last executing test programs: 18.665740169s ago: executing program 0 (id=363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x701, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x8880) close(r0) 18.350690567s ago: executing program 0 (id=364): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={0x0}) 12.969178567s ago: executing program 0 (id=376): timer_create(0x7, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0xd, 0x8, 0x80000001, 0x3}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffff9c, &(0x7f0000000140), 0x94000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000700)={0x0, @win={{0x8, 0x1, 0xa, 0x1}, 0x7, 0x0, 0x0, 0x433c, 0x0, 0x8}}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2, 0x0, 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'erspan0\x00', 0x2000}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 12.652414125s ago: executing program 2 (id=379): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xfffe, r0, 0x0}]) 12.081817774s ago: executing program 2 (id=380): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) dup(0xffffffffffffffff) keyctl$join(0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000004300010028bd7000fdd3df2500000000100001"], 0x28}, 0x1, 0x0, 0x0, 0x4000811}, 0x40000d0) 10.503157773s ago: executing program 2 (id=382): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) 9.537369507s ago: executing program 1 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x42, 0x4, 0x2d0, 0xffffffff, 0x0, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {0xff}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'bridge_slave_1\x00', {0xff}}, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x9}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000000)={[0x7]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x2}) shmget(0x3, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 7.849758965s ago: executing program 1 (id=387): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) 6.718039683s ago: executing program 0 (id=388): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000340)={0x30, 0x5, 0x0, {0x0, 0x2, 0x1, 0xc}}, 0x30) r3 = socket(0x10, 0x80002, 0x2) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x8, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e00)={0x3c, r8, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_xfrm(r6, 0x0, 0x2c000010) 6.506519782s ago: executing program 2 (id=389): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x0, 0xfffffffc, 0x100, 0x8000, 0xfc, "7a58beca3900000000000000000000000200"}) 6.461610416s ago: executing program 1 (id=390): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1010000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xfffffff9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.405590801s ago: executing program 3 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket(0x1, 0x3, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x88080, 0x16) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e22}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) close(0x3) open_by_handle_at(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000002000000"], 0x0) read$FUSE(r4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x2a00005, &(0x7f00000002c0)=ANY=[], 0x0, 0x2b7, &(0x7f0000000580)="$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") 6.164542542s ago: executing program 4 (id=392): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, r0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041817aaaaaaaaaa1000000000060000000000001a3849d057e5"], 0x1a) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x0, 0x4}) r2 = semget$private(0x0, 0x20000000102, 0x0) semop(r2, 0x0, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000680)) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000640)={0xc2000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000480), {0x35}, 0x0, 0x0, &(0x7f00000003c0)=""/162, &(0x7f00000004c0)=[0xffffffffffffffff], 0x1}, 0x58) 6.081763899s ago: executing program 1 (id=393): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x701, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x8880) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') write$cgroup_subtree(r5, 0x0, 0x4c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpeername(0xffffffffffffffff, 0x0, 0x0) close(0x3) 6.036808463s ago: executing program 2 (id=394): syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_commands={{0x2}, {0x4, "16a305c291124c1de3d0f4e9589af1af5db2c48d2318f6d055c488dbed993ef90362f30218b95c694b26e0da464cdf9d61ab5fff2031c58b819279b453ff141a"}}}}, 0x47) 3.590280997s ago: executing program 3 (id=395): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x5) 3.580656958s ago: executing program 1 (id=396): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x80000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.389749104s ago: executing program 4 (id=397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x42, 0x4, 0x2d0, 0xffffffff, 0x0, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {0xff}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'bridge_slave_1\x00', {0xff}}, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x9}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000000)={[0x7]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x2}) shmget(0x3, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 3.116900968s ago: executing program 2 (id=398): timer_create(0x7, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0xd, 0x8, 0x80000001, 0x3}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffff9c, &(0x7f0000000140), 0x94000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000700)={0x0, @win={{0x8, 0x1, 0xa, 0x1}, 0x7, 0x0, 0x0, 0x433c, 0x0, 0x8}}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2, 0x0, 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'erspan0\x00', 0x2000}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 2.267648133s ago: executing program 4 (id=399): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.145772493s ago: executing program 3 (id=400): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 2.018647924s ago: executing program 4 (id=401): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) alarm(0x81) 1.740477279s ago: executing program 4 (id=402): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={0x0}) 1.533860886s ago: executing program 3 (id=403): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000007274fcdbdf250000000000000000000000000000000000000000000000000000ffffe000000200000000000000000200000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000030000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 1.132591892s ago: executing program 3 (id=404): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x0, 0xfffffffc, 0x100, 0x8000, 0xfc, "7a58beca3900000000000000000000000200"}) 958.936326ms ago: executing program 0 (id=405): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x30, 0x2, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 161.858917ms ago: executing program 3 (id=406): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x701, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x8880) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') write$cgroup_subtree(r5, 0x0, 0x4c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpeername(0xffffffffffffffff, 0x0, 0x0) close(0x3) 107.592401ms ago: executing program 0 (id=407): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x8000, 0x3}) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x4002, 0x3f, 0x2, 0x3f000000, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@user_xattr}, {@discard}]}, 0x1, 0x513, &(0x7f0000000380)="$eJzs3c9vI1cdAPDvTOJtdjfFLiBUKlEqWpStYO2koW2EEJQLnCoB5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgf+AFSpElwQBwQIhGALBySggzwe06xjJ6GbxNn485Fe/N7MeL7vjeXn+fEyE8DEeioiXoqIqYh4NiLKxfS0SHHQS93l3rn32ko3JZFlr/w1iaSY1l9Xdx3TEXGzeNtMRHztyxHfTI7Gbe/tby43GvWdolzrNLdr7b392xvN5fX6en1rcXHhhaUXl55fms8KD9TOSj/zky99/o1Pf+t3d/5869vdan3uI1GKgXacpV7TS/m26Otuo53zCDYG/c+8NO6KAABwKt19/A9GxCfy/f9yTOV7cwOmxlEzAAAA4KxkX5iNfycRGQAAAHBlpRExG0laLcYCzEaaXivODXw4bqSNVrvzqbXW7tZqd15EJUrp2kajPl+MFa5EKemWF4oxtv3ycwPlxYh4LCK+X76el6srrcbqmM99AAAAwKS4OXD8/49ymudPNuT/BAAAAIDLqzKyAAAAAFwVDvkBAADg6hs8/n9jTPUAAAAAzsVXXn65m7L+869XX93b3Wy9enu13t6sNndXqiutne3qequ1nt+zr3nS+hqt1vZnYmv3bq1Tb3dq7b39O83W7lbnzsZ9j8AGAAAALtBjH3/z10lEHHz2ep6iuA8gwH3+MO4KAGdpatwVAMbGXbxhcpXGXQFg7JIT5hu8AwAAD7+5jx69/p9lWRbODcCVZ6wPAEwe1/9hcpWMAISJlkbEB3rZR0YtM/L6/y9PGyXLIt4qH57i/CIAAFys2TwlabU4DpiNNK1WIx6NSCtRStY2GvX54vjgV+XSI93yQv7O5MQxwwAAAAAAAAAAAAAAAAAAAAAAAABAT5Yl+fP+AAAAgKsrIv1Tkt/NP2Ku/Mzs4PmBa8k/y/HHovCjV35wd7nT2VnoTv9b/iyvaxHR+WEx/bmRjw8DAAAAzlpyMHJW7zi9eF240FoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAHeuffaSj9dZNy/fDEiKsPiT8dM/joTpYi48fckpg+9L4mIqTOIf/B6RDw+LH4S72ZZVilqMRg/jYjr5xy/km+a0fFvnkF8mGRvdvufl4Z9/9J4Kn8d/v2bLtKDGt3/pUXkx/N+blj/9+iRtTWHxnji7Z/VRsZ/PeKJ6eH9T7//TUbEf/rI2v6VZdnRGN/4+v7+qPjZjyPmhv7+JPfFqnWa27X23v7tjebyen29vrW4uPDC0otLzy/N19Y2GvXi79AY3/vYz989rv03hsT/7W96/e9x7X9m1EoH/Oftu/c+1MuWhsW/9fTQ39+ZGBE/LX77Plnku/Pn+vmDXv6wJ3/61pPHtX91xPY/6fO/dcr2P/vV7/7+lIsCABegvbe/udxo1HeOycycYpmHMfOLmUtRjf8zk32n98ldlvq830x3b/W9Kf1WXYKKHcpkFxZrKi5Jk/+XGWu3BAAAnIP3dvrHXRMAAAAAAAAAAAAAAAAAAACYXBdxO7HBmAfjaSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLH+GwAA//9yf+QF") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfff, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000008c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b9000000000000000007"], 0x24}}, 0x0) 105.620221ms ago: executing program 1 (id=408): syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501", @ANYRESOCT=0x0], 0x0) 0s ago: executing program 4 (id=409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x42, 0x4, 0x2d0, 0xffffffff, 0x0, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {0xff}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'bridge_slave_1\x00', {0xff}}, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x9}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000000)={[0x7]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x2}) shmget(0x3, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. [ 80.009752][ T4254] cgroup: Unknown subsys name 'net' [ 80.147386][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.764874][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 83.976395][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.984709][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.001936][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.009528][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.017435][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.025608][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.034109][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.038405][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.043120][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.051768][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.063197][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.071660][ T4286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.073393][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.079381][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.088679][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.095187][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.102264][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.112576][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.115954][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.122613][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.130814][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.135865][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.149652][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.157490][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.160332][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.172032][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.179684][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.187690][ T4285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.195624][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.222716][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.608834][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 84.741170][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 84.784545][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.801400][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.814491][ T4280] device bridge_slave_0 entered promiscuous mode [ 84.844350][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.871090][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.891052][ T4280] device bridge_slave_1 entered promiscuous mode [ 84.922973][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 