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.251230][ T6418] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.270457][ T6426] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.274234][ T6426] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.277487][ T6418] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.286400][ T6426] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.291318][ T6426] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.294241][ T6418] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.321287][ T6421] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.326545][ T6421] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.349801][ T6421] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.352614][ T6421] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.363169][ T6417] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.369645][ T6425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.371185][ T6417] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.375180][ T6417] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.385608][ T6417] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.424319][ T6425] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.436907][ T4696] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.438485][ T4696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.446328][ T2138] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.447838][ T2138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.478599][ T5987] Bluetooth: hci3: command tx timeout [ 40.479100][ T53] Bluetooth: hci1: command tx timeout [ 40.519032][ T6426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.535487][ T6417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.546234][ T6417] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.555369][ T6421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.558348][ T53] Bluetooth: hci2: command tx timeout [ 40.558660][ T5987] Bluetooth: hci4: command tx timeout [ 40.559715][ T53] Bluetooth: hci0: command tx timeout [ 40.580128][ T6418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.586778][ T6418] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.595433][ T6426] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.606956][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.608457][ T492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.610996][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.612466][ T492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.614465][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.615883][ T492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.629383][ T2138] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.631019][ T2138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.634616][ T6421] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.657101][ T2138] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.658615][ T2138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.663628][ T2138] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.665080][ T2138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.667544][ T2138] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.669220][ T2138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.681219][ T2138] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.682719][ T2138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.735738][ T6425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.827451][ T6425] veth0_vlan: entered promiscuous mode [ 40.849358][ T6425] veth1_vlan: entered promiscuous mode [ 40.869834][ T6425] veth0_macvtap: entered promiscuous mode [ 40.872819][ T6425] veth1_macvtap: entered promiscuous mode [ 40.901364][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.906024][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.917370][ T6425] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.921902][ T6425] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.923677][ T6425] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.925473][ T6425] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.951684][ T6418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.961608][ T6421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.978904][ T6417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.983003][ T6426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.084054][ T6418] veth0_vlan: entered promiscuous mode [ 41.091498][ T2012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.093248][ T2012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.101970][ T6426] veth0_vlan: entered promiscuous mode [ 41.105576][ T6418] veth1_vlan: entered promiscuous mode [ 41.113652][ T6421] veth0_vlan: entered promiscuous mode [ 41.118974][ T2138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.120542][ T2138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.132442][ T6426] veth1_vlan: entered promiscuous mode [ 41.147838][ T6418] veth0_macvtap: entered promiscuous mode [ 41.166013][ T6426] veth0_macvtap: entered promiscuous mode [ 41.173588][ T6421] veth1_vlan: entered promiscuous mode [ 41.175849][ T6418] veth1_macvtap: entered promiscuous mode [ 41.182477][ T6426] veth1_macvtap: entered promiscuous mode [ 41.204610][ T6425] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.207770][ T6421] veth0_macvtap: entered promiscuous mode [ 41.217097][ T6417] veth0_vlan: entered promiscuous mode [ 41.226213][ T6417] veth1_vlan: entered promiscuous mode [ 41.229486][ T6421] veth1_macvtap: entered promiscuous mode [ 41.236019][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.241962][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.245012][ T6421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.247744][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.250638][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.253330][ T6421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.256370][ T6421] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.261531][ T6421] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.263342][ T6421] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.265097][ T6421] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.268035][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.283306][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.285330][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.287487][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.290808][ T6426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.293752][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.296209][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.298320][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.300337][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.302167][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.304213][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.307440][ T6418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.326531][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.328961][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.330953][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.333051][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.335591][ T6426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.337404][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.340274][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.342303][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.344507][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.346647][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.351831][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.354531][ T6418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.357620][ T6418] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.362357][ T6418] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.364265][ T6418] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.366053][ T6418] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.409205][ T6426] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.411019][ T6426] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.414485][ T6426] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.416290][ T6426] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.482611][ T2012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.484133][ T2012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.504406][ T6417] veth0_macvtap: entered promiscuous mode [ 41.527568][ T6417] veth1_macvtap: entered promiscuous mode [ 42.005782][ T2138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.007592][ T2138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.099969][ T492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.104089][ T492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.188981][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.191171][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.193296][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.195379][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.197486][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.200883][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.202934][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.205027][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.212124][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.220218][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.221926][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.252694][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.254855][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.256808][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.260421][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.262485][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.277016][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.291588][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.293839][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.296606][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.307499][ T235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.312927][ T235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.334987][ T6417] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.336743][ T6417] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.349165][ T6417] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.358792][ T6417] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.492245][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.493929][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.489939][ T53] Bluetooth: hci1: command tx timeout [ 43.491150][ T53] Bluetooth: hci3: command tx timeout [ 43.492269][ T53] Bluetooth: hci0: command tx timeout [ 43.493435][ T53] Bluetooth: hci4: command tx timeout [ 43.494530][ T53] Bluetooth: hci2: command tx timeout [ 43.589185][ T6514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 43.593678][ T6514] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.595692][ T6514] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.597524][ T6514] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.599490][ T6514] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.347867][ T2012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.354419][ T2012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.935146][ T235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.936705][ T235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.943206][ T6525] infiniband syz2: set active [ 45.944284][ T6525] infiniband syz2: added team_slave_1 [ 45.949462][ T6422] Bluetooth: hci2: command tx timeout [ 45.950561][ T6422] Bluetooth: hci4: command tx timeout [ 45.951615][ T6422] Bluetooth: hci0: command tx timeout [ 45.952730][ T6422] Bluetooth: hci3: command tx timeout [ 45.953842][ T6422] Bluetooth: hci1: command tx timeout [ 46.051898][ T6539] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.149654][ T6525] RDS/IB: syz2: added [ 46.150868][ T6525] smc: adding ib device syz2 with port count 1 [ 46.152159][ T6525] smc: ib device syz2 port 1 has pnetid [ 46.166041][ T6472] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 47.212837][ T6472] usb 1-1: unable to get BOS descriptor or descriptor too short [ 47.218148][ T6472] usb 1-1: not running at top speed; connect to a high speed hub [ 47.220950][ T6472] usb 1-1: config 4 has an invalid interface number: 111 but max is 0 [ 47.222688][ T6472] usb 1-1: config 4 has no interface number 0 [ 47.223915][ T6472] usb 1-1: config 4 interface 111 has no altsetting 0 [ 47.227170][ T6472] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 47.229471][ T6472] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.231188][ T6472] usb 1-1: Product: syz [ 47.232185][ T6472] usb 1-1: Manufacturer: syz [ 47.233131][ T6472] usb 1-1: SerialNumber: syz [ 48.039938][ T6557] netlink: 'syz.3.12': attribute type 5 has an invalid length. [ 48.088137][ T53] Bluetooth: hci1: command tx timeout [ 48.088178][ T53] Bluetooth: hci3: command tx timeout [ 48.088209][ T53] Bluetooth: hci0: command tx timeout [ 48.088284][ T53] Bluetooth: hci4: command tx timeout [ 48.088307][ T53] Bluetooth: hci2: command tx timeout [ 48.855120][ T6472] pvrusb2: Hardware description: Terratec Grabster AV400 [ 48.855150][ T6472] pvrusb2: ********** [ 48.855157][ T6472] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 48.855167][ T6472] pvrusb2: Important functionality might not be entirely working. [ 48.855174][ T6472] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 48.855183][ T6472] pvrusb2: ********** [ 48.855768][ T6472] usb 1-1: selecting invalid altsetting 0 [ 48.863627][ T6472] usb 1-1: USB disconnect, device number 2 [ 48.879899][ T6472] pvrusb2: Device being rendered inoperable [ 49.292973][ T6566] Zero length message leads to an empty skb [ 50.947208][ T6576] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17'. [ 50.951997][ T6576] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.953922][ T6576] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.955633][ T6576] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.957499][ T6576] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.570215][ T6587] 9pnet_virtio: no channels available for device 127.0.0.1 [ 55.295890][ T6616] loop4: detected capacity change from 0 to 1764 [ 56.681414][ T6633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.33'. [ 56.966803][ T6632] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 56.969547][ T6632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.971481][ T6632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.125246][ T6628] loop3: detected capacity change from 0 to 32768 [ 57.127478][ T6628] XFS: ikeep mount option is deprecated. [ 57.264805][ T6640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.267424][ T6640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.286963][ T6628] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 59.866757][ T6628] XFS (loop3): Ending clean mount [ 59.871732][ T6628] XFS (loop3): Quotacheck needed: Please wait. [ 59.891725][ T6628] XFS (loop3): Quotacheck: Done. [ 59.972182][ T6651] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 59.973596][ T6651] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 60.005244][ T6425] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 60.016125][ T6651] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 60.022229][ T6651] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 60.023458][ T6651] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 60.025384][ T6651] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 60.030401][ T6651] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 60.031717][ T6651] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 60.034558][ T6651] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 60.036969][ T6651] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 60.039300][ T6651] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.043453][ T6651] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.045927][ T6651] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 60.047141][ T6651] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 60.266747][ T6651] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 61.737803][ T6666] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 61.739724][ T6666] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 61.741084][ T6666] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 61.742328][ T6666] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 61.743510][ T6666] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 61.844744][ T6679] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 61.851187][ T6679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.853930][ T6679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.560438][ T6690] netlink: 20 bytes leftover after parsing attributes in process `syz.4.48'. [ 63.564282][ T6690] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.566270][ T6690] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.568219][ T6690] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.570068][ T6690] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.048962][ T6422] Bluetooth: hci4: command 0x0c1a tx timeout [ 64.050469][ T6422] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.051679][ T6422] Bluetooth: hci2: command 0x0c1a tx timeout [ 64.052949][ T6422] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.054258][ T6422] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.716544][ T6703] netlink: 268 bytes leftover after parsing attributes in process `syz.4.49'. [ 64.983546][ T2353] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.985281][ T2353] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.403270][ T6716] loop3: detected capacity change from 0 to 128 [ 66.591464][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 66.592784][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 66.594050][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.595228][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.596499][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 66.638255][ T6716] affs: No valid root block on device loop3 [ 68.552965][ T6728] loop1: detected capacity change from 0 to 40427 [ 68.565149][ T6728] F2FS-fs (loop1): heap/no_heap options were deprecated [ 68.570451][ T6728] F2FS-fs (loop1): invalid crc value [ 68.575085][ T6728] F2FS-fs (loop1): Found nat_bits in checkpoint [ 68.593496][ T6728] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 68.643126][ T6422] Bluetooth: hci4: command 0x0c1a tx timeout [ 68.644387][ T6422] Bluetooth: hci3: command 0x0c1a tx timeout [ 68.645534][ T6422] Bluetooth: hci2: command 0x0c1a tx timeout [ 68.646739][ T6422] Bluetooth: hci1: command 0x0c1a tx timeout [ 68.647979][ T6422] Bluetooth: hci0: command 0x0c1a tx timeout [ 69.086973][ T6753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.64'. [ 69.697547][ T1766] cfg80211: failed to load regulatory.db [ 71.126882][ T6771] loop0: detected capacity change from 0 to 128 [ 71.825447][ T6771] affs: No valid root block on device loop0 [ 72.483896][ T6775] netlink: 268 bytes leftover after parsing attributes in process `syz.1.63'. [ 72.768447][ T6785] binder: tried to use weak ref as strong ref [ 72.773632][ T6785] binder: 6784:6785 Acquire 1 refcount change on invalid ref 0 ret -22 [ 72.782132][ T6785] binder: 6784:6785 got transaction to invalid handle, 1 [ 72.785935][ T6785] binder: 6785:6784 cannot find target node [ 72.790415][ T6785] binder: 6784:6785 transaction call to 0:0 failed 3/29201/-22, size 0-0 line 3151 [ 72.848482][ T6408] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.472780][ T6795] loop1: detected capacity change from 0 to 16 [ 73.813064][ T6795] erofs (device loop1): too large lz4 pclusterblks 16832 [ 75.427508][ T6811] loop2: detected capacity change from 0 to 128 [ 76.211073][ T6811] affs: No valid root block on device loop2 [ 76.554942][ T6824] binder: 6823:6824 got transaction to invalid handle, 1 [ 76.556520][ T6824] binder: 6824:6823 cannot find target node [ 76.557684][ T6824] binder: 6823:6824 transaction call to 0:0 failed 6/29201/-22, size 0-0 line 3151 [ 76.658663][ T6827] netlink: 268 bytes leftover after parsing attributes in process `syz.2.84'. [ 76.795474][ T1766] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.130424][ T6836] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 78.131935][ T6836] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 78.133206][ T6836] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 78.134491][ T6836] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 78.249944][ T6836] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 79.540852][ T6854] No such timeout policy "syz0" [ 80.335020][ T6864] loop2: detected capacity change from 0 to 128 [ 80.583277][ T6866] netlink: 20 bytes leftover after parsing attributes in process `syz.3.92'. [ 80.587555][ T6866] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.589433][ T6866] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.591186][ T6866] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.593001][ T6866] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.659711][ T6864] affs: No valid root block on device loop2 [ 81.242225][ T5987] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.243517][ T5987] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.244774][ T5987] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.246036][ T5987] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.247312][ T5987] Bluetooth: hci4: command 0x0c1a tx timeout [ 81.514128][ T6873] binder: 6870:6873 ioctl 4018620d 0 returned -22 [ 81.516142][ T6873] binder: tried to use weak ref as strong ref [ 81.517598][ T6873] binder: 6870:6873 Acquire 1 refcount change on invalid ref 0 ret -22 [ 81.521485][ T6873] binder: 6870:6873 got transaction to invalid handle, 1 [ 81.523310][ T6873] binder: 6873:6870 cannot find target node [ 81.529070][ T6873] binder: 6870:6873 transaction call to 0:0 failed 9/29201/-22, size 0-0 line 3151 [ 81.532590][ T6873] binder: 6870:6873 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 81.535115][ T6873] binder: 6873 RLIMIT_NICE not set [ 82.635882][ T6880] netlink: 268 bytes leftover after parsing attributes in process `syz.2.100'. [ 82.678292][ T6408] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.602615][ T5987] Bluetooth: hci4: command 0x0c1a tx timeout [ 83.866922][ T6911] netlink: 'syz.2.105': attribute type 5 has an invalid length. [ 84.686806][ T6917] loop3: detected capacity change from 0 to 128 [ 85.041617][ T6917] affs: No valid root block on device loop3 [ 85.642763][ T6922] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 85.669180][ T6922] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 85.671894][ T6922] bond1: (slave ipip0): Error -95 calling set_mac_address [ 86.238755][ T6940] netlink: 268 bytes leftover after parsing attributes in process `syz.1.115'. [ 87.014755][ T6952] loop1: detected capacity change from 0 to 1764 [ 87.296667][ T6960] loop0: detected capacity change from 0 to 128 [ 87.507166][ T6960] affs: No valid root block on device loop0 [ 88.207467][ T5987] Bluetooth: hci4: command 0x0c1a tx timeout [ 89.080573][ T6963] loop4: detected capacity change from 0 to 40427 [ 89.089336][ T6963] F2FS-fs (loop4): heap/no_heap options were deprecated [ 89.094091][ T6963] F2FS-fs (loop4): invalid crc value [ 89.364300][ T6963] F2FS-fs (loop4): Found nat_bits in checkpoint [ 89.687910][ T6963] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 90.212939][ T7004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.133'. [ 91.039654][ T5987] Bluetooth: hci4: command 0x0c1a tx timeout [ 92.108361][ T7037] No such timeout policy "syz0" [ 94.309370][ T7049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.147'. [ 94.313109][ T7049] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.314950][ T7049] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.316991][ T7049] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.319358][ T7049] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.687671][ T7056] netlink: 20 bytes leftover after parsing attributes in process `syz.4.149'. [ 95.498017][ T7067] netlink: 60 bytes leftover after parsing attributes in process `syz.1.152'. [ 95.506687][ T7063] netlink: 60 bytes leftover after parsing attributes in process `syz.1.152'. [ 95.536496][ T7067] netlink: 60 bytes leftover after parsing attributes in process `syz.1.152'. [ 95.760675][ T7075] netlink: 'syz.2.151': attribute type 5 has an invalid length. [ 95.999542][ T7078] netlink: 'syz.1.157': attribute type 5 has an invalid length. [ 96.295000][ T5987] Bluetooth: hci4: command 0x0c1a tx timeout [ 97.393358][ T7098] netlink: 20 bytes leftover after parsing attributes in process `syz.2.161'. [ 100.642194][ T5987] Bluetooth: hci4: command 0x0c1a tx timeout [ 101.494469][ T7113] loop0: detected capacity change from 0 to 40427 [ 101.504349][ T7113] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 101.506078][ T7113] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 101.511306][ T7113] F2FS-fs (loop0): invalid crc value [ 101.514279][ T7113] F2FS-fs (loop0): Found nat_bits in checkpoint [ 101.535941][ T7113] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 101.537465][ T7113] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 103.384394][ T6421] syz-executor: attempt to access beyond end of device [ 103.384394][ T6421] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.396070][ T6421] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 105.522163][ T7189] netlink: 20 bytes leftover after parsing attributes in process `syz.3.188'. [ 110.402120][ T7223] netlink: 268 bytes leftover after parsing attributes in process `syz.4.197'. [ 110.672168][ T7227] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 110.785444][ T7213] loop2: detected capacity change from 0 to 40427 [ 110.821268][ T7213] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 110.822972][ T7213] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 110.827309][ T7213] F2FS-fs (loop2): invalid crc value [ 110.832714][ T7213] F2FS-fs (loop2): Found nat_bits in checkpoint [ 110.867745][ T7213] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 110.871278][ T7213] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 110.913243][ T7238] loop3: detected capacity change from 0 to 256 [ 113.469074][ T6426] syz-executor: attempt to access beyond end of device [ 113.469074][ T6426] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.472007][ T6426] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 114.152427][ T7272] binder: BINDER_SET_CONTEXT_MGR already set [ 114.164464][ T7272] binder: 7269:7272 ioctl 4018620d 20000040 returned -16 [ 114.166732][ T7272] binder: 7269:7272 got transaction to invalid handle, 1 [ 114.186864][ T7272] binder: 7272:7269 cannot find target node [ 114.188051][ T7272] binder: 7269:7272 transaction call to 0:0 failed 12/29201/-22, size 0-0 line 3151 [ 114.192893][ T7272] binder: 7269:7272 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 114.195506][ T7272] binder: 7272 RLIMIT_NICE not set [ 114.321729][ T7274] loop2: detected capacity change from 0 to 2048 [ 114.358212][ T7274] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.649761][ T6408] binder: undelivered TRANSACTION_ERROR: 29201 [ 116.792423][ T7295] loop1: detected capacity change from 0 to 40427 [ 116.800276][ T7295] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 116.805249][ T7295] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 116.826783][ T7295] F2FS-fs (loop1): invalid crc value [ 116.836019][ T7295] F2FS-fs (loop1): Found nat_bits in checkpoint [ 116.855557][ T7295] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 117.861535][ T7295] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 118.575603][ T7321] loop2: detected capacity change from 0 to 40427 [ 118.580486][ T6418] syz-executor: attempt to access beyond end of device [ 118.580486][ T6418] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 118.596466][ T6418] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 118.602466][ T7321] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1fffff [ 118.636805][ T7321] F2FS-fs (loop2): invalid crc value [ 118.655413][ T7321] F2FS-fs (loop2): Found nat_bits in checkpoint [ 118.677661][ T7321] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 119.730425][ T7340] loop1: detected capacity change from 0 to 512 [ 119.787818][ T7321] Process accounting resumed [ 119.891889][ T6426] syz-executor: attempt to access beyond end of device [ 119.891889][ T6426] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 119.895155][ T6426] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 119.909269][ T7340] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.045548][ T7340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.243690][ T6418] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.427014][ T7363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.235'. [ 120.682150][ T5987] Bluetooth: hci4: command 0x0c1a tx timeout [ 120.933655][ T7366] loop4: detected capacity change from 0 to 2048 [ 121.042492][ T7366] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.429696][ T7376] loop1: detected capacity change from 0 to 40427 [ 124.432740][ T7376] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1fffff [ 124.435353][ T7376] F2FS-fs (loop1): invalid crc value [ 124.443036][ T7376] F2FS-fs (loop1): Found nat_bits in checkpoint [ 124.469251][ T7376] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 125.307071][ T7423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.316463][ T7423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.493908][ T7429] netlink: 'syz.2.255': attribute type 29 has an invalid length. [ 125.778656][ T5987] Bluetooth: hci4: command 0x0c1a tx timeout [ 125.918617][ T2353] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.920248][ T2353] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.219997][ T7451] loop4: detected capacity change from 0 to 40427 [ 128.227669][ T7451] F2FS-fs (loop4): Invalid log blocks per segment (4278190089) [ 128.247638][ T7451] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 128.258684][ T7451] F2FS-fs (loop4): invalid crc value [ 128.271557][ T7451] F2FS-fs (loop4): Found nat_bits in checkpoint [ 128.749657][ T7451] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 128.773294][ T7451] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 128.858372][ T5987] Bluetooth: hci4: command 0x0c1a tx timeout [ 129.123007][ T7453] loop1: detected capacity change from 0 to 40427 [ 129.513912][ T7453] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1fffff [ 129.744011][ T7453] F2FS-fs (loop1): invalid crc value [ 129.747636][ T7453] F2FS-fs (loop1): Found nat_bits in checkpoint [ 129.942339][ T7453] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 130.622050][ T6417] syz-executor: attempt to access beyond end of device [ 130.622050][ T6417] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 130.625031][ T6417] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 132.141421][ T7496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.273'. [ 132.968600][ T7486] Process accounting resumed [ 134.489076][ T7516] input: syz0 as /devices/virtual/input/input8 [ 134.828487][ T6418] syz-executor: attempt to access beyond end of device [ 134.828487][ T6418] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 134.833231][ T6418] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 135.153058][ T7524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.402433][ T7524] batadv_slave_0: entered promiscuous mode [ 136.806105][ T7534] loop0: detected capacity change from 0 to 40427 [ 136.884716][ T7534] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 136.886386][ T7534] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 136.889390][ T7534] F2FS-fs (loop0): invalid crc value [ 137.645977][ T7548] loop1: detected capacity change from 0 to 2048 [ 137.649204][ T7534] F2FS-fs (loop0): Found nat_bits in checkpoint [ 137.665224][ T7534] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 137.669158][ T7534] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 137.676824][ T7548] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.159766][ T7560] netlink: 20 bytes leftover after parsing attributes in process `syz.4.289'. [ 140.119023][ T6421] syz-executor: attempt to access beyond end of device [ 140.119023][ T6421] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 140.124328][ T6421] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 140.198336][ T7574] input: syz0 as /devices/virtual/input/input10 [ 144.588312][ T7618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.304'. [ 145.407387][ T7632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.938937][ T7635] input: syz0 as /devices/virtual/input/input11 [ 146.351412][ T7632] batadv_slave_0: entered promiscuous mode [ 148.361529][ T7655] loop0: detected capacity change from 0 to 256 [ 148.412814][ T7652] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 148.414647][ T7652] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 152.018556][ T7685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.320'. [ 152.240407][ T7687] input: syz0 as /devices/virtual/input/input12 [ 153.685693][ T7689] loop4: detected capacity change from 0 to 40427 [ 153.793612][ T7689] F2FS-fs (loop4): Invalid log blocks per segment (4278190089) [ 153.795421][ T7689] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 153.844830][ T7689] F2FS-fs (loop4): invalid crc value [ 153.952762][ T7689] F2FS-fs (loop4): Found nat_bits in checkpoint [ 154.606332][ T7689] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 154.615962][ T7689] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 155.738653][ T6470] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 156.098648][ T6470] usb 1-1: Using ep0 maxpacket: 16 [ 156.127442][ T6470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.166270][ T6470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.226229][ T6470] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 156.245898][ T6470] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.551667][ T6470] usb 1-1: config 0 descriptor?? [ 157.119938][ T6417] syz-executor: attempt to access beyond end of device [ 157.119938][ T6417] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 157.123039][ T6417] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 159.107301][ T6470] usbhid 1-1:0.0: can't add hid device: -71 [ 159.108969][ T6470] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 159.113891][ T6470] usb 1-1: USB disconnect, device number 3 [ 159.119302][ T7740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.337'. [ 160.846641][ T7748] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 160.847922][ T7748] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 160.849261][ T7748] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 160.851157][ T7748] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 160.852387][ T7748] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 162.242055][ T5987] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.524308][ T7794] loop0: detected capacity change from 0 to 256 [ 163.539624][ T6422] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.544204][ T6422] Bluetooth: hci1: command 0x0c1a tx timeout [ 163.546803][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.551380][ T5987] Bluetooth: hci4: command 0x0c1a tx timeout [ 164.368255][ T7800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.352'. [ 166.628025][ T7814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.630329][ T7814] batadv_slave_0: entered promiscuous mode [ 167.738366][ T7788] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 167.740287][ T7788] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 167.741640][ T7788] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 167.742932][ T7788] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 167.760996][ T7788] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 168.020524][ T7831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.022460][ T7831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.289976][ T7840] loop0: detected capacity change from 0 to 256 [ 168.942201][ T7842] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 169.349324][ T7847] netlink: 20 bytes leftover after parsing attributes in process `syz.4.365'. [ 169.808186][ T5987] Bluetooth: hci0: command 0x0c1a tx timeout [ 169.906954][ T5987] Bluetooth: hci4: command 0x0c1a tx timeout [ 169.912220][ T5987] Bluetooth: hci3: command 0x0c1a tx timeout [ 169.915002][ T5987] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.937882][ T6433] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.209579][ T7860] loop3: detected capacity change from 0 to 1764 [ 172.181814][ T7879] Invalid ELF header magic: != ELF [ 172.206461][ T7879] input: syz0 as /devices/virtual/input/input14 [ 173.660230][ T7897] input: syz0 as /devices/virtual/input/input16 [ 175.198882][ T7941] loop0: detected capacity change from 0 to 1764 [ 176.705788][ T7966] Invalid ELF header magic: != ELF [ 176.724652][ T7966] input: syz0 as /devices/virtual/input/input17 [ 180.003415][ T8003] block nbd3: shutting down sockets [ 180.055162][ T8005] input: syz0 as /devices/virtual/input/input19 [ 181.913967][ T8029] Invalid ELF header magic: != ELF [ 181.932752][ T8029] input: syz0 as /devices/virtual/input/input20 [ 182.957974][ T8065] Bluetooth: MGMT ver 1.23 [ 187.361780][ T8113] Invalid ELF header magic: != ELF [ 187.380332][ T8113] input: syz0 as /devices/virtual/input/input23 [ 187.580291][ T2353] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.582302][ T2353] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.018753][ T8121] loop4: detected capacity change from 0 to 128 [ 188.078780][ T8121] affs: No valid root block on device loop4 [ 188.325990][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'. [ 190.314804][ T8134] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 190.316133][ T8134] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 190.318573][ T8134] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 190.319967][ T8134] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 190.321248][ T8134] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 192.408352][ T8144] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 192.409823][ T8144] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.411031][ T8144] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.412309][ T8144] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.414290][ T8144] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 192.968392][ T8157] loop4: detected capacity change from 0 to 40427 [ 193.038391][ T8157] F2FS-fs (loop4): Invalid log blocks per segment (4278190089) [ 193.041541][ T8157] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 193.079553][ T8157] F2FS-fs (loop4): invalid crc value [ 193.160774][ T8157] F2FS-fs (loop4): Found nat_bits in checkpoint [ 193.188518][ T8157] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 193.228251][ T8157] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 194.236521][ T8184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.912539][ T8184] batadv_slave_0: entered promiscuous mode [ 195.348418][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 195.349723][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 195.351213][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 195.352444][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 195.353762][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.430457][ T8199] Invalid ELF header magic: != ELF [ 196.449866][ T8199] input: syz0 as /devices/virtual/input/input24 [ 197.092382][ T6417] syz-executor: attempt to access beyond end of device [ 197.092382][ T6417] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 197.096507][ T6417] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 197.443555][ T8208] vlan2: entered promiscuous mode [ 197.444681][ T8208] vlan2: entered allmulticast mode [ 197.446388][ T8208] vlan0: entered allmulticast mode [ 197.447602][ T8208] veth0_vlan: entered allmulticast mode [ 197.454682][ T8209] netlink: 28 bytes leftover after parsing attributes in process `syz.1.443'. [ 197.484794][ T8208] vlan0: entered promiscuous mode [ 197.503516][ T8208] team0: Port device vlan2 added [ 199.385794][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 202.789509][ T8239] loop1: detected capacity change from 0 to 40427 [ 202.792836][ T8239] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 202.797760][ T8239] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 202.808671][ T8239] F2FS-fs (loop1): invalid crc value [ 202.861473][ T8239] F2FS-fs (loop1): Found nat_bits in checkpoint [ 202.888691][ T8239] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 202.890316][ T8239] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 203.286180][ T8269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.456'. [ 204.246954][ T6418] syz-executor: attempt to access beyond end of device [ 204.246954][ T6418] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 204.251298][ T6418] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 208.998886][ T8305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.466'. [ 209.598052][ T8315] Invalid ELF header magic: != ELF [ 209.619017][ T8315] input: syz0 as /devices/virtual/input/input25 [ 211.404032][ T8] libceph: connect (1)[c::]:6789 error -101 [ 211.412505][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 211.425219][ T8] libceph: connect (1)[c::]:6789 error -101 [ 211.436702][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 211.699695][ T8] libceph: connect (1)[c::]:6789 error -101 [ 211.700997][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 212.231107][ T8355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.903326][ T8] libceph: connect (1)[c::]:6789 error -101 [ 212.905756][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 213.138496][ T8330] ceph: No mds server is up or the cluster is laggy [ 213.151896][ T8355] batadv_slave_0: entered promiscuous mode [ 213.450545][ T8362] netlink: 'syz.3.477': attribute type 1 has an invalid length. [ 216.961751][ T8375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.481'. [ 227.417270][ T8479] loop0: detected capacity change from 0 to 1764 [ 231.300299][ T5987] Bluetooth: hci4: command 0x0c1a tx timeout [ 233.184065][ T8525] Invalid ELF header magic: != ELF [ 233.194659][ T8525] input: syz0 as /devices/virtual/input/input26 [ 234.986963][ T8532] binder: 8531:8532 got transaction to invalid handle, 1 [ 234.990525][ T8532] binder: 8532:8531 cannot find target node [ 234.991751][ T8532] binder: 8531:8532 transaction call to 0:0 failed 15/29201/-22, size 0-0 line 3151 [ 235.012424][ T8532] binder: 8531:8532 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 235.015190][ T8532] binder: 8532 RLIMIT_NICE not set [ 235.168230][ T8] binder: undelivered TRANSACTION_ERROR: 29201 [ 237.806810][ T8570] batman_adv: batadv0: Adding interface: dummy0 [ 237.808532][ T8570] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.176591][ T8570] batman_adv: batadv0: Interface activated: dummy0 [ 238.540126][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 239.195441][ T8583] Invalid ELF header magic: != ELF [ 239.571290][ T8587] netlink: 'syz.1.534': attribute type 16 has an invalid length. [ 239.575949][ T8587] vlan2: entered promiscuous mode [ 239.577018][ T8587] vlan2: entered allmulticast mode [ 240.105807][ T8595] binder: BINDER_SET_CONTEXT_MGR already set [ 240.107065][ T8595] binder: 8593:8595 ioctl 4018620d 20000040 returned -16 [ 240.109800][ T8595] binder: 8593:8595 got transaction to invalid handle, 1 [ 240.112053][ T8595] binder: 8595:8593 cannot find target node [ 240.113395][ T8595] binder: 8593:8595 transaction call to 0:0 failed 18/29201/-22, size 0-0 line 3151 [ 240.116122][ T8595] binder: 8593:8595 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 240.119934][ T8595] binder: 8595 RLIMIT_NICE not set [ 240.123237][ T8590] input: syz0 as /devices/virtual/input/input28 [ 240.135087][ T8592] bridge0: port 3(gretap0) entered blocking state [ 240.140545][ T8592] bridge0: port 3(gretap0) entered disabled state [ 240.148441][ T8592] gretap0: entered allmulticast mode [ 240.745532][ T8594] Invalid ELF header magic: != ELF [ 240.757670][ T8594] input: syz0 as /devices/virtual/input/input29 [ 240.794508][ T8592] gretap0: entered promiscuous mode [ 240.796393][ T8592] bridge0: port 3(gretap0) entered blocking state [ 240.797983][ T8592] bridge0: port 3(gretap0) entered forwarding state [ 240.847825][ T8597] gretap0: left allmulticast mode [ 240.854659][ T8597] gretap0: left promiscuous mode [ 240.859683][ T8597] bridge0: port 3(gretap0) entered disabled state [ 241.030217][ T8] binder: undelivered TRANSACTION_ERROR: 29201 [ 241.874846][ T8608] bridge0: port 3(gretap0) entered blocking state [ 242.001605][ T8608] bridge0: port 3(gretap0) entered disabled state [ 242.032284][ T8608] gretap0: entered allmulticast mode [ 242.048565][ T8608] gretap0: entered promiscuous mode [ 242.053043][ T8608] bridge0: port 3(gretap0) entered blocking state [ 242.054400][ T8608] bridge0: port 3(gretap0) entered forwarding state [ 242.248669][ T8610] gretap0: left allmulticast mode [ 242.249895][ T8610] gretap0: left promiscuous mode [ 242.251138][ T8610] bridge0: port 3(gretap0) entered disabled state [ 242.410968][ T8621] netlink: 48 bytes leftover after parsing attributes in process `syz.1.542'. [ 242.562529][ T8629] netlink: 48 bytes leftover after parsing attributes in process `syz.0.546'. [ 242.739465][ T6605] IPVS: starting estimator thread 0... [ 243.798321][ T8632] IPVS: using max 34 ests per chain, 81600 per kthread [ 243.898633][ T8639] binder: 8638:8639 tried to acquire reference to desc 0, got 1 instead [ 243.901221][ T8639] binder: 8638:8639 got reply transaction with bad transaction stack, transaction 23 has target 8638:0 [ 243.903573][ T8639] binder: 8638:8639 transaction reply to 0:0 failed 24/29201/-71, size 104-24 line 3067 [ 243.905783][ T8639] binder: 8638:8639 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 243.914582][ T8639] binder: 8639 RLIMIT_NICE not set [ 243.915614][ T8639] binder: 8639 RLIMIT_NICE not set [ 243.916692][ T8639] binder: send failed reply for transaction 23 to 8638:8639 [ 243.918480][ T8639] binder: 8638:8639 ioctl c0306201 20000140 returned -14 [ 243.938233][ T2260] binder: undelivered TRANSACTION_COMPLETE [ 243.939486][ T2260] binder: undelivered TRANSACTION_ERROR: 29201 [ 243.940668][ T2260] binder: undelivered TRANSACTION_ERROR: 29201 [ 243.968347][ T8644] netlink: 'syz.1.552': attribute type 1 has an invalid length. [ 245.300525][ T8675] binder: 8674:8675 tried to acquire reference to desc 0, got 1 instead [ 245.323359][ T8675] binder: 8674:8675 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 245.325950][ T8675] binder: 8675 RLIMIT_NICE not set [ 245.327046][ T8675] binder: 8675 RLIMIT_NICE not set [ 245.355967][ T8675] binder: send failed reply for transaction 29 to 8674:8675 [ 245.357445][ T8675] binder: 8674:8675 ioctl c0306201 20000140 returned -14 [ 245.410225][ T8] binder: undelivered TRANSACTION_COMPLETE [ 245.411645][ T8] binder: undelivered TRANSACTION_ERROR: 29201 [ 245.472197][ T8688] batman_adv: batadv0: Interface deactivated: dummy0 [ 245.473736][ T8688] batman_adv: batadv0: Removing interface: dummy0 [ 246.167678][ T8709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.259784][ T8710] input: syz0 as /devices/virtual/input/input30 [ 246.570182][ T8709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.863828][ T8712] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 246.915849][ T8714] binder: 8713:8714 tried to acquire reference to desc 0, got 1 instead [ 246.923673][ T8714] binder: 8713:8714 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 246.930449][ T8714] binder: 8714 RLIMIT_NICE not set [ 246.931570][ T8714] binder: 8714 RLIMIT_NICE not set [ 246.932653][ T8714] binder: send failed reply for transaction 34 to 8713:8714 [ 246.956082][ T8714] binder: 8713:8714 ioctl c0306201 20000140 returned -14 [ 247.218565][ T2260] binder: undelivered TRANSACTION_COMPLETE [ 247.220006][ T2260] binder: undelivered TRANSACTION_ERROR: 29201 [ 247.292735][ T8722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.297069][ T8722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.398954][ T8723] input: syz0 as /devices/virtual/input/input31 [ 249.450782][ T2353] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.452269][ T2353] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.652688][ T8762] loop3: detected capacity change from 0 to 256 [ 252.957559][ T5987] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 253.685241][ T8780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.687214][ T8780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.720485][ T8768] loop2: detected capacity change from 0 to 40427 [ 253.728555][ T8768] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 253.730190][ T8768] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 253.733238][ T8768] F2FS-fs (loop2): invalid crc value [ 253.773353][ T8768] F2FS-fs (loop2): Found nat_bits in checkpoint [ 253.790022][ T8768] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 253.791629][ T8768] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 254.639418][ T8792] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 254.640982][ T8792] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 254.642111][ T8792] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 254.690376][ T8792] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 254.691685][ T8792] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 254.692932][ T8792] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 254.694179][ T8792] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 256.230571][ T6426] syz-executor: attempt to access beyond end of device [ 256.230571][ T6426] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 256.270668][ T6426] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 256.732083][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 256.733480][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 256.734707][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 256.736165][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 256.737479][ T5987] Bluetooth: hci4: command 0x0c1a tx timeout [ 256.803740][ T8814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.805606][ T8814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.383175][ T8821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.385119][ T8821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.431607][ T8822] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 258.269244][ T8831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.607'. [ 258.422173][ T8834] syz.1.608 uses obsolete (PF_INET,SOCK_PACKET) [ 258.798596][ T5987] Bluetooth: hci1: command 0x0c1a tx timeout [ 258.878370][ T5987] Bluetooth: hci4: command 0x0c1a tx timeout [ 259.810228][ T8843] Invalid ELF header magic: != ELF [ 259.820330][ T8843] input: syz0 as /devices/virtual/input/input32 [ 260.037097][ T8842] loop0: detected capacity change from 0 to 40427 [ 260.187379][ T8842] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 260.189463][ T8842] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 260.205735][ T8842] F2FS-fs (loop0): invalid crc value [ 260.215226][ T8842] F2FS-fs (loop0): Found nat_bits in checkpoint [ 260.245369][ T8842] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 260.246981][ T8842] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 260.653104][ T8864] netlink: 48 bytes leftover after parsing attributes in process `syz.2.616'. [ 262.018585][ T6421] syz-executor: attempt to access beyond end of device [ 262.018585][ T6421] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 262.022463][ T6421] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 262.678266][ T8885] input: syz0 as /devices/virtual/input/input33 [ 265.573408][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 266.092183][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.637'. [ 266.111845][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 266.113471][ T8] usb 1-1: config 0 has no interface number 0 [ 266.118976][ T8] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 266.674675][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.676628][ T8] usb 1-1: Product: syz [ 266.677588][ T8] usb 1-1: Manufacturer: syz [ 266.679553][ T8] usb 1-1: SerialNumber: syz [ 266.696965][ T8] usb 1-1: config 0 descriptor?? [ 266.712473][ T8917] loop2: detected capacity change from 0 to 40427 [ 266.716626][ T8917] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 266.718681][ T8917] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 266.722255][ T8917] F2FS-fs (loop2): invalid crc value [ 266.743528][ T8917] F2FS-fs (loop2): Found nat_bits in checkpoint [ 266.810167][ T8945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.816729][ T8917] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 266.818379][ T8917] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 266.822664][ T8945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.921439][ T8] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 266.939525][ T8] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 266.943688][ T8] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 266.951430][ T8] usb 1-1: media controller created [ 266.964448][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.137694][ T8] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 268.320821][ T8] usb 1-1: USB disconnect, device number 4 [ 270.307889][ T8988] binder: 8987:8988 tried to acquire reference to desc 0, got 1 instead [ 270.338952][ T8988] binder: 8987:8988 got reply transaction with no transaction stack [ 270.343352][ T8988] binder: 8987:8988 transaction reply to 0:0 failed 39/29201/-71, size 0-0 line 3052 [ 270.346571][ T8988] binder: 8987:8988 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 270.360538][ T8988] binder: 8988 RLIMIT_NICE not set [ 270.426010][ T6426] syz-executor: attempt to access beyond end of device [ 270.426010][ T6426] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 270.429264][ T6426] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 271.466044][ T9003] Invalid ELF header magic: != ELF [ 271.850158][ T9008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.868668][ T9008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.999419][ T9008] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 272.119048][ T8] binder: undelivered TRANSACTION_ERROR: 29201 [ 273.368476][ T9019] Invalid ELF header magic: != ELF [ 275.352176][ T9043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.365001][ T9043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.443408][ T9048] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 275.469149][ T9047] binder: 9044:9047 tried to acquire reference to desc 0, got 1 instead [ 275.487593][ T9047] binder: 9044:9047 got reply transaction with bad transaction stack, transaction 44 has target 9044:0 [ 275.496885][ T9047] binder: 9044:9047 transaction reply to 0:0 failed 45/29201/-71, size 0-0 line 3067 [ 275.539076][ T9051] binder: 9044:9051 ioctl c0306201 0 returned -14 [ 275.635246][ T1766] binder: release 9044:9047 transaction 44 out, still active [ 275.690364][ T1766] binder: undelivered TRANSACTION_COMPLETE [ 275.692225][ T1766] binder: undelivered TRANSACTION_ERROR: 29201 [ 275.695913][ T1766] binder: send failed reply for transaction 44, target dead [ 276.183283][ T9062] loop0: detected capacity change from 0 to 128 [ 276.205255][ T9062] affs: No valid root block on device loop0 [ 277.025872][ T9071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.027781][ T9071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.063985][ T9071] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 277.197969][ T9081] binder: 9080:9081 tried to acquire reference to desc 0, got 1 instead [ 277.202596][ T9081] binder: 9080:9081 got reply transaction with bad transaction stack, transaction 50 has target 9080:0 [ 277.205150][ T9081] binder: 9080:9081 transaction reply to 0:0 failed 51/29201/-71, size 0-0 line 3067 [ 277.207568][ T9081] binder: 9080:9081 ioctl c0306201 0 returned -14 [ 277.213272][ T6605] binder: release 9080:9081 transaction 50 out, still active [ 277.248271][ T6605] binder: undelivered TRANSACTION_COMPLETE [ 277.249694][ T6605] binder: undelivered TRANSACTION_ERROR: 29201 [ 277.251051][ T6605] binder: send failed reply for transaction 50, target dead [ 279.000345][ T9097] loop1: detected capacity change from 0 to 256 [ 280.388227][ T9096] Invalid ELF header magic: != ELF [ 281.529631][ T9117] input: syz0 as /devices/virtual/input/input37 [ 282.139989][ T9122] binder: BINDER_SET_CONTEXT_MGR already set [ 282.142506][ T9122] binder: 9121:9122 ioctl 4018620d 20000040 returned -16 [ 282.145134][ T9122] binder: 9121:9122 got transaction to invalid handle, 1 [ 282.146579][ T9122] binder: 9122:9121 cannot find target node [ 282.147716][ T9122] binder: 9121:9122 transaction call to 0:0 failed 54/29201/-22, size 0-0 line 3151 [ 282.155660][ T9122] binder: 9121:9122 ioctl c0306201 0 returned -14 [ 282.240452][ T8] binder: undelivered TRANSACTION_ERROR: 29201 [ 282.273051][ T9135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.275038][ T9135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.665333][ T9140] input: syz0 as /devices/virtual/input/input38 [ 282.670219][ T9141] input: syz0 as /devices/virtual/input/input39 [ 286.897895][ T9174] loop4: detected capacity change from 0 to 256 [ 288.572945][ T9180] binder: 9178:9180 tried to acquire reference to desc 0, got 1 instead [ 288.575116][ T9180] binder: 9178:9180 got reply transaction with bad transaction stack, transaction 59 has target 9178:0 [ 288.577370][ T9180] binder: 9178:9180 transaction reply to 0:0 failed 60/29201/-71, size 0-0 line 3067 [ 288.579885][ T6470] binder: release 9178:9180 transaction 59 out, still active [ 288.824970][ T9190] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.830439][ T6470] binder: undelivered TRANSACTION_COMPLETE [ 288.833241][ T6470] binder: undelivered TRANSACTION_ERROR: 29201 [ 288.834649][ T6470] binder: send failed reply for transaction 59, target dead [ 288.840963][ T9190] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.525317][ T9224] binder: 9218:9224 tried to acquire reference to desc 0, got 1 instead [ 291.527563][ T9224] binder: 9218:9224 got reply transaction with bad transaction stack, transaction 65 has target 9218:0 [ 291.530093][ T9224] binder: 9218:9224 transaction reply to 0:0 failed 66/29201/-71, size 0-0 line 3067 [ 291.549214][ T6470] binder: send failed reply for transaction 65 to 9218:9224 [ 291.757772][ T6470] binder: undelivered TRANSACTION_COMPLETE [ 291.759158][ T6470] binder: undelivered TRANSACTION_ERROR: 29201 [ 291.760448][ T6470] binder: undelivered TRANSACTION_ERROR: 29189 [ 291.868870][ T9251] loop2: detected capacity change from 0 to 256 [ 292.396094][ T9232] wireguard0: entered promiscuous mode [ 292.411267][ T9232] wireguard0: entered allmulticast mode [ 292.633642][ T9237] loop4: detected capacity change from 0 to 128 [ 292.643446][ T9237] affs: No valid root block on device loop4 [ 293.715435][ T9265] 9pnet: Could not find request transport: fd0x0000000000000007 [ 293.962649][ T9278] 9pnet_fd: Insufficient options for proto=fd [ 294.385180][ T9298] binder: 9297:9298 tried to acquire reference to desc 0, got 1 instead [ 294.387662][ T9298] binder: 9297:9298 got reply transaction with bad transaction stack, transaction 71 has target 9297:0 [ 294.391303][ T9298] binder: 9297:9298 transaction reply to 0:0 failed 72/29201/-71, size 0-0 line 3067 [ 294.393851][ T6468] binder: release 9297:9298 transaction 71 out, still active [ 294.983055][ T6468] binder: undelivered TRANSACTION_COMPLETE [ 294.984547][ T6468] binder: undelivered TRANSACTION_ERROR: 29201 [ 294.986045][ T6468] binder: send failed reply for transaction 71, target dead [ 295.246005][ T9316] loop4: detected capacity change from 0 to 1764 [ 295.519218][ T9325] netlink: 'syz.1.742': attribute type 9 has an invalid length. [ 296.207296][ T9327] netlink: 'syz.3.743': attribute type 9 has an invalid length. [ 297.728199][ T9343] loop1: detected capacity change from 0 to 128 [ 298.000349][ T9343] affs: No valid root block on device loop1 [ 298.215993][ T9350] binder: 9348:9350 tried to acquire reference to desc 0, got 1 instead [ 298.224482][ T9350] binder: 9348:9350 got reply transaction with bad transaction stack, transaction 77 has target 9348:0 [ 298.262804][ T9350] binder: 9348:9350 transaction reply to 0:0 failed 78/29201/-71, size 0-0 line 3067 [ 298.273441][ T6470] binder: release 9348:9350 transaction 77 out, still active [ 298.329901][ T6470] binder: undelivered TRANSACTION_COMPLETE [ 298.331243][ T6470] binder: undelivered TRANSACTION_ERROR: 29201 [ 298.483518][ T6470] binder: send failed reply for transaction 77, target dead [ 299.584439][ T9368] wireguard0: entered promiscuous mode [ 299.585648][ T9368] wireguard0: entered allmulticast mode [ 299.858347][ T9375] netlink: 316 bytes leftover after parsing attributes in process `syz.0.753'. [ 300.024179][ T9377] loop1: detected capacity change from 0 to 16 [ 300.042922][ T9377] erofs (device loop1): too large lz4 pclusterblks 16832 [ 301.595068][ T9390] loop4: detected capacity change from 0 to 128 [ 301.613146][ T9387] netlink: 'syz.2.761': attribute type 9 has an invalid length. [ 301.926514][ T9390] affs: No valid root block on device loop4 [ 302.621594][ T9401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.623597][ T9401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.860411][ T9406] netlink: 'syz.4.765': attribute type 9 has an invalid length. [ 303.364111][ T9408] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 303.488824][ T9409] loop3: detected capacity change from 0 to 256 [ 304.802828][ T9419] wireguard0: entered promiscuous mode [ 304.808156][ T9419] wireguard0: entered allmulticast mode [ 305.252256][ T9424] input: syz0 as /devices/virtual/input/input40 [ 306.187755][ T9434] netlink: 316 bytes leftover after parsing attributes in process `syz.4.771'. [ 307.431430][ T9444] loop0: detected capacity change from 0 to 128 [ 307.625444][ T9444] affs: No valid root block on device loop0 [ 308.067116][ T9455] netlink: 'syz.2.774': attribute type 9 has an invalid length. [ 308.696363][ T9458] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 309.342512][ T9473] qrtr: Invalid version 0 [ 310.024900][ T9476] wireguard0: entered promiscuous mode [ 310.026066][ T9476] wireguard0: entered allmulticast mode [ 310.233744][ T9478] qrtr: Invalid version 0 [ 310.241344][ T9480] wireguard0: entered