last executing test programs: 52.376779744s ago: executing program 5 (id=148): dup2(0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = inotify_init() r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) r2 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000048040)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="63296f62bd5b16d7a496d62cd8bb810be9dcb97471decb814774da3acbc074f7fd14ac0b95ee52ab5b4080813a67b324e319588e5c96f7bb2f5261048f27a7bd4056d2fdf0878fa63ec2cc32fdb9efb974ec513da9c8ffa552cfb6451fffda7e36b1fb73bfbabfe6616710209326b6ff8549db3fe4b173a368e89727fa374045424b3dddbecbc07f8d660f83cfd622fab6bf312a460cfcd594d51a0ea993a9e582be46fc6689158f1a0cb42c57983a94415bd1bb28cafca5b4a35697ab869a401f3940ec7324e3576a3d24c00f", 0xcd}, {&(0x7f00000003c0)="d839e796be2e73f65b4fd8d6bf9d", 0xe}], 0x2}}], 0x1, 0x480e0) tkill(r2, 0xb) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) execveat(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1000) inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) kcmp(r2, r2, 0x4, r1, r3) syz_usb_connect(0x3, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000229639010861a2d754d2d0102030109021b000100000000090401"], 0x0) 48.573079577s ago: executing program 5 (id=164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet(0x2, 0xa, 0x8) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0x3}]}}}}}}, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000440)={r2, 0x2000, {0x0, 0x2000, 0x0, 0x8, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a5e77a68e174f000300ffffffffff0fe200"}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) 46.412091052s ago: executing program 4 (id=174): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 45.686047078s ago: executing program 5 (id=175): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='thermal_zone_trip\x00'}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3e, 0xd1, 0x14, 0x10, 0x16ca, 0x1502, 0x5c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf9, 0x2, 0x0, 0xd2, 0x2c, 0xa3}}]}}]}}, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x3, 0xffffffffffffffff, 0x3, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) fcntl$setflags(r2, 0x2, 0x1) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) close(0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f28, 0x200, 0x7cc1, 0x3ff, 0x2, 0x6dc3, 0xfff, 0x1838, 0x5, 0x3f9, 0x802, 0xc42, 0x1, 0x3, 0x9, 0xe1cb, 0x5, 0x3, 0x400000, 0x395, 0x8000008c, 0xfffffffe, 0x9, 0xfffffff5, 0x1, 0x3, 0xab99, 0x2, 0x7, 0x2, 0xff]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 45.275983639s ago: executing program 4 (id=177): mkdir(0x0, 0x0) chdir(0x0) symlink(&(0x7f00000012c0)='.\x00', &(0x7f0000001300)='./bus\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000000c0)=@hopopts={0x6c}, 0x8) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) listen(r0, 0x100101) accept4(r0, 0x0, 0x0, 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 41.361863375s ago: executing program 4 (id=183): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESCSIZE(r1, 0x4004480d, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xfffff6bd}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r4, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @remote}, 0x1c) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r6, 0x6a, 0x2, 0x0, 0xffffffffffffff33) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="0000000000140000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b609000000000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff570000000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000004d9800000000000056080000000000008500000007000000b700000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) 40.527362308s ago: executing program 5 (id=185): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000080)) 40.251250175s ago: executing program 5 (id=187): socketpair(0xf, 0x2, 0x1, 0x0) io_uring_setup(0x1a8, &(0x7f0000000000)={0x0, 0xfca0, 0x2, 0x0, 0x22e}) syz_emit_vhci(0x0, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) 38.779324465s ago: executing program 5 (id=190): openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000980)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0xcdf, 0xf}) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x804000, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000340)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) 36.940837683s ago: executing program 4 (id=193): openat$sysfs(0xffffffffffffff9c, 0x0, 0x181000, 0x21) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff, 0x2}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f00000011c0)=[{&(0x7f00000000c0)='F', 0x1}], 0x1) 34.01340455s ago: executing program 4 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 31.749217828s ago: executing program 4 (id=203): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af83, &(0x7f00000003c0)={0x1}) 23.460246325s ago: executing program 32 (id=190): openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000980)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0xcdf, 0xf}) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x804000, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000340)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) 16.584547472s ago: executing program 33 (id=203): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af83, &(0x7f00000003c0)={0x1}) 7.356822923s ago: executing program 3 (id=245): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000f"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x50) 6.580653105s ago: executing program 0 (id=247): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='sys_exit\x00'}, 0x18) inotify_init() 6.213062053s ago: executing program 0 (id=249): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r0, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setreuid(r1, r1) getpriority(0x2, r2) dup(0xffffffffffffffff) setfsuid(0x0) 6.211984637s ago: executing program 3 (id=250): r0 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) socket(0x10, 0x803, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r0, 0x6) r6 = accept4(r0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, 0x0, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40030108}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x30, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008800}, 0x24048000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000003060104000000000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.629000712s ago: executing program 0 (id=253): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_UNIMAP(r0, 0x4b3c, 0x0) 4.533280005s ago: executing program 3 (id=254): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) 4.3222756s ago: executing program 1 (id=255): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000000c0)={0x0, 0x4}) socket$inet6(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3, 0x0, 0x1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r4], 0x3c}}, 0x10) setresuid(0x0, 0xee00, 0x0) pipe(0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 4.236868505s ago: executing program 0 (id=256): r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x400017e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000026b000/0x1000)=nil, 0x1000, 0x64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x80, 0x0) 4.189705465s ago: executing program 3 (id=257): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) socket$inet6_sctp(0xa, 0x801, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x6, &(0x7f0000000280)=[{0x9, 0x6, 0x6, 0x8}, {0x1, 0x6, 0x6, 0x1f9e}, {0x0, 0x4, 0x1, 0x1}, {0x8000, 0x9, 0x1, 0x2}, {0x200, 0x67, 0x0, 0x3}, {0x8000, 0x4, 0xf, 0x1000}]}) membarrier(0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc}, 0x94) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="080025bd7000fddbdf2527000000060006003fff00000c0005000200aaaaaaaaaaaaa4001200e474ffded096ae5acb29c7ce0aded700a1a13ab3fd7b7dd3c7d4f0a9efff19d8060006000000000005002e000200000008002c000500000005002b0001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r6}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[], [], 0x2f}) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, 0x0, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x5af703dbb2383689, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) 2.915789676s ago: executing program 1 (id=260): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) 2.62902293s ago: executing program 1 (id=262): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000006c0)={'erspan0\x00', 0x0, 0x7800, 0x1, 0x40, 0x800, {{0x7, 0x4, 0x3, 0x10, 0x1c, 0x64, 0x0, 0x4, 0x29, 0x0, @local, @private=0xa010100, {[@rr={0x7, 0x3, 0x58}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103fcffffff000000002b0000000c0006"], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.269044387s ago: executing program 1 (id=265): prlimit64(0x0, 0xe, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0xa) getpeername(r0, 0x0, &(0x7f00000000c0)) 2.176255129s ago: executing program 2 (id=266): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 2.065305303s ago: executing program 2 (id=267): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) 1.870821564s ago: executing program 2 (id=268): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setuid(0x0) sendmsg$IPSET_CMD_TYPE(r0, 