84.951520][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.976434][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.994494][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 85.008451][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 85.059660][ T4280] team0: Port device team_slave_0 added [ 85.101332][ T4280] team0: Port device team_slave_1 added [ 85.107329][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.117005][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.127170][ T4268] device bridge_slave_0 entered promiscuous mode [ 85.161192][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.168493][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.180818][ T4268] device bridge_slave_1 entered promiscuous mode [ 85.241736][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.248833][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.278838][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.294712][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.301997][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.310446][ T4267] device bridge_slave_0 entered promiscuous mode [ 85.338406][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.345820][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.354670][ T4267] device bridge_slave_1 entered promiscuous mode [ 85.362811][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.370169][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.396594][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.415112][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.433423][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.440973][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.448885][ T4269] device bridge_slave_0 entered promiscuous mode [ 85.464343][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.473733][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.483677][ T4269] device bridge_slave_1 entered promiscuous mode [ 85.508543][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.519456][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.554857][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.565896][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.589882][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.597038][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.605998][ T4278] device bridge_slave_0 entered promiscuous mode [ 85.616936][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.650050][ T4268] team0: Port device team_slave_0 added [ 85.664088][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.671714][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.680019][ T4278] device bridge_slave_1 entered promiscuous mode [ 85.704143][ T4268] team0: Port device team_slave_1 added [ 85.719364][ T4269] team0: Port device team_slave_0 added [ 85.739705][ T4280] device hsr_slave_0 entered promiscuous mode [ 85.747407][ T4280] device hsr_slave_1 entered promiscuous mode [ 85.762232][ T4267] team0: Port device team_slave_0 added [ 85.779294][ T4269] team0: Port device team_slave_1 added [ 85.796668][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.807911][ T4267] team0: Port device team_slave_1 added [ 85.822762][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.830186][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.857139][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.887454][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.907282][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.914632][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.941459][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.965210][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.973510][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.000244][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.020909][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.027915][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.054432][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.076173][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.084015][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.110074][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.141440][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.148481][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.175036][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.200377][ T4278] team0: Port device team_slave_0 added [ 86.235553][ T4278] team0: Port device team_slave_1 added [ 86.281119][ T4268] device hsr_slave_0 entered promiscuous mode [ 86.288591][ T4268] device hsr_slave_1 entered promiscuous mode [ 86.295716][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.304660][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 86.304676][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 86.311723][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 86.317122][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 86.325058][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 86.335282][ T4268] Cannot create hsr debugfs directory [ 86.346866][ T4269] device hsr_slave_0 entered promiscuous mode [ 86.354861][ T4269] device hsr_slave_1 entered promiscuous mode [ 86.362154][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.369885][ T4269] Cannot create hsr debugfs directory [ 86.400534][ T4267] device hsr_slave_0 entered promiscuous mode [ 86.407498][ T4267] device hsr_slave_1 entered promiscuous mode [ 86.414635][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.422343][ T4267] Cannot create hsr debugfs directory [ 86.444818][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.452462][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.479763][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.533028][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.540434][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.567015][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.714941][ T4278] device hsr_slave_0 entered promiscuous mode [ 86.722287][ T4278] device hsr_slave_1 entered promiscuous mode [ 86.729082][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.737416][ T4278] Cannot create hsr debugfs directory [ 86.943000][ T4280] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.981874][ T4280] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.018973][ T4280] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.046815][ T4280] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.079195][ T4268] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.103856][ T4268] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.164100][ T4268] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.216343][ T4268] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.300253][ T4269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.330538][ T4269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.345084][ T4269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.381327][ T4269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.481824][ T4267] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.512711][ T4267] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.587749][ T4267] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.618680][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.638879][ T4267] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.675433][ T4278] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.691933][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.706899][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.725180][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.744061][ T4278] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.758861][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.769295][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.780119][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.787507][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.814707][ T4278] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.825332][ T4278] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.845231][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.858290][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.868307][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.881962][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.889109][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.927012][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.954803][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.964486][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.004655][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.013228][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.022118][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.032697][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.044081][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.055531][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.086653][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.095668][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.105115][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.114647][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.123998][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.133482][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.143828][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.177086][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.186694][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.201922][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.214149][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.223179][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.233239][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.242244][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.253916][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.264005][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.271207][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.279557][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.296194][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.306860][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.316671][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.323975][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.337125][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.379972][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 88.383417][ T4275] Bluetooth: hci2: command 0x041b tx timeout [ 88.386055][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 88.394293][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 88.398847][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 88.418786][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.432390][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.446575][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.453848][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.469221][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.479375][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.493424][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.505924][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.518472][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.532184][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.539364][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.556313][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.567030][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.619409][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.628991][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.643932][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.653634][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.662566][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.671977][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.684657][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.697586][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.713971][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.725525][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.741794][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.753693][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.763546][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.773760][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.787143][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.809555][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.825413][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.835289][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.849531][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.871183][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.886553][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.898728][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.908733][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.917754][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.924962][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.936711][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.946501][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.969605][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.987696][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.996338][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.010375][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.077992][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.094165][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.111264][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.118904][ T4317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.140378][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.161088][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.181346][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.188509][ T4317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.202248][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.221160][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.240707][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.261488][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.268708][ T4317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.290747][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.315766][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.327618][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.348945][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.361990][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.373443][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.386855][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.427027][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.452809][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.506619][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.545154][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.558016][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.572304][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.585061][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.597999][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.614801][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.626443][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.639000][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.654497][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.679145][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.688331][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.705950][ T4278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.717409][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.768115][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.777489][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.790005][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.798764][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.808163][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.815901][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.824943][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.832802][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.840799][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.849624][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.859181][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.873175][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.883774][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.990580][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.007691][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.027205][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.047843][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.073581][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.085596][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.104548][ T4280] device veth0_vlan entered promiscuous mode [ 90.124857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.145304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.224099][ T4280] device veth1_vlan entered promiscuous mode [ 90.254017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.274800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.302592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.350888][ T4269] device veth0_vlan entered promiscuous mode [ 90.357616][ T4268] device veth0_vlan entered promiscuous mode [ 90.379254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.402329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.437432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.450529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.459944][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 90.466029][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 90.472932][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 90.472952][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 90.479088][ T4277] Bluetooth: hci3: command 0x040f tx timeout [ 90.511294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.524095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.532522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.563753][ T4269] device veth1_vlan entered promiscuous mode [ 90.587132][ T4268] device veth1_vlan entered promiscuous mode [ 90.597504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.630693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.639066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.648541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.692803][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.702745][ T4280] device veth0_macvtap entered promiscuous mode [ 90.721119][ T4280] device veth1_macvtap entered promiscuous mode [ 90.728357][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.740273][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.748486][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.759956][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.768310][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.777311][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.787318][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.795487][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.806688][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.816629][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.839767][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.851677][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.869015][ T4269] device veth0_macvtap entered promiscuous mode [ 90.885779][ T4268] device veth0_macvtap entered promiscuous mode [ 90.897315][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.906192][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.916028][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.924956][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.943016][ T4269] device veth1_macvtap entered promiscuous mode [ 90.957586][ T4268] device veth1_macvtap entered promiscuous mode [ 90.971429][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.984534][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.019318][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.032708][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.045551][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.062185][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.071193][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.082304][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.091553][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.108707][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.133191][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.151711][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.168133][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.177598][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.200811][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.212171][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.221050][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.235926][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.245553][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.267849][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.294447][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.306096][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.323800][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.338328][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.356364][ T4267] device veth0_vlan entered promiscuous mode [ 91.368327][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.379286][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.393786][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.406132][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.424531][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.450360][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.469891][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.485957][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.498493][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.513434][ T4280] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.523805][ T4280] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.534021][ T4280] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.545274][ T4280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.558845][ T4269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.568459][ T4269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.578304][ T4269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.588742][ T4269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.602955][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.616292][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.633065][ T4268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.652168][ T4268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.662675][ T4268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.671994][ T4268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.685602][ T4267] device veth1_vlan entered promiscuous mode [ 91.852853][ T4267] device veth0_macvtap entered promiscuous mode [ 91.866615][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.877817][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.892484][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.906655][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.936814][ T4267] device veth1_macvtap entered promiscuous mode [ 91.949763][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.961791][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.046466][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.048678][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.068721][ T1168] cfg80211: failed to load regulatory.db [ 92.078464][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.084179][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.107679][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.118423][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.128974][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.139656][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.152839][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.179582][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.192193][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.203656][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.230352][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.238384][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.269439][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.282742][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.292007][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.310900][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.322381][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.332939][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.343941][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.354613][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.365783][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.377421][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.400555][ T4267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.409504][ T4267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.424948][ T4267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.434837][ T4267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.453661][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.464395][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.474420][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.483187][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.492580][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.501486][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.521667][ T4278] device veth0_vlan entered