promiscuous mode [ 310.242602][ T9480] wireguard0: entered allmulticast mode [ 310.248559][ T2353] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.250011][ T2353] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.262833][ T9494] qrtr: Invalid version 0 [ 313.146029][ T9518] warning: `syz.0.794' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 314.130393][ T9531] qrtr: Invalid version 0 [ 315.927233][ T9536] binder: 9514:9536 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 315.937279][ T9536] binder: 9536 RLIMIT_NICE not set [ 315.950311][ T9536] binder: 9514:9536 ioctl 89f1 20000700 returned -22 [ 317.868553][ T9569] input: syz0 as /devices/virtual/input/input41 [ 319.923465][ T9581] qrtr: Invalid version 0 [ 327.258194][ T6470] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 327.493687][ T6470] usb 1-1: device descriptor read/64, error -71 [ 328.578168][ T6470] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 328.708206][ T6470] usb 1-1: device descriptor read/64, error -71 [ 328.966034][ T6470] usb usb1-port1: attempt power cycle [ 329.090789][ T9682] binder: 9681:9682 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 329.093752][ T9682] binder: 9682 RLIMIT_NICE not set [ 329.988206][ T9686] qrtr: Invalid version 0 [ 330.085901][ T9687] binder: 9681:9687 tried to acquire reference to desc 0, got 1 instead [ 330.088022][ T9687] binder_alloc: 9681: binder_alloc_buf, no vma [ 330.089506][ T6470] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 330.091996][ T9687] binder: cannot allocate buffer: vma cleared, target dead or dying [ 330.092029][ T9687] binder: 9681:9687 transaction call to 9681:0 failed 86/29189/-3, size 0-0 line 3339 [ 330.096886][ T9687] binder: 9681:9687 ioctl 89f1 20000700 returned -22 [ 330.113146][ T6470] usb 1-1: device descriptor read/8, error -71 [ 330.349220][ T1766] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.049979][ T9781] wireguard0: entered promiscuous mode [ 338.051252][ T9781] wireguard0: entered allmulticast mode [ 338.544488][ T9790] input: syz0 as /devices/virtual/input/input45 [ 340.481709][ T9816] infiniband syz2: set active [ 341.328947][ T9823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.889'. [ 342.114253][ T9832] loop4: detected capacity change from 0 to 1764 [ 342.402374][ T9845] qrtr: Invalid version 0 [ 344.737293][ T9875] loop4: detected capacity change from 0 to 1764 [ 346.680707][ T9904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.912'. [ 346.758183][ T9894] wireguard0: entered promiscuous mode [ 346.759461][ T9894] wireguard0: entered allmulticast mode [ 347.730669][ T9919] loop3: detected capacity change from 0 to 1764 [ 349.875807][ T9949] infiniband syz2: set active [ 351.032577][ T9964] loop3: detected capacity change from 0 to 1764 [ 351.034161][ T9965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.935'. [ 352.251697][ T9973] can0: slcan on ttyS3. [ 354.148488][ T9960] can0 (unregistered): slcan off ttyS3. [ 355.786471][T10006] infiniband syz2: set active [ 356.140550][T10004] can0: slcan on ttyS3. [ 356.463711][T10013] loop2: detected capacity change from 0 to 1764 [ 356.639576][ T9999] can0 (unregistered): slcan off ttyS3. [ 357.259667][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 357.484122][T10035] process 'syz.1.959' launched './file1' with NULL argv: empty string added [ 357.501466][T10030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.958'. [ 357.732868][T10046] loop0: detected capacity change from 0 to 1764 [ 360.720569][T10082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.975'. [ 361.397340][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.976'. [ 361.496224][T10088] loop4: detected capacity change from 0 to 1764 [ 362.480516][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 362.993680][T10113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.988'. [ 364.176414][T10126] loop4: detected capacity change from 0 to 256 [ 364.758784][T10127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.990'. [ 364.760581][T10127] bridge: RTM_NEWNEIGH with invalid ether address [ 364.815954][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.992'. [ 364.818040][T10130] loop3: detected capacity change from 0 to 1764 [ 366.461347][T10161] netlink: 20 bytes leftover after parsing attributes in process `syz.3.999'. [ 367.340294][T10171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1003'. [ 367.369747][T10174] netlink: 'syz.1.1005': attribute type 9 has an invalid length. [ 367.408813][T10172] loop3: detected capacity change from 0 to 1764 [ 367.585925][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1007'. [ 368.496468][T10201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1016'. [ 368.543345][T10206] loop3: detected capacity change from 0 to 1764 [ 368.599659][T10207] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1014'. [ 370.755843][T10237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1029'. [ 370.788616][T10239] loop2: detected capacity change from 0 to 1764 [ 371.049725][T10241] can0: slcan on ttyS3. [ 371.319138][T10241] can0 (unregistered): slcan off ttyS3. [ 372.089506][T10253] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1033'. [ 372.221565][ T2353] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.229738][ T2353] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.434645][T10293] loop1: detected capacity change from 0 to 128 [ 374.437595][T10293] affs: No valid root block on device loop1 [ 374.741762][T10303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1048'. [ 375.142607][T10307] can0: slcan on ttyS3. [ 375.359566][T10307] can0 (unregistered): slcan off ttyS3. [ 377.906019][T10347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1061'. [ 378.450601][T10354] can0: slcan on ttyS3. [ 380.078675][T10354] can0 (unregistered): slcan off ttyS3. [ 380.337084][T10370] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1068'. [ 382.584849][T10400] loop4: detected capacity change from 0 to 128 [ 382.597142][T10400] affs: No valid root block on device loop4 [ 383.843129][T10431] loop4: detected capacity change from 0 to 128 [ 383.870548][T10431] affs: No valid root block on device loop4 [ 388.011673][T10475] loop3: detected capacity change from 0 to 128 [ 388.037104][T10475] affs: No valid root block on device loop3 [ 391.834548][T10523] loop1: detected capacity change from 0 to 128 [ 392.130467][T10523] affs: No valid root block on device loop1 [ 392.678906][T10538] can0: slcan on ttyS3. [ 392.999095][T10538] can0 (unregistered): slcan off ttyS3. [ 393.293806][T10552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1128'. [ 394.999435][T10553] can0: slcan on ttyS3. [ 395.095804][T10569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1132'. [ 395.130425][T10555] can0 (unregistered): slcan off ttyS3. [ 396.712261][T10581] infiniband syz0: set active [ 396.714285][T10581] infiniband syz0: added veth0_vlan [ 396.772920][T10581] RDS/IB: syz0: added [ 396.773773][T10581] smc: adding ib device syz0 with port count 1 [ 396.775194][T10581] smc: ib device syz0 port 1 has pnetid [ 397.896454][T10607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1145'. [ 399.852653][T10608] qrtr: Invalid version 0 [ 399.970436][T10622] loop2: detected capacity change from 0 to 256 [ 400.836434][T10643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1157'. [ 403.836648][T10663] can0: slcan on ttyS3. [ 404.409527][T10663] can0 (unregistered): slcan off ttyS3. [ 404.888549][T10681] loop2: detected capacity change from 0 to 256 [ 405.545810][T10683] can0: slcan on ttyS3. [ 406.688271][T10683] can0 (unregistered): slcan off ttyS3. [ 409.671173][T10725] can0: slcan on ttyS3. [ 410.536523][T10735] loop1: detected capacity change from 0 to 256 [ 411.776191][T10725] can0 (unregistered): slcan off ttyS3. [ 412.114751][T10743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.116809][T10743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.183550][T10750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1187'. [ 413.399578][T10758] can0: slcan on ttyS3. [ 413.889869][ T6468] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 413.911616][T10758] can0 (unregistered): slcan off ttyS3. [ 414.039385][ T6468] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.041615][ T6468] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 414.044393][ T6468] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 414.046455][ T6468] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.098012][ T6468] usb 1-1: config 0 descriptor?? [ 414.105209][ T6468] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 415.500681][T10781] can0: slcan on ttyS3. [ 415.612402][T10781] can0 (unregistered): slcan off ttyS3. [ 416.571825][T10791] can0: slcan on ttyS3. [ 417.060683][ T6502] usb 1-1: USB disconnect, device number 9 [ 417.069573][T10791] can0 (unregistered): slcan off ttyS3. [ 417.245413][T10799] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1199'. [ 417.339050][T10800] loop3: detected capacity change from 0 to 256 [ 420.769128][T10830] can0: slcan on ttyS3. [ 421.118805][T10830] can0 (unregistered): slcan off ttyS3. [ 422.386660][T10836] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1210'. [ 422.421106][T10848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1212'. [ 423.727286][T10854] netlink: 'syz.4.1211': attribute type 9 has an invalid length. [ 428.324524][T10877] can0: slcan on ttyS3. [ 428.851013][T10877] can0 (unregistered): slcan off ttyS3. [ 429.818110][T10886] slcan: can't register candev [ 429.926026][T10896] loop4: detected capacity change from 0 to 16 [ 429.935407][T10896] erofs (device loop4): mounted with root inode @ nid 36. [ 429.991010][T10890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1224'. [ 431.243118][T10908] can0: slcan on ttyS3. [ 431.838237][T10908] can0 (unregistered): slcan off ttyS3. [ 432.749276][T10918] block nbd3: shutting down sockets [ 433.120373][ T2353] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.121978][ T2353] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.696819][T10940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.712500][T10940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.732236][T10941] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1237'. [ 434.559577][ T6502] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 435.622347][ T6502] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.624547][ T6502] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 435.627551][ T6502] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 435.629824][ T6502] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.358554][ T6502] usb 1-1: config 0 descriptor?? [ 436.363314][ T6502] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 438.115701][ T6605] usb 1-1: USB disconnect, device number 10 [ 440.807017][T10993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1250'. [ 444.726827][T11022] can0: slcan on ttyS3. [ 445.436857][T11025] block nbd3: shutting down sockets [ 445.618419][T11022] can0 (unregistered): slcan off ttyS3. [ 445.775260][T11032] qrtr: Invalid version 0 [ 446.757409][T11041] qrtr: Invalid version 0 [ 448.235578][T11048] can0: slcan on ttyS3. [ 448.638965][T11048] can0 (unregistered): slcan off ttyS3. [ 448.750623][T11053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1266'. [ 451.378778][T11077] block nbd1: shutting down sockets [ 451.436244][T11083] loop2: detected capacity change from 0 to 16 [ 451.451920][T11083] erofs (device loop2): mounted with root inode @ nid 36. [ 451.761456][T11089] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 452.456401][T11093] loop3: detected capacity change from 0 to 128 [ 452.868821][T11093] affs: No valid root block on device loop3 [ 455.966896][T11118] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 461.445138][T11165] loop0: detected capacity change from 0 to 256 [ 464.488216][T11207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.495199][T11207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.154723][T11204] block nbd4: shutting down sockets [ 465.225415][T11211] binder: 11195:11211 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 465.229519][T11211] binder: 11211 RLIMIT_NICE not set [ 465.287467][T11216] binder: 11195:11216 got transaction to invalid handle, 1 [ 465.289099][T11216] binder: 11216:11195 cannot find target node [ 465.290280][T11216] binder: 11195:11216 transaction call to 0:0 failed 90/29201/-22, size 0-0 line 3151 [ 465.302880][T11216] binder: 11195:11216 ioctl 89f1 20000700 returned -22 [ 465.351392][T11201] loop1: detected capacity change from 0 to 40427 [ 465.363839][T11201] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1fffff [ 465.476508][T11201] F2FS-fs (loop1): invalid crc value [ 465.492116][ T8] binder: undelivered TRANSACTION_ERROR: 29201 [ 466.474198][T11201] F2FS-fs (loop1): Found nat_bits in checkpoint [ 466.503520][T11201] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 466.991342][T11228] syz.1.1306: attempt to access beyond end of device [ 466.991342][T11228] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 467.014954][T11228] syz.1.1306: attempt to access beyond end of device [ 467.014954][T11228] loop1: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 467.662855][ T6418] syz-executor: attempt to access beyond end of device [ 467.662855][ T6418] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 467.679771][ T6418] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 471.735303][T11264] can0: slcan on ttyS3. [ 472.218494][T11264] can0 (unregistered): slcan off ttyS3. [ 472.301068][T11271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.302921][T11271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.475943][T11274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.477873][T11274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.859426][T11286] loop0: detected capacity change from 0 to 16 [ 473.874245][T11286] erofs (device loop0): mounted with root inode @ nid 36. [ 474.212451][T11292] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 474.804680][T11297] loop0: detected capacity change from 0 to 16 [ 474.813232][T11297] erofs (device loop0): mounted with root inode @ nid 36. [ 475.124293][T11302] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 475.788480][T11304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.790368][T11304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.782898][T11317] block nbd0: shutting down sockets [ 478.120188][T11322] block nbd4: shutting down sockets [ 478.337828][T11331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.342766][T11331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.471568][T11360] loop3: detected capacity change from 0 to 16 [ 481.524431][T11360] erofs (device loop3): mounted with root inode @ nid 36. [ 481.856412][T11368] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 484.150489][T11383] block nbd0: shutting down sockets [ 484.788872][T11393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.790768][T11393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.128389][T11403] block nbd3: shutting down sockets [ 486.838245][T11413] input: syz0 as /devices/virtual/input/input61 [ 490.926428][T11458] input: syz0 as /devices/virtual/input/input62 [ 490.990209][T11466] loop4: detected capacity change from 0 to 256 [ 490.991972][T11466] msdos: Bad value for 'errors' [ 492.067023][T11472] can0: slcan on ttyS3. [ 492.710534][T11472] can0 (unregistered): slcan off ttyS3. [ 493.721334][T11492] loop4: detected capacity change from 0 to 512 [ 493.854819][T11492] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 493.856411][T11492] UDF-fs: Scanning with blocksize 512 failed [ 493.859583][T11492] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 493.861096][T11492] UDF-fs: Scanning with blocksize 1024 failed [ 493.862854][T11492] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 493.864523][T11492] UDF-fs: Scanning with blocksize 2048 failed [ 493.867136][T11492] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 493.878654][T11492] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 493.889552][T11488] loop1: detected capacity change from 0 to 40427 [ 493.918684][T11488] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1fffff [ 494.265559][T11488] F2FS-fs (loop1): invalid crc value [ 494.560886][T11488] F2FS-fs (loop1): Found nat_bits in checkpoint [ 494.588058][ T2353] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.595129][ T2353] ieee802154 phy1 wpan1: encryption failed: -22 [ 494.619118][T11488] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 495.221497][T11509] syz.1.1383: attempt to access beyond end of device [ 495.221497][T11509] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 495.649180][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 495.783961][T11507] input: syz0 as /devices/virtual/input/input63 [ 495.845898][T11509] syz.1.1383: attempt to access beyond end of device [ 495.845898][T11509] loop1: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 496.079540][ T6418] syz-executor: attempt to access beyond end of device [ 496.079540][ T6418] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 496.089690][ T6418] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 499.662097][T11552] loop3: detected capacity change from 0 to 128 [ 500.468294][T11552] affs: No valid root block on device loop3 [ 503.444156][T11572] input: syz0 as /devices/virtual/input/input64 [ 506.804833][T11617] input: syz0 as /devices/virtual/input/input65 [ 508.749709][ T27] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 509.690669][T11654] block nbd1: shutting down sockets [ 509.703646][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 509.705757][ T27] usb 1-1: not running at top speed; connect to a high speed hub [ 509.708177][ T27] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 509.710387][ T27] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 509.713697][ T27] usb 1-1: New USB device found, idVendor=0506, idProduct=11f8, bcdDevice=bf.a0 [ 509.715738][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.717345][ T27] usb 1-1: Product: syz [ 509.722488][ T27] usb 1-1: Manufacturer: syz [ 509.723478][ T27] usb 1-1: SerialNumber: syz [ 511.005805][ T2260] usb 1-1: USB disconnect, device number 11 [ 511.121017][T11667] loop2: detected capacity change from 0 to 16 [ 511.144313][T11667] erofs (device loop2): too large lz4 pclusterblks 16832 [ 511.213477][T11663] input: syz0 as /devices/virtual/input/input67 [ 511.249640][T11676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1434'. [ 512.524091][ T5987] ------------[ cut here ]------------ [ 512.525380][ T5987] WARNING: CPU: 1 PID: 5987 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0xf4/0x1e8 [ 512.527441][ T5987] Modules linked in: [ 512.528232][ T5987] CPU: 1 UID: 0 PID: 5987 Comm: kworker/u9:1 Not tainted 6.13.0-rc2-syzkaller-g2e7aff49b5da #0 [ 512.530474][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 512.532656][ T5987] Workqueue: hci4 hci_conn_timeout [ 512.533750][ T5987] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 512.535543][ T5987] pc : hci_conn_timeout+0xf4/0x1e8 [ 512.536613][ T5987] lr : hci_conn_timeout+0xf4/0x1e8 [ 512.537683][ T5987] sp : ffff80009dce7ad0 [ 512.538618][ T5987] x29: ffff80009dce7ad0 x28: ffff80008f97d600 x27: 1fffe0001adc2b5a [ 512.540267][ T5987] x26: ffff0000d6e5ac08 x25: ffff0000d6e15ec4 x24: dfff800000000000 [ 512.541992][ T5987] x23: ffff0000d6e15ac0 x22: dfff800000000000 x21: 00000000ffffffff [ 512.543804][ T5987] x20: ffff0000d0d388e8 x19: ffff0000d0d38000 x18: 1fffe000366c5e7e [ 512.545486][ T5987] x17: ffff80008f97d000 x16: ffff800080699390 x15: 0000000000000001 [ 512.547147][ T5987] x14: 1fffe0001a1a7002 x13: 0000000000000000 x12: 0000000000000000 [ 512.548759][ T5987] x11: ffff60001a1a7003 x10: 0000000000ff0100 x9 : 0000000000000000 [ 512.550432][ T5987] x8 : ffff0000d6e15ac0 x7 : ffff800080373828 x6 : 0000000000000000 [ 512.552075][ T5987] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80008a7ca4b8 [ 512.553780][ T5987] x2 : 0000000000000000 x1 : 00000000ffffffff x0 : 0000000000000000 [ 512.555641][ T5987] Call trace: [ 512.556274][ T5987] hci_conn_timeout+0xf4/0x1e8 (P) [ 512.557380][ T5987] hci_conn_timeout+0xf4/0x1e8 (L) [ 512.558485][ T5987] process_one_work+0x7a8/0x15cc [ 512.559516][ T5987] worker_thread+0x97c/0xeec [ 512.560495][ T5987] kthread+0x288/0x310 [ 512.561362][ T5987] ret_from_fork+0x10/0x20 [ 512.562299][ T5987] irq event stamp: 11102 [ 512.563233][ T5987] hardirqs last enabled at (11101): [] _raw_spin_unlock_irq+0x30/0x80 [ 512.565271][ T5987] hardirqs last disabled at (11102): [] el1_dbg+0x24/0x80 [ 512.567052][ T5987] softirqs last enabled at (10496): [] handle_softirqs+0xb44/0xd34 [ 512.569096][ T5987] softirqs last disabled at (10467): [] __do_softirq+0x14/0x20 [ 512.571145][ T5987] ---[ end trace 0000000000000000 ]--- [ 512.789558][T11693] infiniband syz2: set active [ 512.793114][T11693] infiniband syz0: set active