0x0, 0x4000034) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.760187256s ago: executing program 3 (id=269): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0xc, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x10) close(r6) 576.899554ms ago: executing program 2 (id=270): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') 576.707212ms ago: executing program 1 (id=271): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='sys_exit\x00'}, 0x18) inotify_init() 454.445395ms ago: executing program 3 (id=272): r0 = socket$netlink(0x10, 0x3, 0x0) getpid() r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) clock_adjtime(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x884) 309.023297ms ago: executing program 2 (id=273): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c000200080000000000000014000100ff02"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 224.720011ms ago: executing program 1 (id=274): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x8000, 0x2}) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) read$eventfd(r2, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r7, 0x2) dup3(r7, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f000000e280), 0x58a, 0x42, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_ADDRESS={0xa, 0x1, @random="900f249e035b"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 131.572669ms ago: executing program 0 (id=275): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204081, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) 87.332873ms ago: executing program 2 (id=276): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00'}, 0x18) ioprio_set$pid(0x2, r0, 0x4004) 0s ago: executing program 0 (id=277): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts. [ 85.568013][ T5820] cgroup: Unknown subsys name 'net' [ 85.718738][ T5820] cgroup: Unknown subsys name 'cpuset' [ 85.728142][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.367261][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.378933][ T5151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.405914][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.424648][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.432232][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.445529][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.453965][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.463658][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.464239][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.471200][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.484986][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.492577][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.500833][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.508472][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.509066][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.523632][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.531401][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.540905][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.542779][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.555273][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.557533][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.571672][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.579298][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.586961][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.587000][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.601522][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.612122][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.615120][ T5859] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.622849][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.630299][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.651669][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.197743][ T869] cfg80211: failed to load regulatory.db [ 91.512422][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 91.614485][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 91.685471][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 91.794279][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 91.805837][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 91.936387][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.944388][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.951714][ T5847] bridge_slave_0: entered allmulticast mode [ 91.959391][ T5847] bridge_slave_0: entered promiscuous mode [ 92.030536][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.037831][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.045134][ T5847] bridge_slave_1: entered allmulticast mode [ 92.052544][ T5847] bridge_slave_1: entered promiscuous mode [ 92.079436][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 92.192109][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.199380][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.206953][ T5839] bridge_slave_0: entered allmulticast mode [ 92.214589][ T5839] bridge_slave_0: entered promiscuous mode [ 92.263714][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.287433][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.295281][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.302483][ T5839] bridge_slave_1: entered allmulticast mode [ 92.310211][ T5839] bridge_slave_1: entered promiscuous mode [ 92.362303][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.371599][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.379543][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.386848][ T5836] bridge_slave_0: entered allmulticast mode [ 92.395182][ T5836] bridge_slave_0: entered promiscuous mode [ 92.420996][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.428309][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.435852][ T5846] bridge_slave_0: entered allmulticast mode [ 92.443286][ T5846] bridge_slave_0: entered promiscuous mode [ 92.451161][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.459147][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.466713][ T5835] bridge_slave_0: entered allmulticast mode [ 92.474365][ T5835] bridge_slave_0: entered promiscuous mode [ 92.496407][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.503551][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.511131][ T5836] bridge_slave_1: entered allmulticast mode [ 92.519080][ T5836] bridge_slave_1: entered promiscuous mode [ 92.559828][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.567199][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.575047][ T5846] bridge_slave_1: entered allmulticast mode [ 92.582429][ T5846] bridge_slave_1: entered promiscuous mode [ 92.589408][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.596620][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.603749][ T5835] bridge_slave_1: entered allmulticast mode [ 92.611271][ T5835] bridge_slave_1: entered promiscuous mode [ 92.635410][ T5845] Bluetooth: hci0: command tx timeout [ 92.635414][ T5859] Bluetooth: hci1: command tx timeout [ 92.660257][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.705341][ T5847] team0: Port device team_slave_0 added [ 92.714456][ T5859] Bluetooth: hci3: command tx timeout [ 92.720054][ T5859] Bluetooth: hci5: command tx timeout [ 92.720559][ T5845] Bluetooth: hci2: command tx timeout [ 92.726573][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.731109][ T5151] Bluetooth: hci4: command tx timeout [ 92.745249][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.798030][ T5847] team0: Port device team_slave_1 added [ 92.806858][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.847207][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.860213][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.913888][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.921352][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.928772][ T5837] bridge_slave_0: entered allmulticast mode [ 92.936486][ T5837] bridge_slave_0: entered promiscuous mode [ 92.947292][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.959125][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.997269][ T5839] team0: Port device team_slave_0 added [ 93.003450][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.011290][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.018750][ T5837] bridge_slave_1: entered allmulticast mode [ 93.026693][ T5837] bridge_slave_1: entered promiscuous mode [ 93.062719][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.069987][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.096242][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.110408][ T5836] team0: Port device team_slave_0 added [ 93.118907][ T5839] team0: Port device team_slave_1 added [ 93.166060][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.173034][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.199503][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.213292][ T5836] team0: Port device team_slave_1 added [ 93.247959][ T5846] team0: Port device team_slave_0 added [ 93.256105][ T5835] team0: Port device team_slave_0 added [ 93.301281][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.312649][ T5846] team0: Port device team_slave_1 added [ 93.320307][ T5835] team0: Port device team_slave_1 added [ 93.341475][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.349127][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.375711][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.389500][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.426722][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.433673][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.460273][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.485294][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.492265][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.518411][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.586914][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.593874][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.620663][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.653883][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.661314][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.687971][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.700093][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.707461][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.733464][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.768821][ T5837] team0: Port device team_slave_0 added [ 93.779543][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.786700][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.812993][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.825194][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.832140][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.858511][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.885128][ T5847] hsr_slave_0: entered promiscuous mode [ 93.891623][ T5847] hsr_slave_1: entered promiscuous mode [ 93.900593][ T5837] team0: Port device team_slave_1 added [ 94.035036][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.042033][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.068417][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.086408][ T5836] hsr_slave_0: entered promiscuous mode [ 94.092891][ T5836] hsr_slave_1: entered promiscuous mode [ 94.099251][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 94.105376][ T5836] Cannot create hsr debugfs directory [ 94.116759][ T5839] hsr_slave_0: entered promiscuous mode [ 94.123235][ T5839] hsr_slave_1: entered promiscuous mode [ 94.129934][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 94.135694][ T5839] Cannot create hsr debugfs directory [ 94.179329][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.186950][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.213082][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.232563][ T5835] hsr_slave_0: entered promiscuous mode [ 94.241212][ T5835] hsr_slave_1: entered promiscuous mode [ 94.247728][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 94.253472][ T5835] Cannot create hsr debugfs directory [ 94.363448][ T5846] hsr_slave_0: entered promiscuous mode [ 94.370811][ T5846] hsr_slave_1: entered promiscuous mode [ 94.377497][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 94.383223][ T5846] Cannot create hsr debugfs directory [ 94.612206][ T5837] hsr_slave_0: entered promiscuous mode [ 94.618814][ T5837] hsr_slave_1: entered promiscuous mode [ 94.626078][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 94.631795][ T5837] Cannot create hsr debugfs directory [ 94.714431][ T5845] Bluetooth: hci1: command tx timeout [ 94.719935][ T5151] Bluetooth: hci0: command tx timeout [ 94.800137][ T5858] Bluetooth: hci5: command tx timeout [ 94.800358][ T5859] Bluetooth: hci3: command tx timeout [ 94.806284][ T5845] Bluetooth: hci2: command tx timeout [ 94.816554][ T5151] Bluetooth: hci4: command tx timeout [ 95.156598][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.187114][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.210393][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.221932][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.267818][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.279568][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.299873][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.312037][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.392750][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.407207][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.419899][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.430353][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.554463][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.574035][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.612762][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.630197][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.711768][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.733756][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.767267][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.778832][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.846899][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.885801][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.920740][ T5835] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.941172][ T5835] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.955548][ T5835] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.979173][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.986387][ T5835] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.041362][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.073355][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.087902][ T3952] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.095315][ T3952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.131422][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.155973][ T3952] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.163114][ T3952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.173734][ T3952] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.180877][ T3952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.190970][ T3952] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.198073][ T3952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.226639][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.233766][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.281497][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.288653][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.318693][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.373109][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.420152][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.427320][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.473902][ T4478] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.481060][ T4478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.498096][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.569353][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.631305][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.638511][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.668305][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.675513][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.765425][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.794362][ T5151] Bluetooth: hci1: command tx timeout [ 96.799888][ T5845] Bluetooth: hci0: command tx timeout [ 96.885534][ T5845] Bluetooth: hci3: command tx timeout [ 96.886122][ T5858] Bluetooth: hci4: command tx timeout [ 96.891115][ T5859] Bluetooth: hci5: command tx timeout [ 96.897355][ T5151] Bluetooth: hci2: command tx timeout [ 96.975832][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.022164][ T3952] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.029447][ T3952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.097034][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.149812][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.157013][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.262075][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.339345][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.529410][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.569985][ T5847] veth0_vlan: entered promiscuous mode [ 97.587624][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.609868][ T5839] veth0_vlan: entered promiscuous mode [ 97.662943][ T5847] veth1_vlan: entered promiscuous mode [ 97.715874][ T5839] veth1_vlan: entered promiscuous mode [ 97.838916][ T5837] veth0_vlan: entered promiscuous mode [ 97.849123][ T5847] veth0_macvtap: entered promiscuous mode [ 97.875221][ T5846] veth0_vlan: entered promiscuous mode [ 97.888868][ T5847] veth1_macvtap: entered promiscuous mode [ 97.910577][ T5837] veth1_vlan: entered promiscuous mode [ 97.942447][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.960613][ T5846] veth1_vlan: entered promiscuous mode [ 97.986829][ T5836] veth0_vlan: entered promiscuous mode [ 97.993182][ T5839] veth0_macvtap: entered promiscuous mode [ 98.023205][ T5839] veth1_macvtap: entered promiscuous mode [ 98.041588][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.072186][ T5836] veth1_vlan: entered promiscuous mode [ 98.083967][ T5837] veth0_macvtap: entered promiscuous mode [ 98.099630][ T5837] veth1_macvtap: entered