promiscuous mode [ 92.538203][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.546786][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 92.546987][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 92.553264][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 92.559233][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 92.565623][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 92.575156][ T4334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.592924][ T4334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.615595][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.629866][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.649051][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.664637][ T4278] device veth1_vlan entered promiscuous mode [ 92.734546][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.744822][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.796801][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.805912][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.815143][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.827391][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.836972][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.903259][ T4278] device veth0_macvtap entered promiscuous mode [ 92.916364][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.938893][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.968637][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.981330][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.996198][ T4278] device veth1_macvtap entered promiscuous mode [ 93.035926][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.083050][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.119479][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.164658][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.194649][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.213011][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.289541][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.345180][ T4365] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.387522][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.411007][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.467086][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.477909][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.488116][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.499279][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.515924][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.524833][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.546642][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.588565][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.642149][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.705191][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.757151][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.788939][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.817691][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.857545][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.887307][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.934373][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.965844][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.010192][ T4372] tipc: Started in network mode [ 94.015615][ T4372] tipc: Node identity 262185f133a7, cluster identity 4711 [ 94.032625][ T4372] tipc: Enabled bearer , priority 0 [ 94.053558][ T4376] device syzkaller0 entered promiscuous mode [ 94.087741][ T4367] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 94.150262][ T4364] tipc: Resetting bearer [ 94.217060][ T4364] tipc: Disabling bearer [ 94.257286][ T4381] netlink: 'syz.1.2': attribute type 39 has an invalid length. [ 94.393026][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.405525][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.420952][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.439761][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.461491][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.475110][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.615283][ T4386] device vlan2 entered promiscuous mode [ 94.833543][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.871013][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.898813][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.980444][ T4386] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7'. [ 95.013652][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 95.576987][ T4397] syz.1.9 uses obsolete (PF_INET,SOCK_PACKET) [ 96.038707][ T4334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.054301][ T4334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.138143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.649965][ T4320] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.712643][ T26] audit: type=1326 audit(1771774718.326:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4412 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4019c629 code=0x7ffc0000 [ 96.838633][ T26] audit: type=1326 audit(1771774718.336:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4412 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4019c629 code=0x7ffc0000 [ 96.860900][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.868902][ T4320] usb 1-1: Using ep0 maxpacket: 32 [ 96.881507][ T4320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.888591][ T4320] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 96.927838][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.943977][ T26] audit: type=1326 audit(1771774718.356:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4412 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fdc4019c629 code=0x7ffc0000 [ 96.969968][ T4327] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 96.998462][ T4320] usb 1-1: config 0 descriptor?? [ 97.044864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.073961][ T26] audit: type=1326 audit(1771774718.356:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4412 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4019c629 code=0x7ffc0000 [ 97.095939][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.106756][ T26] audit: type=1326 audit(1771774718.356:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4412 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4019c629 code=0x7ffc0000 [ 97.128848][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.144837][ T26] audit: type=1326 audit(1771774718.356:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4412 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fdc4019c629 code=0x7ffc0000 [ 97.170017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 97.178468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 97.189813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 97.203669][ T4327] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 97.217209][ T26] audit: type=1326 audit(1771774718.356:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4412 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4019c629 code=0x7ffc0000 [ 97.256735][ T26] audit: type=1326 audit(1771774718.396:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4412 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4019c629 code=0x7ffc0000 [ 97.278884][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.303843][ T26] audit: type=1326 audit(1771774718.396:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4412 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fdc4019c629 code=0x7ffc0000 [ 97.325912][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.326030][ T4327] usb 3-1: config 0 has no interface number 0 [ 97.326091][ T4327] usb 3-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 97.379061][ T26] audit: type=1326 audit(1771774718.396:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4412 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4019c629 code=0x7ffc0000 [ 97.419176][ T4327] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 97.478359][ T4327] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 97.483436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 97.510765][ T4320] corsair-psu 0003:1B1C:1C0D.0001: unknown main item tag 0x0 [ 97.533404][ T4320] corsair-psu 0003:1B1C:1C0D.0001: unknown main item tag 0x0 [ 97.544217][ T4327] usb 3-1: Product: syz [ 97.558779][ T4320] corsair-psu 0003:1B1C:1C0D.0001: unknown main item tag 0x0 [ 97.575518][ T4320] corsair-psu 0003:1B1C:1C0D.0001: unknown main item tag 0x0 [ 97.583542][ T4327] usb 3-1: SerialNumber: syz [ 97.606694][ T4327] usb 3-1: config 0 descriptor?? [ 97.617786][ T4320] corsair-psu 0003:1B1C:1C0D.0001: unknown main item tag 0x0 [ 97.633920][ T4327] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 97.665134][ T4320] corsair-psu 0003:1B1C:1C0D.0001: hidraw0: USB HID v0.05 Device [HID 1b1c:1c0d] on usb-dummy_hcd.0-1/input0 [ 97.781594][ T4320] corsair-psu 0003:1B1C:1C0D.0001: unable to initialize device (-71) [ 97.802709][ T4320] corsair-psu: probe of 0003:1B1C:1C0D.0001 failed with error -71 [ 97.849184][ T4320] usb 1-1: USB disconnect, device number 2 [ 97.927785][ T4327] usb 3-1: USB disconnect, device number 2 [ 98.303731][ T4427] fido_id[4427]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 98.817821][ T4432] loop0: detected capacity change from 0 to 512 [ 98.952957][ T4432] EXT4-fs: Invalid want_extra_isize 7 [ 99.101799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 99.110422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 99.119423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 99.127711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 99.135954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 101.109917][ T4355] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.313411][ T4355] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.337235][ T4355] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.385261][ T4355] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.409989][ T4355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.443682][ T4355] usb 4-1: config 0 descriptor?? [ 101.467491][ T4355] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 102.256512][ T4458] loop2: detected capacity change from 0 to 8 [ 102.314801][ T4458] Major/Minor mismatch, trying to mount newer 6.0 filesystem [ 102.343579][ T4458] Please update your kernel [ 102.421804][ T4458] MPTCP: addr_signal error, rm_addr=1 [ 102.429714][ T4458] MPTCP: addr_signal error, rm_addr=1 [ 102.586053][ T4462] loop4: detected capacity change from 0 to 4096 [ 102.610720][ T4462] ======================================================= [ 102.610720][ T4462] WARNING: The mand mount option has been deprecated and [ 102.610720][ T4462] and is ignored by this kernel. Remove the mand [ 102.610720][ T4462] option from the mount to silence this warning. [ 102.610720][ T4462] ======================================================= [ 102.772879][ T4465] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.452029][ T4271] usb 4-1: USB disconnect, device number 2 [ 105.720710][ T4475] loop2: detected capacity change from 0 to 2048 [ 106.035529][ T4475] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 106.613920][ T4491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30'. [ 106.828259][ T46] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 106.839172][ T4497] loop4: detected capacity change from 0 to 2048 [ 106.863208][ T46] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 266 with error 28 [ 106.905112][ T46] EXT4-fs (loop2): This should not happen!! Data will be lost [ 106.905112][ T46] [ 106.921835][ T4497] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 106.944232][ T4497] UDF-fs: Scanning with blocksize 512 failed [ 106.979904][ T46] EXT4-fs (loop2): Total free blocks count 0 [ 106.999984][ T4355] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.007481][ T46] EXT4-fs (loop2): Free/Dirty block details [ 107.017232][ T4497] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.030260][ T46] EXT4-fs (loop2): free_blocks=2415919504 [ 107.053177][ T46] EXT4-fs (loop2): dirty_blocks=272 [ 107.078624][ T46] EXT4-fs (loop2): Block reservation details [ 107.095195][ T46] EXT4-fs (loop2): i_reserved_data_blocks=17 [ 107.153301][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 107.222016][ T4355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.252642][ T4355] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.318088][ T4355] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 107.333710][ T4355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.381843][ T4355] usb 2-1: config 0 descriptor?? [ 107.397459][ T4499] tap0: tun_chr_ioctl cmd 1074025680 [ 107.477069][ T4501] loop2: detected capacity change from 0 to 512 [ 107.597876][ T4501] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.33: ea_inode with extended attributes [ 107.641922][ T4501] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.33: error while reading EA inode 11 err=-117 [ 107.655950][ T4501] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 107.674176][ T4501] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.33: ea_inode with extended attributes [ 107.691427][ T4501] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.33: error while reading EA inode 11 err=-117 [ 107.722659][ T4501] EXT4-fs (loop2): 1 orphan inode deleted [ 107.737474][ T4501] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 107.753784][ T4355] usb 2-1: USB disconnect, device number 2 [ 107.869604][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 108.227777][ T4509] trusted_key: encrypted_key: keylen parameter is missing [ 108.695389][ T4508] loop4: detected capacity change from 0 to 1024 [ 108.779989][ T4508] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 108.779989][ T4508] [ 108.824903][ T4508] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 109.117687][ T4327] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.134943][ T4520] Error parsing options; rc = [-22] [ 109.206293][ T4521] loop0: detected capacity change from 0 to 64 [ 110.181635][ T4327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.226262][ T4327] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.255143][ T4327] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.286367][ T4327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.027855][ T4526] loop4: detected capacity change from 0 to 2048 [ 112.038790][ T4327] usb 4-1: config 0 descriptor?? [ 112.104502][ T4327] usb 4-1: can't set config #0, error -71 [ 112.154897][ T4526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.164754][ T4327] usb 4-1: USB disconnect, device number 3 [ 112.413538][ T4537] loop1: detected capacity change from 0 to 2048 [ 112.436276][ T4537] EXT4-fs: Ignoring removed nobh option [ 112.464541][ T4536] loop3: detected capacity change from 0 to 4096 [ 112.512820][ T4538] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.840416][ T4537] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 112.984500][ T4537] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.391420][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 113.391439][ T26] audit: type=1800 audit(1771774735.006:46): pid=4546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.46" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 113.514366][ T26] audit: type=1800 audit(1771774735.036:47): pid=4537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.46" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 115.495705][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 117.382511][ T4566] Error parsing options; rc = [-22] [ 117.393039][ T4566] loop0: detected capacity change from 0 to 64 [ 120.568450][ T4582] capability: warning: `syz.0.58' uses deprecated v2 capabilities in a way that may be insecure [ 121.637041][ T4588] loop0: detected capacity change from 0 to 4096 [ 123.319879][ T4593] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.568059][ T4604] loop2: detected capacity change from 0 to 1024 [ 125.575706][ T4604] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.584231][ T4604] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 125.599912][ T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.644583][ T4604] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.62: bad orphan inode 11 [ 125.672965][ T4608] loop0: detected capacity change from 0 to 4096 [ 125.718015][ T4604] ext4_test_bit(bit=10, block=4) = 1 [ 125.744782][ T4604] is_bad_inode(inode)=0 [ 125.749298][ T4604] NEXT_ORPHAN(inode)=3254779904 [ 125.792726][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.813032][ T22] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.827669][ T4604] max_ino=32 [ 125.831339][ T4608] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0002] [ 125.839565][ T4604] i_nlink=0 [ 125.846330][ T22] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.867245][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.897671][ T4604] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 2: comm syz.2.62: lblock 2 mapped to illegal pblock 2 (length 1) [ 125.909554][ T22] usb 4-1: config 0 descriptor?? [ 125.945918][ T4608] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.975781][ T4604] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 125.984516][ T22] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 126.036125][ T4604] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 48: comm syz.2.62: lblock 0 mapped to illegal pblock 48 (length 1) [ 126.097301][ T4604] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 126.140668][ T4604] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.62: Failed to acquire dquot type 0 [ 126.179557][ T4604] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 126.210049][ T4604] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #11: comm syz.2.62: mark_inode_dirty error [ 126.235930][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 126.245243][ T4604] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 126.270276][ T4604] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 126.455473][ T4611] loop0: detected capacity change from 0 to 8 [ 126.502822][ T4611] Major/Minor mismatch, trying to mount newer 6.0 filesystem [ 126.562584][ T4611] Please update your kernel [ 126.624211][ T4428] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.714238][ T4611] MPTCP: addr_signal error, rm_addr=1 [ 126.718160][ T4611] MPTCP: addr_signal error, rm_addr=1 [ 127.901874][ T4632] Device name cannot be null; rc = [-22] [ 127.937401][ T4632] loop4: detected capacity change from 0 to 64 [ 128.734003][ T7] usb 4-1: USB disconnect, device number 4 [ 128.866501][ T4630] tipc: Started in network mode [ 128.872410][ T4630] tipc: Node identity 8a1ae12d5944, cluster identity 4711 [ 128.893637][ T4630] tipc: Enabled bearer , priority 0 [ 129.063080][ T4630] tipc: Resetting bearer [ 129.081959][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 129.088221][ T4267] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 129.114615][ T4267] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 129.133729][ T4267] EXT4-fs error (device loop2): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 129.326147][ T4648] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 129.585634][ T4625] tipc: Disabling bearer [ 129.713665][ T4652] loop2: detected capacity change from 0 to 512 [ 129.760663][ T4652] EXT4-fs (loop2): 1 truncate cleaned up [ 129.766984][ T4652] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 129.784114][ T4652] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.75: bg 0: block 465: padding at end of block bitmap is not set [ 129.805183][ T4652] EXT4-fs (loop2): Remounting filesystem read-only [ 129.894235][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 130.032904][ T4655] loop1: detected capacity change from 0 to 8 [ 130.087332][ T4655] Major/Minor mismatch, trying to mount newer 6.0 filesystem [ 130.097560][ T4657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 130.122035][ T4655] Please update your kernel [ 130.130191][ T4657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.78'. [ 130.251610][ T4655] MPTCP: addr_signal error, rm_addr=1 [ 130.343987][ T4655] MPTCP: addr_signal error, rm_addr=1 [ 131.178364][ T4676] x_tables: ip_tables: osf match: only valid for protocol 6 [ 132.939590][ T4701] loop3: detected capacity change from 0 to 8 [ 132.985927][ T4703] loop4: detected capacity change from 0 to 512 [ 133.013888][ T4701] Major/Minor mismatch, trying to mount newer 6.0 filesystem [ 133.025212][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.032234][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.040349][ T4701] Please update your kernel [ 133.054233][ T4703] EXT4-fs: Ignoring removed i_version option [ 133.107079][ T4703] EXT4-fs: Ignoring removed bh option [ 133.182734][ T4701] MPTCP: addr_signal error, rm_addr=1 [ 133.215249][ T4703] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 133.257960][ T4703] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.306588][ T4712] xt_TCPMSS: Only works on TCP SYN packets [ 133.377326][ T4287] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 133.388526][ T4287] CPU: 1 PID: 4287 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 133.396644][ T4287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.407387][ T4287] Workqueue: hci3 hci_rx_work [ 133.412122][ T4287] Call Trace: [ 133.415448][ T4287] [ 133.419047][ T4287] dump_stack_lvl+0x188/0x24e [ 133.423780][ T4287] ? show_regs_print_info+0x12/0x12 [ 133.429279][ T4287] ? load_image+0x400/0x400 [ 133.433827][ T4287] sysfs_create_dir_ns+0x26a/0x290 [ 133.438981][ T4287] ? sysfs_warn_dup+0xa0/0xa0 [ 133.443888][ T4287] ? do_raw_spin_unlock+0x11d/0x230 [ 133.449242][ T4287] kobject_add_internal+0x61c/0xcc0 [ 133.454578][ T4287] kobject_add+0x160/0x230 [ 133.459131][ T4287] ? kobject_init+0x1d0/0x1d0 [ 133.463926][ T4287] ? klist_children_get+0x50/0x50 [ 133.469476][ T4287] ? get_device_parent+0x121/0x3f0 [ 133.474651][ T4287] device_add+0x483/0xfb0 [ 133.479423][ T4287] ? kmem_cache_free+0xf7/0x290 [ 133.484672][ T4287] hci_conn_add_sysfs+0xd1/0x1e0 [ 133.489750][ T4287] le_conn_complete_evt+0x105f/0x1670 [ 133.495578][ T4287] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 133.501968][ T4287] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 133.507783][ T4287] ? skb_pull_data+0xf7/0x200 [ 133.512684][ T4287] hci_le_enh_conn_complete_evt+0x185/0x460 [ 133.518715][ T4287] ? hci_le_remote_conn_param_req_evt+0xd10/0xd10 [ 133.525525][ T4287] ? hci_remote_host_features_evt+0x270/0x270 [ 133.531899][ T4287] hci_event_packet+0x7b6/0x1280 [ 133.536988][ T4287] ? bis_list+0x280/0x280 [ 133.541387][ T4287] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 133.547412][ T4287] ? kcov_remote_start+0x4c7/0x7e0 [ 133.552664][ T4287] ? sync_thread_backup+0x1510/0x2090 [ 133.558959][ T4287] ? hci_send_to_monitor+0x9c/0x4a0 [ 133.564904][ T4287] hci_rx_work+0x3eb/0xd40 [ 133.569601][ T4287] ? _raw_spin_unlock+0x40/0x40 [ 133.574686][ T4287] ? process_one_work+0x7b0/0x1160 [ 133.580009][ T4287] process_one_work+0x8a2/0x1160 [ 133.585109][ T4287] ? worker_detach_from_pool+0x240/0x240 [ 133.591159][ T4287] ? _raw_spin_lock_irq+0xb7/0xf0 [ 133.596430][ T4287] ? _raw_spin_lock_irqsave+0x100/0x100 [ 133.602214][ T4287] ? kthread_data+0x4b/0xc0 [ 133.606882][ T4287] worker_thread+0xaa2/0x1270 [ 133.611603][ T4287] ? __kthread_parkme+0x162/0x1c0 [ 133.616662][ T4287] kthread+0x29d/0x330 [ 133.620922][ T4287] ? worker_clr_flags+0x1a0/0x1a0 [ 133.625988][ T4287] ? kthread_blkcg+0xd0/0xd0 [ 133.630698][ T4287] ret_from_fork+0x1f/0x30 [ 133.635153][ T4287] [ 133.640063][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.650380][ T4287] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 133.663800][ T4287] Bluetooth: hci3: failed to register connection device [ 133.851910][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.869925][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.891035][ T22] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 133.919912][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 133.938429][ T22] usb 2-1: SerialNumber: syz [ 134.074009][ T4714] Bluetooth: MGMT ver 1.22 [ 134.168403][ T22] usb 2-1: 0:2 : does not exist [ 134.210356][ T22] usb 2-1: usbmixer: too many channels (61) in unit 5 [ 134.319679][ T22] usb 2-1: USB disconnect, device number 3 [ 134.356534][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 136.469865][ C0] sched: RT throttling activated [ 137.056334][ T4409] udevd[4409]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.573601][ T4756] fuse: Unknown parameter 'user_id00000000000000000000' [ 144.107877][ T4768] loop4: detected capacity change from 0 to 4096 [ 144.193928][ T4768] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 144.616670][ T4768] syz.4.102 (4768) used greatest stack depth: 20752 bytes left [ 144.841123][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 145.232768][ T4788] loop3: detected capacity change from 0 to 1024 [ 146.894574][ T4808] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.930803][ T4810] fuse: Bad value for 'fd' [ 147.224969][ T4814] loop3: detected capacity change from 0 to 512 [ 147.573712][ T4814] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 147.613273][ T4814] EXT4-fs (loop3): Test dummy encryption mode enabled [ 147.626405][ T4814] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 147.772387][ T4814] device syzkaller0 entered promiscuous mode [ 147.969561][ T4834] loop4: detected capacity change from 0 to 512 [ 147.992024][ T4834] EXT4-fs: Ignoring removed i_version option [ 148.018406][ T4834] EXT4-fs: Ignoring removed bh option [ 148.036340][ T4832] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 148.118917][ T4834] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 148.142953][ T4834] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.349378][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 148.585095][ T4846] loop3: detected capacity change from 0 to 512 [ 148.663358][ T4846] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.138: inode has both inline data and extents flags [ 148.714142][ T4846] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.138: couldn't read orphan inode 15 (err -117) [ 148.750454][ T4355] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 148.763934][ T4846] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 148.884293][ T4851] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #2: comm syz.3.138: invalid size [ 148.972870][ T4355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.015920][ T4355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.094963][ T4355] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 149.126762][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 149.145020][ T4355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.362577][ T4355] usb 2-1: config 0 descriptor?? [ 149.777248][ T4853] loop2: detected capacity change from 0 to 40427 [ 149.804187][ T4355] usbhid 2-1:0.0: can't add hid device: -71 [ 149.827384][ T4853] F2FS-fs (loop2): Invalid log sectors per block(0) log sectorsize(9) [ 149.836163][ T4853] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 149.846181][ T4355] usbhid: probe of 2-1:0.0 failed with error -71 [ 149.861008][ T4355] usb 2-1: USB disconnect, device number 4 [ 149.897423][ T4853] F2FS-fs (loop2): invalid crc value [ 149.910498][ T4853] F2FS-fs (loop2): SIT is corrupted node# 0 vs 7 [ 149.921653][ T4853] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 150.044043][ T4853] netlink: 52 bytes leftover after parsing attributes in process `syz.2.139'. [ 150.344693][ T4865] fuse: Bad value for 'fd' [ 150.389894][ T4355] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 150.600757][ T4355] usb 2-1: Using ep0 maxpacket: 32 [ 150.615677][ T4355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.696570][ T4355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.749941][ T4355] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 150.795775][ T4355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.849182][ T4355] usb 2-1: config 0 descriptor?? [ 150.955643][ T4355] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 151.030734][ T4355] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 151.078024][ T4321] usb 2-1: USB disconnect, device number 5 [ 151.140906][ T4321] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 151.425729][ T4872] loop0: detected capacity change from 0 to 4096 [ 151.550047][ T4877] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.342405][ T4885] loop4: detected capacity change from 0 to 8 [ 153.388656][ T4885] SQUASHFS error: Failed to read block 0x18e: -5 [ 153.404966][ T4885] SQUASHFS error: Unable to read metadata cache entry [18c] [ 154.853618][ T4906] loop2: detected capacity change from 0 to 8 [ 154.945111][ T4906] Major/Minor mismatch, trying to mount newer 6.0 filesystem [ 155.094990][ T4906] Please update your kernel [ 155.236899][ T4906] MPTCP: kernel_bind error, err=-98 [ 155.317458][ T4906] MPTCP: addr_signal error, rm_addr=1 [ 155.346876][ T4906] MPTCP: addr_signal error, rm_addr=1 [ 156.299938][ T4320] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 156.542261][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.569951][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.578187][ T4925] fuse: Bad value for 'fd' [ 156.609998][ T4320] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 156.640021][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.680857][ T4320] usb 4-1: config 0 descriptor?? [ 156.901710][ T4320] usbhid 4-1:0.0: can't add hid device: -71 [ 156.914815][ T4320] usbhid: probe of 4-1:0.0 failed with error -71 [ 156.970257][ T4320] usb 4-1: USB disconnect, device number 5 [ 157.499914][ T4320] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 159.170015][ T4320] usb 4-1: Using ep0 maxpacket: 32 [ 159.182215][ T4320] usb 4-1: device descriptor read/all, error -71 [ 165.080025][ T4320] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 165.303172][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.366789][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.411213][ T4320] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 165.449944][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.488690][ T4320] usb 5-1: config 0 descriptor?? [ 165.518905][ T4975] fuse: Unknown parameter '0x0000000000000003' [ 167.034475][ T4320] usbhid 5-1:0.0: can't add hid device: -71 [ 167.040683][ T4320] usbhid: probe of 5-1:0.0 failed with error -71 [ 167.050166][ T4320] usb 5-1: USB disconnect, device number 2 [ 167.389384][ T4981] loop1: detected capacity change from 0 to 2048 [ 167.589959][ T4320] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 167.799911][ T4320] usb 5-1: Using ep0 maxpacket: 32 [ 167.817942][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.860395][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.911122][ T4320] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 168.131578][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.225693][ T4320] usb 5-1: config 0 descriptor?? [ 168.387839][ T4994] loop1: detected capacity change from 0 to 64 [ 170.273932][ T4988] loop3: detected capacity change from 0 to 40427 [ 170.282594][ T4320] usb 5-1: can't set config #0, error -71 [ 170.309941][ T4988] F2FS-fs (loop3): Invalid log sectors per block(0) log sectorsize(9) [ 170.318244][ T4988] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 170.329586][ T4988] F2FS-fs (loop3): invalid crc value [ 170.339479][ T4988] F2FS-fs (loop3): SIT is corrupted node# 0 vs 7 [ 170.347317][ T4988] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 170.396726][ T4320] usb 5-1: USB disconnect, device number 3 [ 170.440099][ T4988] netlink: 52 bytes leftover after parsing attributes in process `syz.3.185'. [ 172.045165][ T5001] loop1: detected capacity change from 0 to 512 [ 172.111385][ T5001] EXT4-fs: Ignoring removed oldalloc option [ 172.155150][ T5001] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 172.209911][ T5001] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 172.316730][ T5001] EXT4-fs (loop1): 1 truncate cleaned up [ 172.351055][ T5001] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 173.208187][ T5001] fscrypt (loop1, inode 18): Can't use IV_INO_LBLK_64 policy on filesystem 'loop1' because it doesn't have stable inode numbers [ 173.436038][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 173.684277][ T5017] fuse: Unknown parameter '0x0000000000000003' [ 173.743134][ T5016] loop1: detected capacity change from 0 to 4096 [ 173.836269][ T5019] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.257660][ T5033] Zero length message leads to an empty skb [ 178.696454][ T5044] loop4: detected capacity change from 0 to 1024 [ 180.252291][ T5055] fuse: Unknown parameter '0x0000000000000003' [ 180.451204][ T5057] loop4: detected capacity change from 0 to 4096 [ 180.520110][ T5059] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.061375][ T5085] loop3: detected capacity change from 0 to 1024 [ 185.473923][ T5085] hfsplus: found bad thread record in catalog [ 195.001961][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.008418][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.337491][ T5116] Error parsing options; rc = [-22] [ 195.359936][ T5116] loop2: detected capacity change from 0 to 64 [ 196.985618][ T5120] device ip6gre0 entered promiscuous mode [ 199.206264][ T4287] Bluetooth: hci4: command 0x0405 tx timeout [ 199.347016][ T5139] loop2: detected capacity change from 0 to 512 [ 200.935433][ T5143] fuse: Unknown parameter '0x0000000000000003' [ 200.949977][ T26] audit: type=1326 audit(1771774821.746:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5140 comm="syz.1.217" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f948b39c629 code=0x0 [ 201.166231][ T5139] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 201.211090][ T5139] ext4 filesystem being mounted at /48/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.439404][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 206.414814][ T5170] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 207.427757][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 207.434406][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 207.449931][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 207.456099][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 207.460116][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 208.291728][ T5179] loop2: detected capacity change from 0 to 8 [ 208.352069][ T5179] SQUASHFS error: lzo decompression failed, data probably corrupt [ 208.389946][ T5179] SQUASHFS error: Failed to read block 0x91: -5 [ 208.395062][ T5183] fuse: Unknown parameter '0x0000000000000003' [ 208.396370][ T5179] SQUASHFS error: Unable to read metadata cache entry [8f] [ 208.439919][ T5179] SQUASHFS error: Unable to read inode 0x11f [ 208.673973][ T5186] loop4: detected capacity change from 0 to 512 [ 208.705891][ T5186] EXT4-fs: Ignoring removed i_version option [ 208.739923][ T5186] EXT4-fs: Ignoring removed oldalloc option [ 209.085879][ T5186] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 209.404404][ T26] audit: type=1326 audit(1771774831.016:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5191 comm="syz.1.239" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f948b39c629 code=0x0 [ 211.260002][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 223.183442][ T5256] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 224.474746][ T26] audit: type=1326 audit(1771774846.086:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5258 comm="syz.4.254" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc4019c629 code=0x0 [ 226.072972][ T5269] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 226.263055][ T5271] loop1: detected capacity change from 0 to 128 [ 226.349370][ T5271] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 226.563241][ T5271] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.580292][ T4287] Bluetooth: hci0: command 0x0c20 tx timeout [ 230.695616][ T5290] loop2: detected capacity change from 0 to 4096 [ 231.223552][ T5294] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 233.754147][ T5290] NILFS (loop2): error -4 creating segctord thread [ 234.966421][ T5305] loop4: detected capacity change from 0 to 1024 [ 235.065901][ T5305] ext4: Unknown parameter 'obj_role' [ 237.667070][ T26] audit: type=1326 audit(1771774859.266:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.0.271" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c7b79c629 code=0x0 [ 240.555839][ T5323] loop0: detected capacity change from 0 to 512 [ 240.567758][ T5323] ext4: Unknown parameter 'hash' [ 241.439899][ T4409] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 243.322535][ T5335] loop1: detected capacity change from 0 to 1024 [ 244.596050][ T5341] loop3: detected capacity change from 0 to 4096 [ 244.833986][ T5349] loop4: detected capacity change from 0 to 128 [ 244.940744][ T5349] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 244.990454][ T5349] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 245.104939][ T5349] EXT4-fs (loop4): shut down requested (2) [ 246.692194][ T5358] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.820936][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 247.109030][ T5362] loop4: detected capacity change from 0 to 1024 [ 247.656984][ T5368] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 248.643122][ T5362] hfsplus: request for non-existent node 3 in B*Tree [ 248.651793][ T5362] hfsplus: request for non-existent node 3 in B*Tree [ 248.844093][ T5376] loop0: detected capacity change from 0 to 1024 [ 248.937215][ T5376] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 249.025809][ T5376] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3852: comm syz.0.290: Allocating blocks 385-513 which overlap fs metadata [ 249.252849][ T5362] mmap: syz.4.287 (5362) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 249.367756][ T5375] EXT4-fs (loop0): pa ffff888073f7dee0: logic 16, phys. 129, len 24 [ 249.376270][ T5375] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 8 [ 251.063329][ T26] audit: type=1326 audit(1771774871.766:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5387 comm="syz.1.286" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f948b39c629 code=0x0 [ 251.248006][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 253.616707][ T5402] loop2: detected capacity change from 0 to 128 [ 