promiscuous mode [ 98.111456][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.153896][ T3724] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.166974][ T3724] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.195807][ T3724] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.210627][ T3724] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.225042][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.246772][ T5846] veth0_macvtap: entered promiscuous mode [ 98.268355][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.285883][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.308408][ T5846] veth1_macvtap: entered promiscuous mode [ 98.351059][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.378189][ T5836] veth0_macvtap: entered promiscuous mode [ 98.398981][ T1336] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.412399][ T1336] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.428443][ T5836] veth1_macvtap: entered promiscuous mode [ 98.447093][ T1336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.456851][ T1336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.483052][ T1336] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.492403][ T1336] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.510550][ T1336] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.519984][ T1336] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.533350][ T3724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.542760][ T3724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.573330][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.633370][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.640427][ T3952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.657238][ T3952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.680802][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.733845][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.751721][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.762933][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.788604][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.791423][ T3724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.808638][ T3724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.815605][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.866614][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.885259][ T5858] Bluetooth: hci1: command tx timeout [ 98.890747][ T5151] Bluetooth: hci0: command tx timeout [ 98.910672][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.933771][ T5835] veth0_vlan: entered promiscuous mode [ 98.954375][ T5858] Bluetooth: hci4: command tx timeout [ 98.954992][ T5845] Bluetooth: hci3: command tx timeout [ 98.959828][ T5151] Bluetooth: hci2: command tx timeout [ 98.965244][ T5859] Bluetooth: hci5: command tx timeout [ 98.974625][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.985006][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.009089][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.094444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.149056][ T5835] veth1_vlan: entered promiscuous mode [ 99.185826][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.194523][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.281036][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.299820][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.355304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 99.479375][ T4478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.498389][ T4478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.589348][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.636704][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.671330][ T3952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.731615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.811444][ T3952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.955724][ T5988] Zero length message leads to an empty skb [ 100.060826][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.061345][ T5835] veth0_macvtap: entered promiscuous mode [ 100.094468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 100.104188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 100.174812][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.213861][ T4478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.225078][ T4478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.266764][ T5835] veth1_macvtap: entered promiscuous mode [ 100.364671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.373471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.382160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.394378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 100.480974][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.502095][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.663577][ T1161] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.725345][ T1161] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.795472][ T3724] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.859665][ T3724] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.165186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.236904][ T6005] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 101.752392][ T6005] loop6: detected capacity change from 0 to 524287487 [ 101.803313][ T6005] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.811538][ T6005] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.820803][ T6005] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.828947][ T6005] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.837634][ T6005] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.845618][ T6005] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.853729][ T6005] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.861858][ T6005] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.869843][ T6005] ldm_validate_partition_table(): Disk read failed. [ 101.876635][ T6005] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.885753][ T6005] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.895450][ T6005] Dev loop6: unable to read RDB block 0 [ 101.902388][ T6005] loop6: unable to read partition table [ 101.908389][ T6005] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 102.228520][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.302389][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.527138][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.556913][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.017025][ T30] audit: type=1400 audit(1764749864.223:2): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="]" pid=6014 comm="syz.1.7" [ 103.304463][ T6027] tipc: Started in network mode [ 103.309590][ T6027] tipc: Node identity , cluster identity 4711 [ 103.445011][ T6027] tipc: Failed to obtain node identity [ 103.549583][ T6027] tipc: Enabling of bearer rejected, failed to enable media [ 104.057787][ T6027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.047221][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 108.503569][ T30] audit: type=1400 audit(1764749869.723:3): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="]" pid=6062 comm="syz.3.15" [ 108.808916][ T6072] sctp: [Deprecated]: syz.1.17 (pid 6072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.808916][ T6072] Use struct sctp_sack_info instead [ 109.525293][ T57] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.715018][ T57] usb 2-1: Using ep0 maxpacket: 8 [ 109.743883][ T57] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 109.763535][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.831819][ T57] pvrusb2: Hardware description: Terratec Grabster AV400 [ 109.847807][ T57] pvrusb2: ********** [ 109.851832][ T57] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 109.862087][ T57] pvrusb2: Important functionality might not be entirely working. [ 109.882044][ T57] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 109.922600][ T57] pvrusb2: ********** [ 110.033393][ T2341] pvrusb2: Invalid write control endpoint [ 110.189393][ T2341] pvrusb2: Invalid write control endpoint [ 110.397427][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 110.453729][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 110.624798][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 110.636259][ T2341] pvrusb2: Device being rendered inoperable [ 110.653672][ T6077] pvrusb2: Attempted to execute control transfer when device not ok [ 110.673957][ T6095] pvrusb2: Attempted to execute control transfer when device not ok [ 110.689749][ T57] usb 2-1: USB disconnect, device number 2 [ 110.747751][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 110.766717][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 110.818728][ T2341] pvrusb2: Attached sub-driver cx25840 [ 110.832526][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 110.847568][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 111.209949][ T6098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.24'. [ 111.233453][ T6098] vcan0: entered promiscuous mode [ 111.756660][ T6106] loop6: detected capacity change from 0 to 524287487 [ 111.766253][ T6106] buffer_io_error: 6 callbacks suppressed [ 111.766280][ T6106] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.780620][ T6106] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.788938][ T6106] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.797034][ T6106] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.805134][ T6106] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.813298][ T6106] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.823077][ T6106] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.833826][ T6106] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.842231][ T6106] ldm_validate_partition_table(): Disk read failed. [ 111.849193][ T6106] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.857384][ T6106] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.865791][ T6106] Dev loop6: unable to read RDB block 0 [ 111.872425][ T6106] loop6: unable to read partition table [ 111.878603][ T6106] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 114.716095][ T6120] netlink: 56 bytes leftover after parsing attributes in process `syz.4.30'. [ 119.871221][ T6167] netlink: 'syz.0.39': attribute type 1 has an invalid length. [ 120.199926][ T6167] bond1 (unregistering): Released all slaves [ 120.815569][ T6180] fuse: Unknown parameter '0x0000000000000003' [ 121.162048][ T6188] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.179656][ T6188] xt_socket: unknown flags 0x50 [ 122.109807][ T6193] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.349600][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 123.370082][ T6210] openvswitch: netlink: Message has 8 unknown bytes. [ 123.392466][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.5.50'. [ 123.417758][ T6211] openvswitch: netlink: Message has 8 unknown bytes. [ 124.829632][ T6222] loop6: detected capacity change from 0 to 524287487 [ 124.838520][ T6222] buffer_io_error: 7 callbacks suppressed [ 124.838547][ T6222] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.852724][ T6222] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.860902][ T6222] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.869005][ T6222] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.877547][ T6222] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.898103][ T6222] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.906261][ T6222] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.914445][ T6222] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.923484][ T6222] ldm_validate_partition_table(): Disk read failed. [ 124.931016][ T6222] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.939245][ T6222] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.947699][ T6222] Dev loop6: unable to read RDB block 0 [ 124.953810][ T6222] loop6: unable to read partition table [ 124.959974][ T6222] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 128.468844][ T6241] trusted_key: encrypted_key: key user:syz not found [ 129.715059][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 129.897152][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 129.907206][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.961826][ T10] usb 4-1: config 0 descriptor?? [ 130.020306][ T10] cp210x 4-1:0.0: cp210x converter detected [ 130.647299][ T6247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.684774][ T6247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.778482][ T10] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 130.787744][ T10] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 130.842780][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 130.896017][ T10] usb 4-1: USB disconnect, device number 2 [ 130.923897][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 130.970948][ T10] cp210x 4-1:0.0: device disconnected [ 132.652699][ T5849] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.107604][ T5849] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 134.188514][ T6285] binder_alloc: 6277: binder_alloc_buf, no vma [ 134.644198][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.653984][ T5849] usb 2-1: Product: syz [ 134.766409][ T5849] usb 2-1: Manufacturer: syz [ 134.771160][ T5849] usb 2-1: SerialNumber: syz [ 134.835234][ T5849] usb 2-1: config 0 descriptor?? [ 134.894674][ T5849] usb 2-1: can't set config #0, error -71 [ 134.924898][ T5849] usb 2-1: USB disconnect, device number 3 [ 136.656235][ T6303] loop3: detected capacity change from 0 to 16 [ 136.759605][ T6303] erofs (device loop3): invalid checksum 0xa623e400, 0xc32427af expected [ 136.771664][ T6013] udevd[6013]: incorrect erofs checksum on /dev/loop3 [ 137.019432][ T6013] udevd[6013]: incorrect erofs checksum on /dev/loop3 [ 137.285113][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.291759][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.630992][ T6328] tipc: Started in network mode [ 140.674306][ T6328] tipc: Node identity , cluster identity 4711 [ 140.734423][ T6328] tipc: Failed to obtain node identity [ 140.872847][ T6328] tipc: Enabling of bearer rejected, failed to enable media [ 140.876718][ T6330] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.955835][ T6143] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 141.835306][ T6336] xt_socket: unknown flags 0x50 [ 141.965252][ T6337] binder_alloc: 6329: binder_alloc_buf, no vma [ 142.756056][ T6143] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 142.779499][ T6143] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.970351][ T6143] usb 6-1: config 0 descriptor?? [ 142.990140][ T6143] cp210x 6-1:0.0: cp210x converter detected [ 143.805801][ T6143] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 143.819957][ T6143] cp210x 6-1:0.0: querying part number failed [ 143.898461][ T6143] usb 6-1: cp210x converter now attached to ttyUSB0 [ 143.908380][ T6143] usb 6-1: USB disconnect, device number 2 [ 143.918641][ T6143] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 143.927228][ T6143] cp210x 6-1:0.0: device disconnected [ 144.284413][ T6349] tipc: Started in network mode [ 144.289290][ T6349] tipc: Node identity , cluster identity 4711 [ 144.303169][ T6349] tipc: Failed to obtain node identity [ 144.336717][ T6349] tipc: Enabling of bearer rejected, failed to enable media [ 144.351333][ T6349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.917298][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'. [ 144.982204][ T6365] openvswitch: netlink: Message has 8 unknown bytes. [ 148.755162][ T6386] trusted_key: encrypted_key: key user:syz not found [ 149.855529][ T6392] binder_alloc: 6383: binder_alloc_buf, no vma [ 150.947021][ T6339] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 151.019090][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 151.038313][ T6402] openvswitch: netlink: Message has 8 unknown bytes. [ 151.181412][ T6339] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 151.203028][ T6339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.264355][ T6338] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 151.272567][ T6339] usb 6-1: config 0 descriptor?? [ 151.310380][ T6339] cp210x 6-1:0.0: cp210x converter detected [ 151.462226][ T6338] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 151.491692][ T6338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.527252][ T6338] usb 5-1: Product: syz [ 151.554349][ T6338] usb 5-1: Manufacturer: syz [ 151.558969][ T6338] usb 5-1: SerialNumber: syz [ 151.838843][ T6338] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 151.895647][ T6338] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 151.924690][ T6338] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 151.935362][ T6396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.957004][ T6396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.096482][ T6338] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 152.109977][ T6339] cp210x 6-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 152.125909][ T6338] usb 5-1: USB disconnect, device number 2 [ 152.156645][ T6339] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 152.297955][ T6423] fuse: Invalid rootmode [ 152.306556][ T6339] usb 6-1: cp210x converter now attached to ttyUSB0 [ 152.356037][ T6339] usb 6-1: USB disconnect, device number 3 [ 152.436777][ T6339] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 152.596004][ T6339] cp210x 6-1:0.0: device disconnected [ 152.631829][ T6428] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.178771][ T6506] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 163.555561][ T57] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 163.617482][ T5942] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 163.724582][ T57] usb 1-1: Using ep0 maxpacket: 8 [ 163.775925][ T57] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.794228][ T57] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.803973][ T57] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.929865][ T5849] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 164.275221][ T5849] usb 5-1: Using ep0 maxpacket: 16 [ 164.404919][ T57] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.418145][ T57] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.427505][ T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.436885][ T5942] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.451799][ T5849] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 164.467468][ T5849] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.478700][ T5849] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.490340][ T5849] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.494251][ T5942] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.509885][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.530641][ T5849] usb 5-1: Product: syz [ 164.542415][ T5849] usb 5-1: Manufacturer: syz [ 164.556796][ T5942] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.561294][ T5849] usb 5-1: SerialNumber: syz [ 164.723271][ T57] usb 1-1: GET_CAPABILITIES returned 0 [ 164.734688][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.744224][ T57] usbtmc 1-1:16.0: can't read capabilities [ 165.054153][ T5849] usb 5-1: 0:2 : does not exist [ 165.235304][ T57] usb 1-1: USB disconnect, device number 2 [ 165.365750][ T6351] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 165.419934][ T5942] usb 3-1: usb_control_msg returned -32 [ 165.458894][ T5942] usbtmc 3-1:16.0: can't read capabilities [ 165.862163][ T6551] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 165.864371][ T6351] usb 6-1: Using ep0 maxpacket: 16 [ 165.870612][ T5942] usb 3-1: USB disconnect, device number 2 [ 165.876390][ T6351] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.340397][ T6351] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.373456][ T6351] usb 6-1: config 0 has no interface number 0 [ 166.396962][ T6351] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 166.408467][ T6351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.417396][ T6351] usb 6-1: Product: syz [ 166.594795][ T5849] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 166.614319][ T6351] usb 6-1: Manufacturer: syz [ 166.620089][ T6351] usb 6-1: SerialNumber: syz [ 166.669477][ T6351] usb 6-1: config 0 descriptor?? [ 166.699346][ T6351] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 166.724782][ T5849] usb 5-1: USB disconnect, device number 3 [ 166.768350][ T6351] snd-usb-audio 6-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 166.863798][ T6414] udevd[6414]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 166.952511][ T57] usb 6-1: USB disconnect, device number 4 [ 167.455178][ T6576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.685696][ T6594] loop6: detected capacity change from 0 to 524287999 [ 168.703488][ T6594] buffer_io_error: 7 callbacks suppressed [ 168.703506][ T6594] Buffer I/O error on dev loop6, logical block 0, async page read [ 168.908177][ T6594] Buffer I/O error on dev loop6, logical block 0, async page read [ 168.941006][ T6599] team0: Device xfrm1 is of different type [ 169.047162][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 169.073554][ T6605] vivid-002: disconnect [ 169.080815][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.168'. [ 169.201989][ T6594] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.390433][ T6594] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.434644][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 169.641201][ T6597] vivid-002: reconnect [ 169.694071][ T6594] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.702550][ T6594] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.717931][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 169.776253][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.804419][ T6594] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.842090][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.860744][ T6594] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.921091][ T6594] ldm_validate_partition_table(): Disk read failed. [ 169.941055][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.969642][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.974294][ T6594] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.986534][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 170.034330][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.041861][ T6594] Buffer I/O error on dev loop6, logical block 0, async page read [ 170.063492][ T6612] netlink: 80 bytes leftover after parsing attributes in process `syz.3.171'. [ 170.072344][ T6594] Dev loop6: unable to read RDB block 0 [ 170.324351][ T6594] loop6: unable to read partition table [ 170.406926][ T6594] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 170.672793][ T6013] ldm_validate_partition_table(): Disk read failed. [ 170.682596][ T6013] Dev loop6: unable to read RDB block 0 [ 171.071695][ T6624] usbtmc 1-1:16.0: simple usb_control_msg returned 0 [ 171.111334][ T6622] warning: `syz.3.171' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 171.246213][ T6013] loop6: unable to read partition table [ 171.273958][ T5201] ldm_validate_partition_table(): Disk read failed. [ 171.282929][ T6338] usb 1-1: USB disconnect, device number 3 [ 171.296845][ T5201] Dev loop6: unable to read RDB block 0 [ 171.325407][ T5201] loop6: unable to read partition table [ 172.002324][ T57] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 173.414177][ T57] usb 6-1: Using ep0 maxpacket: 16 [ 173.437008][ T57] usb 6-1: config 0 has an invalid interface number: 249 but max is 0 [ 173.512567][ T57] usb 6-1: config 0 has no interface number 0 [ 173.527040][ T57] usb 6-1: config 0 interface 249 has no altsetting 0 [ 173.569040][ T57] usb 6-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice= 5.c1 [ 173.578489][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.624585][ T57] usb 6-1: Product: syz [ 173.811229][ T57] usb 6-1: Manufacturer: syz [ 173.836092][ T57] usb 6-1: SerialNumber: syz [ 173.855096][ T57] usb 6-1: config 0 descriptor?? [ 174.378534][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 174.555161][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 175.359599][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 175.402429][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 175.453817][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 175.495201][ T6634] overlayfs: workdir and upperdir must be separate subtrees [ 175.520077][ T6635] syz.4.177 (6635) used greatest stack depth: 16784 bytes left [ 175.526380][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 175.560652][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 175.598424][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 175.638439][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 175.696168][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 175.880414][ T6338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 175.979256][ T6338] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 176.447600][ T57] usb 6-1: USB disconnect, device number 5 [ 178.144482][ T6666] ntfs3(nullb0): Primary boot signature is not NTFS. [ 178.152065][ T6666] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 178.558923][ T6671] tipc: Started in network mode [ 178.583711][ T6671] tipc: Node identity f6560e4cab37, cluster identity 4711 [ 178.647914][ T6671] tipc: Enabled bearer , priority 0 [ 178.768547][ T6675] syzkaller0: entered promiscuous mode [ 178.774044][ T6675] syzkaller0: entered allmulticast mode [ 178.970451][ T6675] tipc: Resetting bearer [ 179.127480][ T6684] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 179.820349][ T6670] tipc: Resetting bearer [ 180.104720][ T6670] tipc: Disabling bearer [ 180.247729][ T5942] tipc: Node number set to 1566641740 [ 180.441501][ T6690] random: crng reseeded on system resumption [ 183.163778][ T6707] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 183.260250][ T6707] CIFS mount error: No usable UNC path provided in device string! [ 183.260250][ T6707] [ 184.067046][ T6707] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 186.324180][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 186.571843][ T9] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 186.587561][ T9] usb 3-1: config 0 has no interface number 0 [ 186.600955][ T9] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 186.623553][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.636937][ T9] usb 3-1: Product: syz [ 186.641187][ T9] usb 3-1: Manufacturer: syz [ 186.646377][ T9] usb 3-1: SerialNumber: syz [ 186.735091][ T9] usb 3-1: config 0 descriptor?? [ 186.965890][ T6743] capability: warning: `syz.0.207' uses 32-bit capabilities (legacy support in use) [ 188.875641][ T9] usb 3-1: Firmware version (0.0) predates our first public release. [ 188.883732][ T9] usb 3-1: Please update to version 0.2 or newer [ 189.015784][ T9] usb 3-1: USB disconnect, device number 3 [ 189.592216][ T6751] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 189.601392][ T6751] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 191.145473][ T6762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.768567][ T6758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.046936][ T6783] GUP no longer grows the stack in syz.0.213 (6783): 200000004000-20000000a000 (200000002000) [ 196.057488][ T6783] CPU: 1 UID: 0 PID: 6783 Comm: syz.0.213 Not tainted syzkaller #0 PREEMPT(full) [ 196.057518][ T6783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.057533][ T6783] Call Trace: [ 196.057543][ T6783] [ 196.057553][ T6783] dump_stack_lvl+0x189/0x250 [ 196.057589][ T6783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.057617][ T6783] ? __pfx__printk+0x10/0x10 [ 196.057649][ T6783] ? find_vma+0xe7/0x160 [ 196.057681][ T6783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.057720][ T6783] __get_user_pages+0x2470/0x2a00 [ 196.057790][ T6783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.057827][ T6783] get_user_pages_remote+0x2f1/0xac0 [ 196.057867][ T6783] ? __pfx_mtree_load+0x10/0x10 [ 196.057903][ T6783] ? __pfx_get_user_pages_remote+0x10/0x10 [ 196.057946][ T6783] ? __access_remote_vm+0x367/0x7d0 [ 196.057978][ T6783] __access_remote_vm+0x211/0x7d0 [ 196.058015][ T6783] ? __pfx___access_remote_vm+0x10/0x10 [ 196.058039][ T6783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.058076][ T6783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.058104][ T6783] ? alloc_pages_noprof+0xbe/0x190 [ 196.058135][ T6783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.058170][ T6783] proc_pid_cmdline_read+0x430/0x810 [ 196.058194][ T6783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.058236][ T6783] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 196.058264][ T6783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.058293][ T6783] ? rw_verify_area+0x2a6/0x4d0 [ 196.058324][ T6783] vfs_readv+0x5aa/0x850 [ 196.058363][ T6783] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 196.058392][ T6783] ? __pfx_vfs_readv+0x10/0x10 [ 196.058439][ T6783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.058472][ T6783] ? __fget_files+0x2a/0x420 [ 196.058511][ T6783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.058540][ T6783] ? __fget_files+0x3a0/0x420 [ 196.058573][ T6783] ? __fget_files+0x2a/0x420 [ 196.058611][ T6783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.058645][ T6783] __x64_sys_preadv+0x197/0x2a0 [ 196.058679][ T6783] ? __pfx___x64_sys_preadv+0x10/0x10 [ 196.058713][ T6783] ? do_syscall_64+0xbe/0xf80 [ 196.058747][ T6783] do_syscall_64+0xfa/0xf80 [ 196.058773][ T6783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.058803][ T6783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.058835][ T6783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.058860][ T6783] RIP: 0033:0x7f8a3318f749 [ 196.058881][ T6783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.058902][ T6783] RSP: 002b:00007f8a340e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 196.058927][ T6783] RAX: ffffffffffffffda RBX: 00007f8a333e6090 RCX: 00007f8a3318f749 [ 196.058946][ T6783] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000009 [ 196.058963][ T6783] RBP: 00007f8a33213f91 R08: 0000000000000000 R09: 0000000000000000 [ 196.058979][ T6783] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 196.058994][ T6783] R13: 00007f8a333e6128 R14: 00007f8a333e6090 R15: 00007ffd23b501d8 [ 196.059035][ T6783] [ 198.775154][ T6805] XFS (nbd2): SB validate failed with error -5. [ 198.820524][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.834017][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.617545][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 200.627614][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 200.645500][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 200.663661][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 200.678650][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 201.689021][ T5151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.706007][ T5151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.724409][ T5151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.755985][ T5151] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.764593][ T5151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.914262][ T6232] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 202.095820][ T6232] usb 4-1: Using ep0 maxpacket: 8 [ 202.115724][ T6232] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 202.124280][ T6232] usb 4-1: config 179 has no interface number 0 [ 202.130644][ T6232] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 202.144385][ T6232] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 202.165940][ T6232] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 202.177605][ T6232] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 202.190080][ T6232] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 202.204680][ T6232] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 202.213788][ T6232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.244686][ T6826] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 202.518094][ T5906] usb 4-1: USB disconnect, device number 3 [ 202.518216][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 202.532432][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 202.541061][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.716086][ T5845] Bluetooth: hci6: command tx timeout [ 204.091581][ T6842] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.112742][ T5845] Bluetooth: hci0: command tx timeout [ 204.803189][ T5845] Bluetooth: hci6: command tx timeout [ 205.557258][ T6855] ======================================================= [ 205.557258][ T6855] WARNING: The mand mount option has been deprecated and [ 205.557258][ T6855] and is ignored by this kernel. Remove the mand [ 205.557258][ T6855] option from the mount to silence this warning. [ 205.557258][ T6855] ======================================================= [ 205.823385][ T6851] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 205.888872][ T30] audit: type=1326 audit(1764749966.683:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12338f749 code=0x7ffc0000 [ 205.999728][ T30] audit: type=1326 audit(1764749966.683:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12338f749 code=0x7ffc0000 [ 206.021790][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.072492][ T6864] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 206.079441][ T6864] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 206.104346][ T6860] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 206.110983][ T6860] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.133787][ T6859] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 206.140427][ T6859] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.150389][ T30] audit: type=1326 audit(1764749966.683:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb12338f749 code=0x7ffc0000 [ 206.172374][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.221428][ T5845] Bluetooth: hci0: command tx timeout [ 206.246039][ T6864] vhci_hcd vhci_hcd.0: Device attached [ 206.252199][ T6860] vhci_hcd vhci_hcd.0: Device attached [ 206.259754][ T6859] vhci_hcd vhci_hcd.0: Device attached [ 206.382364][ T6877] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 206.423511][ T6870] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(12) [ 206.430154][ T6870] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.518792][ T6859] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(22) [ 206.525520][ T6859] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 206.541731][ T5928] usb 39-2: new low-speed USB device number 2 using vhci_hcd [ 206.563902][ T6870] vhci_hcd vhci_hcd.0: Device attached [ 206.579982][ T6860] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 206.597397][ T6859] vhci_hcd vhci_hcd.0: Device attached [ 206.790923][ T6859] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 206.814973][ T6859] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(27) [ 206.821640][ T6859] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.829126][ T6869] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(19) [ 206.835732][ T6869] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.847234][ T6859] vhci_hcd vhci_hcd.0: Device attached [ 206.874637][ T6860] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 206.880000][ T5845] Bluetooth: hci6: command tx timeout [ 206.911726][ T6864] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(35) [ 206.918363][ T6864] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 206.968243][ T6864] vhci_hcd vhci_hcd.0: Device attached [ 207.029538][ T6869] vhci_hcd vhci_hcd.0: Device attached [ 207.127981][ T6882] vhci_hcd: connection closed [ 207.128598][ T6878] vhci_hcd: connection closed [ 207.133382][ T6863] vhci_hcd: connection reset by peer [ 207.143533][ T6865] vhci_hcd: connection closed [ 207.143954][ T6861] vhci_hcd: connection closed [ 207.154400][ T6880] vhci_hcd: connection closed [ 207.155701][ T1092] vhci_hcd: stop threads [ 207.170725][ T6873] vhci_hcd: connection closed [ 207.185047][ T1092] vhci_hcd: release socket [ 207.201799][ T1092] vhci_hcd: disconnect device [ 207.208769][ T1092] vhci_hcd: stop threads [ 207.217186][ T1092] vhci_hcd: release socket [ 207.227377][ T1092] vhci_hcd: disconnect device [ 207.242604][ T1092] vhci_hcd: stop threads [ 207.254120][ T1092] vhci_hcd: release socket [ 207.275889][ T1092] vhci_hcd: disconnect device [ 207.288723][ T1092] vhci_hcd: stop threads [ 207.293030][ T1092] vhci_hcd: release socket [ 207.338580][ T1092] vhci_hcd: disconnect device [ 207.437182][ T1092] vhci_hcd: stop threads [ 207.441473][ T1092] vhci_hcd: release socket [ 207.528895][ T1092] vhci_hcd: disconnect device [ 207.535377][ T1092] vhci_hcd: stop threads [ 207.539712][ T1092] vhci_hcd: release socket [ 207.544268][ T1092] vhci_hcd: disconnect device [ 207.549226][ T1092] vhci_hcd: stop threads [ 207.553572][ T1092] vhci_hcd: release socket [ 207.561477][ T1092] vhci_hcd: disconnect device [ 208.324293][ T5845] Bluetooth: hci0: command tx timeout [ 208.399013][ T3724] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.429054][ T6885] vhci_hcd: connection closed [ 208.429565][ T1092] vhci_hcd: stop threads [ 208.446877][ T1092] vhci_hcd: release socket [ 208.454345][ T1092] vhci_hcd: disconnect device [ 208.473178][ T6816] chnl_net:caif_netlink_parms(): no params data found [ 208.517961][ T5906] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 208.573856][ T3724] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.687793][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 208.703588][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.723796][ T5906] usb 2-1: config 0 has no interfaces? [ 208.750063][ T5906] usb 2-1: New USB device found, idVendor=045e, idProduct=d357, bcdDevice=a7.7c [ 208.778247][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.801962][ T5906] usb 2-1: Product: syz [ 209.564501][ T5845] Bluetooth: hci6: command tx timeout [ 209.615171][ T5906] usb 2-1: Manufacturer: syz [ 209.639058][ T5906] usb 2-1: SerialNumber: syz [ 209.693934][ T5906] usb 2-1: config 0 descriptor?? [ 210.186630][ T5943] usb 2-1: USB disconnect, device number 4 [ 210.452596][ T3724] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.456308][ T6916] Bluetooth: MGMT ver 1.23 [ 210.463308][ T5845] Bluetooth: hci0: command tx timeout [ 210.881721][ T3724] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.929858][ T6937] __nla_validate_parse: 43 callbacks suppressed [ 211.929880][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 212.220643][ T5928] vhci_hcd: vhci_device speed not set [ 212.885269][ T6816] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.897614][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.920781][ T6816] bridge_slave_0: entered allmulticast mode [ 212.936328][ T6816] bridge_slave_0: entered promiscuous mode [ 212.960337][ T6825] chnl_net:caif_netlink_parms(): no params data found [ 213.005481][ T6816] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.033032][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.043248][ T6816] bridge_slave_1: entered allmulticast mode [ 213.062633][ T6816] bridge_slave_1: entered promiscuous mode [ 213.307821][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'. [ 214.135604][ T6350] usb usb40-port1: attempt power cycle [ 214.342404][ T6816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.495723][ T6816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.725310][ T6350] usb usb40-port1: unable to enumerate USB device [ 215.032403][ T6816] team0: Port device team_slave_0 added [ 215.192247][ T3724] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.272483][ T6816] team0: Port device team_slave_1 added [ 216.287369][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 216.293457][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 216.299551][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 216.305592][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 216.320707][ T3724] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.527017][ T6995] overlayfs: failed to resolve './file0': -2 [ 216.634755][ T6816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.664342][ T6816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.721946][ T6997] netlink: 'syz.3.272': attribute type 1 has an invalid length. [ 216.750558][ T6816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.827028][ T7003] netlink: 'syz.2.273': attribute type 1 has an invalid length. [ 216.848222][ T7003] netlink: 228 bytes leftover after parsing attributes in process `syz.2.273'. [ 216.859929][ T6825] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.879083][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.888541][ T5858] Bluetooth: hci6: command 0x0405 tx timeout [ 216.924763][ T6825] bridge_slave_0: entered allmulticast mode [ 216.948719][ T6825] bridge_slave_0: entered promiscuous mode [ 217.263409][ T7000] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 218.273387][ T7018] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN NOPTI [ 218.285492][ T7018] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 218.293899][ T7018] CPU: 1 UID: 0 PID: 7018 Comm: syz.0.277 Not tainted syzkaller #0 PREEMPT(full) [ 218.303093][ T7018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 218.313152][ T7018] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 218.318715][ T7018] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 39 48 71 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 18 48 71 f9 4d 8b 24 24 48 83 c3 [ 218.335010][ T7000] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 218.338320][ T7018] RSP: 0018:ffffc90003207a40 EFLAGS: 00010216 [ 218.351552][ T7018] RAX: 0000000000000005 RBX: ffff888074b35600 RCX: 0000000000080000 [ 218.359621][ T7018] RDX: ffffc9000d582000 RSI: 00000000000003c0 RDI: 00000000000003c1 [ 218.367591][ T7018] RBP: 0000000000000001 R08: ffff88814c20892f R09: 1ffff11029841125 [ 218.375564][ T7018] R10: dffffc0000000000 R11: ffffffff88b52bc0 R12: 0000000000000028 [ 218.383525][ T7018] R13: dffffc0000000000 R14: ffff88814c208800 R15: dffffc0000000000 [ 218.391488][ T7018] FS: 00007f8a341016c0(0000) GS:ffff8881261c0000(0000) knlGS:0000000000000000 [ 218.400407][ T7018] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 218.406985][ T7018] CR2: 0000001b31323ffc CR3: 0000000044eae000 CR4: 0000000000350ef0 [ 218.414947][ T7018] Call Trace: [ 218.418213][ T7018] [ 218.421131][ T7018] pcl818_detach+0x66/0xd0 [ 218.425550][ T7018] comedi_device_detach_locked+0x178/0x750 [ 218.431356][ T7018] comedi_unlocked_ioctl+0xcde/0x1020 [ 218.436719][ T7018] ? kasan_quarantine_put+0xdd/0x220 [ 218.442099][ T7018] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 218.447914][ T7018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.453540][ T7018] ? do_futex+0x395/0x420 [ 218.457865][ T7018] ? __fget_files+0x2a/0x420 [ 218.462463][ T7018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.468096][ T7018] ? __fget_files+0x3a0/0x420 [ 218.472772][ T7018] ? __fget_files+0x2a/0x420 [ 218.477387][ T7018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.483018][ T7018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.488647][ T7018] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 218.494450][ T7018] __se_sys_ioctl+0xfc/0x170 [ 218.499040][ T7018] do_syscall_64+0xfa/0xf80 [ 218.503535][ T7018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.509589][ T7018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.515227][ T7018] ? exc_page_fault+0xab/0x100 [ 218.520006][ T7018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.525887][ T7018] RIP: 0033:0x7f8a3318f749 [ 218.530289][ T7018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.549883][ T7018] RSP: 002b:00007f8a34101038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.558291][ T7018] RAX: ffffffffffffffda RBX: 00007f8a333e5fa0 RCX: 00007f8a3318f749 [ 218.566253][ T7018] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 218.574211][ T7018] RBP: 00007f8a33213f91 R08: 0000000000000000 R09: 0000000000000000 [ 218.582176][ T7018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.590134][ T7018] R13: 00007f8a333e6038 R14: 00007f8a333e5fa0 R15: 00007ffd23b501d8 [ 218.598110][ T7018] [ 218.601118][ T7018] Modules linked in: [ 218.606136][ T7018] ---[ end trace 0000000000000000 ]--- [ 219.314961][ T7018] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 219.320629][ T7018] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 39 48 71 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 18 48 71 f9 4d 8b 24 24 48 83 c3 [ 219.341938][ T7018] RSP: 0018:ffffc90003207a40 EFLAGS: 00010216 [ 219.342504][ T6816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.348895][ T7018] RAX: 0000000000000005 RBX: ffff888074b35600 RCX: 0000000000080000 [ 219.367252][ T7018] RDX: ffffc9000d582000 RSI: 00000000000003c0 RDI: 00000000000003c1 [ 219.367860][ T6816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.375406][ T7018] RBP: 0000000000000001 R08: ffff88814c20892f R09: 1ffff11029841125 [ 219.401684][ T6816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.409370][ T7018] R10: dffffc0000000000 R11: ffffffff88b52bc0 R12: 0000000000000028 [ 219.429009][ T7005] bond1: (slave gretap1): making interface the new active one [ 219.432401][ T7018] R13: dffffc0000000000 R14: ffff88814c208800 R15: dffffc0000000000 [ 219.440045][ T7005] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 219.454076][ T7018] FS: 00007f8a341016c0(0000) GS:ffff8881261c0000(0000) knlGS:0000000000000000 [ 219.469415][ T7006] macvlan2: entered promiscuous mode [ 219.475428][ T7006] macvlan2: entered allmulticast mode [ 219.481239][ T7006] bond1: entered promiscuous mode [ 219.486612][ T7018] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.493214][ T7018] CR2: 000000110c466342 CR3: 0000000044eae000 CR4: 0000000000350ef0 [ 219.501301][ T7006] gretap1: entered promiscuous mode [ 219.507072][ T7006] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 219.513972][ T7018] Kernel panic - not syncing: Fatal exception [ 219.520437][ T7018] Kernel Offset: disabled [ 219.524752][ T7018] Rebooting in 86400 seconds..