253.645587][ T5402] UDF-fs: bad mount option "@LqFÜlØ -ãÄ°í|•ª³yÏŠoÜ­ü‹)‹×> ÆßÏjÝÀ~g" or missing value [ 253.752020][ T5404] loop0: detected capacity change from 0 to 512 [ 253.794201][ T5404] EXT4-fs: Ignoring removed oldalloc option [ 253.850958][ T5404] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 253.971418][ T5404] EXT4-fs (loop0): 1 truncate cleaned up [ 253.977159][ T5404] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 255.665971][ T5404] fscrypt (loop0, inode 18): Can't use IV_INO_LBLK_64 policy on filesystem 'loop0' because it doesn't have stable inode numbers [ 255.903606][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.904071][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 255.910292][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.131282][ T5414] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 257.832566][ T26] audit: type=1326 audit(1771774878.536:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz.0.301" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c7b79c629 code=0x0 [ 258.679267][ T5431] Error parsing options; rc = [-22] [ 258.689338][ T5431] loop4: detected capacity change from 0 to 64 [ 260.590074][ T5436] loop3: detected capacity change from 0 to 1024 [ 260.597075][ T5436] ext4: Bad value for 'auto_da_alloc' [ 260.664222][ T4428] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 262.503861][ T5443] loop2: detected capacity change from 0 to 4096 [ 262.622511][ T5446] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.689493][ T5448] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 263.510100][ T4271] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 265.089546][ T26] audit: type=1326 audit(1771774885.746:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.3.313" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd9e79c629 code=0x0 [ 265.144978][ T4271] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 265.169915][ T4271] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 265.178179][ T4271] usb 1-1: Product: syz [ 265.199926][ T4271] usb 1-1: Manufacturer: syz [ 265.205744][ T4271] usb 1-1: SerialNumber: syz [ 265.223546][ T4271] usb 1-1: config 0 descriptor?? [ 265.247151][ T4271] ch341 1-1:0.0: ch341-uart converter detected [ 265.558158][ T5466] loop4: detected capacity change from 0 to 512 [ 265.711104][ T5466] EXT4-fs: Ignoring removed oldalloc option [ 265.836338][ T5466] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 266.101543][ T5468] loop1: detected capacity change from 0 to 40427 [ 266.130818][ T5468] F2FS-fs (loop1): Invalid log sectors per block(0) log sectorsize(9) [ 266.137001][ T4271] usb 1-1: failed to send control message: -71 [ 266.139154][ T5468] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 266.157021][ T5468] F2FS-fs (loop1): invalid crc value [ 266.164615][ T5468] F2FS-fs (loop1): SIT is corrupted node# 0 vs 7 [ 266.171694][ T5466] EXT4-fs (loop4): 1 truncate cleaned up [ 266.177476][ T5466] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 266.189012][ T5468] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 266.199060][ T4271] ch341-uart: probe of ttyUSB0 failed with error -71 [ 266.317263][ T4271] usb 1-1: USB disconnect, device number 3 [ 266.338819][ T5466] fscrypt (loop4, inode 18): Can't use IV_INO_LBLK_64 policy on filesystem 'loop4' because it doesn't have stable inode numbers [ 266.428664][ T4271] ch341 1-1:0.0: device disconnected [ 266.594481][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 267.110026][ T5478] Error parsing options; rc = [-22] [ 267.133259][ T5478] loop1: detected capacity change from 0 to 64 [ 268.067081][ T5480] loop0: detected capacity change from 0 to 1024 [ 269.660381][ T5480] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 269.673692][ T5480] EXT4-fs (loop0): orphan cleanup on readonly fs [ 269.732856][ T5480] EXT4-fs error (device loop0): ext4_free_blocks:6221: comm syz.0.319: Freeing blocks not in datazone - block = 0, count = 4096 [ 269.870426][ T5480] EXT4-fs (loop0): 1 orphan inode deleted [ 269.878506][ T5480] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 269.925734][ T5480] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.319: iget: bad i_size value: 1970324836974602 [ 270.195148][ T5480] EXT4-fs (loop0): unmounting filesystem. [ 271.271932][ T5497] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 272.844218][ T26] audit: type=1326 audit(1771774893.536:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5498 comm="syz.3.325" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd9e79c629 code=0x0 [ 272.960165][ T5501] loop4: detected capacity change from 0 to 512 [ 273.088568][ T5501] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #15: comm syz.4.324: corrupted inode contents [ 273.149997][ T5501] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 273.175241][ T5501] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #15: comm syz.4.324: corrupted inode contents [ 273.209372][ T5501] EXT4-fs error (device loop4): ext4_evict_inode:327: inode #15: comm syz.4.324: mark_inode_dirty error [ 273.256969][ T5501] EXT4-fs (loop4): 1 orphan inode deleted [ 273.286925][ T5501] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 273.526060][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 273.749418][ T5510] loop4: detected capacity change from 0 to 512 [ 273.792841][ T5510] EXT4-fs: Ignoring removed oldalloc option [ 273.818679][ T5510] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 273.858416][ T5510] EXT4-fs (loop4): 1 truncate cleaned up [ 273.879838][ T5510] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 273.956555][ T5510] fscrypt (loop4, inode 18): Can't use IV_INO_LBLK_64 policy on filesystem 'loop4' because it doesn't have stable inode numbers [ 274.244526][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 276.255201][ T5527] loop1: detected capacity change from 0 to 1024 [ 276.316586][ T5527] EXT4-fs: Ignoring removed orlov option [ 276.432196][ T5531] loop3: detected capacity change from 0 to 256 [ 276.559946][ T4355] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 276.631887][ T5527] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 276.669356][ T26] audit: type=1800 audit(1771774898.282:56): pid=5527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.321" name="file1" dev="loop1" ino=13 res=0 errno=0 [ 276.751625][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 276.789947][ T4355] usb 3-1: Using ep0 maxpacket: 32 [ 276.799673][ T4355] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 276.845467][ T4355] usb 3-1: config 0 has no interface number 0 [ 276.912094][ T4355] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 276.977197][ T4355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.000341][ T4355] usb 3-1: Product: syz [ 277.004682][ T4355] usb 3-1: Manufacturer: syz [ 277.035642][ T4355] usb 3-1: SerialNumber: syz [ 277.066645][ T4355] usb 3-1: config 0 descriptor?? [ 277.109333][ T4355] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 278.574059][ T26] audit: type=1326 audit(1771774899.242:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5538 comm="syz.3.336" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd9e79c629 code=0x0 [ 278.595846][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.646547][ T4355] usb 3-1: selecting invalid altsetting 1 [ 278.662960][ T4355] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 278.725723][ T4355] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 278.767108][ T4355] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 278.820666][ T4355] usb 3-1: media controller created [ 278.913127][ T4355] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.081397][ T4355] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 279.110157][ T4355] zl10353_read_register: readreg error (reg=127, ret==-71) [ 279.140806][ T4355] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 279.355614][ T4355] usb 3-1: USB disconnect, device number 3 [ 282.743855][ T5551] loop1: detected capacity change from 0 to 256 [ 283.612765][ T5563] loop3: detected capacity change from 0 to 512 [ 283.674723][ T5563] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 283.803274][ T5563] EXT4-fs (loop3): 1 truncate cleaned up [ 283.811872][ T5563] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 283.964471][ T5567] loop1: detected capacity change from 0 to 512 [ 284.108015][ T5567] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 284.194082][ T5563] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 1660 vs 220 free clusters [ 284.249946][ T5567] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.289476][ T5576] loop2: detected capacity change from 0 to 40427 [ 287.313447][ T5576] F2FS-fs (loop2): Invalid log sectors per block(0) log sectorsize(9) [ 287.321803][ T5576] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 287.328004][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 287.340848][ T5576] F2FS-fs (loop2): invalid crc value [ 287.347809][ T5576] F2FS-fs (loop2): SIT is corrupted node# 0 vs 7 [ 287.355610][ T5576] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 287.382908][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 289.257159][ T26] audit: type=1326 audit(1771774909.922:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5579 comm="syz.1.347" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f948b39c629 code=0x0 [ 289.278833][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.729954][ T4320] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 289.989904][ T4320] usb 4-1: Using ep0 maxpacket: 32 [ 290.000228][ T4320] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 290.032787][ T4320] usb 4-1: config 0 has no interface number 0 [ 290.058770][ T4320] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 290.105068][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.142968][ T4320] usb 4-1: Product: syz [ 290.160821][ T4320] usb 4-1: Manufacturer: syz [ 290.165761][ T4320] usb 4-1: SerialNumber: syz [ 290.224328][ T4320] usb 4-1: config 0 descriptor?? [ 290.247549][ T4320] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 290.278746][ T4320] usb 4-1: selecting invalid altsetting 1 [ 290.299648][ T4320] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 290.333561][ T4320] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 290.377588][ T4320] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 290.411266][ T4320] usb 4-1: media controller created [ 290.479499][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 290.600143][ T4320] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 290.607258][ T4320] zl10353_read_register: readreg error (reg=127, ret==-71) [ 290.659934][ T4320] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 290.936181][ T4320] usb 4-1: USB disconnect, device number 8 [ 300.509813][ T4320] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 300.773834][ T4320] usb 1-1: Using ep0 maxpacket: 32 [ 300.806287][ T4320] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 300.891970][ T5647] loop3: detected capacity change from 0 to 128 [ 301.351469][ T4320] usb 1-1: config 0 has no interface number 0 [ 301.385877][ T4320] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 301.446605][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.961517][ T4320] usb 1-1: Product: syz [ 301.987766][ T4320] usb 1-1: Manufacturer: syz [ 302.005704][ T4320] usb 1-1: SerialNumber: syz [ 302.043010][ T4320] usb 1-1: config 0 descriptor?? [ 302.084525][ T4320] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 302.119658][ T4320] usb 1-1: selecting invalid altsetting 1 [ 302.135193][ T4320] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 302.187945][ T4320] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 302.257276][ T4320] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 302.299432][ T4320] usb 1-1: media controller created [ 302.350833][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 302.424558][ T5655] loop2: detected capacity change from 0 to 1024 [ 302.450120][ T4320] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 302.469865][ T4320] zl10353_read_register: readreg error (reg=127, ret==-71) [ 302.484735][ T5655] EXT4-fs: Ignoring removed mblk_io_submit option [ 302.507579][ T5655] ext4: Unknown parameter 'nojournal_c' [ 302.513850][ T4320] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 302.635357][ T4320] usb 1-1: USB disconnect, device number 4 [ 305.639568][ T5675] loop4: detected capacity change from 0 to 1024 [ 305.729404][ T5675] EXT4-fs: Ignoring removed nomblk_io_submit option [ 305.806220][ T5675] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 305.868661][ T5681] loop1: detected capacity change from 0 to 512 [ 305.886120][ T5675] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 305.909996][ T5675] System zones: 0-1, 3-36 [ 305.964080][ T5675] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 306.028814][ T5681] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 306.113085][ T5681] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 306.156349][ T5681] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.378: Corrupt directory, running e2fsck is recommended [ 306.206568][ T5681] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 306.302528][ T5681] EXT4-fs error (device loop1): ext4_iget_extra_inode:4756: inode #15: comm syz.1.378: corrupted in-inode xattr [ 306.317461][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 306.357547][ T5681] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.378: couldn't read orphan inode 15 (err -117) [ 306.655075][ T5688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'. [ 307.826647][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 307.850157][ T5681] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 308.013422][ T5681] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 308.056808][ T5681] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 308.102473][ T5681] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.378: Corrupt directory, running e2fsck is recommended [ 308.159339][ T5693] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 308.230317][ T5693] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 308.269915][ T5693] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.378: Corrupt directory, running e2fsck is recommended [ 308.340432][ T5681] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 308.488317][ T5681] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 308.508661][ T5681] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.378: Corrupt directory, running e2fsck is recommended [ 308.586777][ T5693] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 308.615608][ T5699] loop3: detected capacity change from 0 to 128 [ 308.640278][ T5699] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 308.809156][ T46] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 308.825734][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 308.869391][ T4280] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 310.283621][ T5701] loop3: detected capacity change from 0 to 40427 [ 310.417379][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 310.460755][ T5701] F2FS-fs (loop3): Invalid log sectors per block(0) log sectorsize(9) [ 310.469017][ T5701] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 310.480826][ T5701] F2FS-fs (loop3): invalid crc value [ 310.508813][ T5701] F2FS-fs (loop3): SIT is corrupted node# 0 vs 7 [ 310.516025][ T5701] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 310.520213][ T4327] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 310.603130][ T4409] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 310.723712][ T5701] loop3: detected capacity change from 0 to 4096 [ 310.749912][ T4327] usb 5-1: Using ep0 maxpacket: 32 [ 310.773587][ T4327] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.812693][ T5701] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 310.822233][ T4327] usb 5-1: config 0 has no interface number 0 [ 310.852965][ T4327] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 310.867385][ T4327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.879635][ T4327] usb 5-1: Product: syz [ 310.884347][ T4327] usb 5-1: Manufacturer: syz [ 310.889608][ T4327] usb 5-1: SerialNumber: syz [ 310.917383][ T4327] usb 5-1: config 0 descriptor?? [ 310.952986][ T4327] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 310.965244][ T4327] usb 5-1: selecting invalid altsetting 1 [ 310.973221][ T4327] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 311.025575][ T4327] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 311.037608][ T4327] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 311.048282][ T4327] usb 5-1: media controller created [ 311.199142][ T4327] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 311.364837][ T5701] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 311.511457][ T4327] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 311.549182][ T4327] zl10353_read_register: readreg error (reg=127, ret==-71) [ 311.580446][ T4327] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 311.791773][ T4327] usb 5-1: USB disconnect, device number 4 [ 311.962734][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 312.530148][ T5737] loop3: detected capacity change from 0 to 512 [ 312.544007][ T5737] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 314.821817][ T4287] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 317.079858][ T4320] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 317.289809][ T4320] usb 5-1: Using ep0 maxpacket: 32 [ 317.296748][ T4320] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 317.339069][ T4320] usb 5-1: config 0 has no interface number 0 [ 317.346853][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.353272][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.419870][ T4320] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 317.459894][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.468009][ T4320] usb 5-1: Product: syz [ 317.479840][ T4320] usb 5-1: Manufacturer: syz [ 317.489368][ T4320] usb 5-1: SerialNumber: syz [ 317.540733][ T4320] usb 5-1: config 0 descriptor?? [ 317.566902][ T4320] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 317.609882][ T4320] usb 5-1: selecting invalid altsetting 1 [ 317.635466][ T4320] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 317.683645][ T4320] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 317.727940][ T4320] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 317.774408][ T4320] usb 5-1: media controller created [ 317.837674][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 317.935427][ T4320] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 317.946074][ T4320] zl10353_read_register: readreg error (reg=127, ret==-71) [ 317.980854][ T4320] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 318.099363][ T4320] usb 5-1: USB disconnect, device number 5 [ 318.436602][ T5778] loop0: detected capacity change from 0 to 512 [ 319.921315][ C0] ------------[ cut here ]------------ [ 319.927128][ C0] WARNING: CPU: 0 PID: 15 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0x1233/0x1600 [ 319.937144][ C0] Modules linked in: [ 319.941201][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 319.948532][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 319.958705][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 319.965177][ C0] Code: 24 4c 89 e7 e8 ae 2d 0b f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 a9 96 d2 f7 0f 0b e9 f6 f7 ff ff e8 9d 96 d2 f7 <0f> 0b e9 48 fb ff ff e8 91 96 d2 f7 48 c7 c7 b0 cc fa 8d 4c 89 e6 [ 319.984926][ C0] RSP: 0018:ffffc900001478b0 EFLAGS: 00010246 [ 319.991031][ C0] RAX: ffffffff89afde83 RBX: ffffffff89afcc86 RCX: ffff88813feb3b80 [ 319.999105][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.007150][ C0] RBP: 0000000000000000 R08: ffff88813feb3b80 R09: 0000000000000003 [ 320.015231][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880203e6228 [ 320.023257][ C0] R13: dffffc0000000000 R14: ffff8880203e6760 R15: ffff88807d39b024 [ 320.031280][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 320.040416][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.047030][ C0] CR2: 00007fbd9e7e9d40 CR3: 000000001e729000 CR4: 00000000003506f0 [ 320.055246][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 320.063283][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 320.071416][ C0] Call Trace: [ 320.074900][ C0] [ 320.077891][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 320.083508][ C0] ieee80211_beacon_get_tim+0x63/0x4e0 [ 320.088994][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 320.094597][ C0] ? read_lock_is_recursive+0x10/0x10 [ 320.100110][ C0] __iterate_interfaces+0x243/0x500 [ 320.105416][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 320.111700][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 320.118937][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 320.125226][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 320.132343][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 320.137579][ C0] __hrtimer_run_queues+0x560/0xd70 [ 320.142841][ C0] ? hw_scan_work+0xf50/0xf50 [ 320.147545][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 320.152707][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 320.158797][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 320.163983][ C0] handle_softirqs+0x2a1/0x930 [ 320.168760][ C0] ? run_ksoftirqd+0xa4/0x100 [ 320.173479][ C0] ? do_softirq+0x210/0x210 [ 320.178026][ C0] run_ksoftirqd+0xa4/0x100 [ 320.182615][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 320.187830][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 320.193300][ C0] ? takeover_tasklets+0x770/0x770 [ 320.199320][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 320.204587][ C0] smpboot_thread_fn+0x64a/0xa40 [ 320.209553][ C0] ? smpboot_thread_fn+0x4c/0xa40 [ 320.214645][ C0] kthread+0x29d/0x330 [ 320.218837][ C0] ? cpu_report_death+0x240/0x240 [ 320.224206][ C0] ? kthread_blkcg+0xd0/0xd0 [ 320.228830][ C0] ret_from_fork+0x1f/0x30 [ 320.233320][ C0] [ 320.236349][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 320.243645][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 320.250942][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 320.261003][ C0] Call Trace: [ 320.264295][ C0] [ 320.267233][ C0] dump_stack_lvl+0x188/0x24e [ 320.272030][ C0] ? memcpy+0x3c/0x60 [ 320.276038][ C0] ? show_regs_print_info+0x12/0x12 [ 320.281258][ C0] ? load_image+0x400/0x400 [ 320.285949][ C0] panic+0x2e5/0x730 [ 320.289862][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 320.294379][ C0] ? ret_from_fork+0x1f/0x30 [ 320.299071][ C0] __warn+0x2f8/0x4f0 [ 320.303174][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 320.308963][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 320.314715][ C0] report_bug+0x2ba/0x4f0 [ 320.319076][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 320.324814][ C0] handle_bug+0x3a/0x70 [ 320.328996][ C0] exc_invalid_op+0x16/0x40 [ 320.333531][ C0] asm_exc_invalid_op+0x16/0x20 [ 320.338393][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 320.344910][ C0] Code: 24 4c 89 e7 e8 ae 2d 0b f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 a9 96 d2 f7 0f 0b e9 f6 f7 ff ff e8 9d 96 d2 f7 <0f> 0b e9 48 fb ff ff e8 91 96 d2 f7 48 c7 c7 b0 cc fa 8d 4c 89 e6 [ 320.364876][ C0] RSP: 0018:ffffc900001478b0 EFLAGS: 00010246 [ 320.371126][ C0] RAX: ffffffff89afde83 RBX: ffffffff89afcc86 RCX: ffff88813feb3b80 [ 320.379110][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.387262][ C0] RBP: 0000000000000000 R08: ffff88813feb3b80 R09: 0000000000000003 [ 320.395245][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880203e6228 [ 320.403308][ C0] R13: dffffc0000000000 R14: ffff8880203e6760 R15: ffff88807d39b024 [ 320.411514][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 320.417070][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 320.422846][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 320.428403][ C0] ieee80211_beacon_get_tim+0x63/0x4e0 [ 320.433882][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 320.439613][ C0] ? read_lock_is_recursive+0x10/0x10 [ 320.445444][ C0] __iterate_interfaces+0x243/0x500 [ 320.450670][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 320.456924][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 320.464160][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 320.470412][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 320.477467][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 320.482717][ C0] __hrtimer_run_queues+0x560/0xd70 [ 320.487946][ C0] ? hw_scan_work+0xf50/0xf50 [ 320.492653][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 320.497803][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 320.503904][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 320.509066][ C0] handle_softirqs+0x2a1/0x930 [ 320.513857][ C0] ? run_ksoftirqd+0xa4/0x100 [ 320.518861][ C0] ? do_softirq+0x210/0x210 [ 320.523499][ C0] run_ksoftirqd+0xa4/0x100 [ 320.528208][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 320.533537][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 320.538957][ C0] ? takeover_tasklets+0x770/0x770 [ 320.544083][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 320.549662][ C0] smpboot_thread_fn+0x64a/0xa40 [ 320.554848][ C0] ? smpboot_thread_fn+0x4c/0xa40 [ 320.559989][ C0] kthread+0x29d/0x330 [ 320.564074][ C0] ? cpu_report_death+0x240/0x240 [ 320.569114][ C0] ? kthread_blkcg+0xd0/0xd0 [ 320.573719][ C0] ret_from_fork+0x1f/0x30 [ 320.578282][ C0] [ 320.581929][ C0] Kernel Offset: disabled [ 320.586321][ C0] Rebooting in 86400 seconds..