last executing test programs: 4m34.677731329s ago: executing program 2 (id=10): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, 0x0, 0x0) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) open(0x0, 0x143082, 0x80) 4m34.578074553s ago: executing program 2 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000180)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private1}, 0x80, 0x0}, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000002680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002640)={&(0x7f0000000600)={0xe80, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xe6c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe62, 0x5, "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"}]}]}, 0xe80}, 0x1, 0x0, 0x0, 0x4004c084}, 0x24000000) 4m33.438929209s ago: executing program 2 (id=12): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xc, 0xac, &(0x7f0000000100)="$eJzs0jFqwzAUBuBnY7cdu3foDXwHn6BnMB3tzZNLJ9+nlyh07RFygwxZsygYyUP2QAh8H0hPP/8ikP7PP2+xRryvESmlJu2aSPPyNQ7TvLTjMEVEG3+RVWU+Bw+uLs/ZR/4DWz72uatKfzh9f+4rNx+/eT7d7+IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEPV63Wuo+vK8WXbLgEAAP//2Bwh+A==") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) io_setup(0x8, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) 4m32.208496388s ago: executing program 2 (id=14): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_PTRACER(0x59616d61, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x733, &(0x7f00000002c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) read$FUSE(r0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) syz_clone3(&(0x7f00000016c0)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r4, 0x0, 0x0, 0x14, 0x0) 4m30.800517703s ago: executing program 2 (id=18): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x48}}, 0x0) 4m29.190397154s ago: executing program 2 (id=23): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0xb8011, r1, 0xf7e33000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 4m28.442505968s ago: executing program 32 (id=23): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0xb8011, r1, 0xf7e33000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 2m37.14268992s ago: executing program 3 (id=300): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000f80)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = semget$private(0x0, 0x6, 0x0) semctl$GETVAL(0x0, 0x1, 0xc, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(r5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 2m30.82351761s ago: executing program 3 (id=309): syz_open_dev$media(&(0x7f0000000100), 0xfffffffffffffffc, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x0, 0x5}, 0x0, {}, 0x67, 0x2}) 2m24.604804448s ago: executing program 3 (id=316): r0 = syz_open_dev$video(&(0x7f0000000b80), 0x8, 0x42100) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x2, 0x6e5, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000bc0)=0x3000000) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x8e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x8ffff) write$capi20(r4, &(0x7f0000000040)={0x10, 0x1, 0x806f2b03f777af16, 0x0, 0xfe, 0x4}, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x12, r4, 0x5000) 2m23.641643259s ago: executing program 3 (id=319): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) semget(0x0, 0x1, 0x201) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000003c0)) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=@acquire={0x130, 0x17, 0x1, 0x70bd27, 0x25dfdbfb, {{@in6=@mcast2, 0x4d3}, @in6=@loopback, {@in=@dev={0xac, 0x14, 0x14, 0x26}, @in=@rand_addr=0x64010101, 0x4e24, 0x4, 0x4e20, 0x7, 0xa, 0x120, 0xa0, 0x21}, {{@in=@loopback, @in6=@empty, 0x4e23, 0x0, 0x4e21, 0x2, 0xa, 0x80, 0x20, 0x21}, {0x6, 0x100000000, 0x71e, 0xfffffffffffffffa, 0x0, 0x9, 0x1, 0x80000000}, {0x38dc, 0x7f, 0x0, 0x6}, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x9, 0xb, 0xfc, 0x70bd2c}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x3}]}, 0x130}}, 0x4004010) 2m21.859753206s ago: executing program 3 (id=321): syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x33, &(0x7f00000190c0)=0x5, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76", 0x16) io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x31, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x31, &(0x7f0000000080), 0x4) 2m18.916003759s ago: executing program 3 (id=331): unshare(0x20000400) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x2a, 0x107, 0xfffffffc, 0x25dfdbff, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x20004805}, 0xc000) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ac1414aa050007008400000006000440462000000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 2m6.127855056s ago: executing program 4 (id=354): openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r0 = dup(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x50) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xa) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2m4.827748358s ago: executing program 4 (id=357): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x40033e, 0x2f) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 2m3.844156169s ago: executing program 33 (id=331): unshare(0x20000400) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x2a, 0x107, 0xfffffffc, 0x25dfdbff, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x20004805}, 0xc000) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ac1414aa050007008400000006000440462000000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 1m51.582410779s ago: executing program 4 (id=379): userfaultfd(0x1) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04223d04"], 0x40) syz_io_uring_setup(0x131, 0x0, 0x0, 0x0, 0x0) 1m50.29264543s ago: executing program 4 (id=382): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) close(0x3) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x1, 0x2}) 1m49.132089417s ago: executing program 4 (id=384): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) 1m49.038388559s ago: executing program 4 (id=386): syz_open_dev$vcsu(&(0x7f00000003c0), 0x7, 0x200000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c000780180001801400"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) gettid() mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0xffffff37, 0xc934, 0x0, 0x10001, 0x40003, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) 1m32.149654967s ago: executing program 34 (id=386): syz_open_dev$vcsu(&(0x7f00000003c0), 0x7, 0x200000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c000780180001801400"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) gettid() mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0xffffff37, 0xc934, 0x0, 0x10001, 0x40003, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) 8.627144595s ago: executing program 1 (id=595): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) r0 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x16b5, 0x41) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x80, 0x6, 0x102, 0x0, 0x4b, 0x6, 0x0}) 8.47519843s ago: executing program 1 (id=599): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000006c0)={'dummy0\x00', &(0x7f0000000680)=@ethtool_stats={0x1d, 0x1, [0x5]}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) writev(r0, &(0x7f0000003340)=[{&(0x7f00000000c0)="4f3bf5835e000000002251a1d6958c78cfc0e1f14f1b257f40", 0x19}, {&(0x7f0000002140)="eb426e", 0x3}], 0x2) 8.346946864s ago: executing program 1 (id=601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x6, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4020) 8.176271819s ago: executing program 1 (id=605): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x18, &(0x7f00000001c0)={0x40, 0x8, 0x21, "fde61e0ee4a63b9eab09264e21dbabbc7edcc543bc9ecb55eda010b9537d762102"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xe3}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x6, "348b35e528e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000540)=""/99, 0x63) read$char_usb(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 6.463859713s ago: executing program 0 (id=617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0x170001, 0x10a000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80e40, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x400040) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xa) syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x2200082, &(0x7f0000000140)=ANY=[], 0xfe, 0x15b, &(0x7f0000000280)="$eJzs0UlrGmEcx/HvM/O4QBVbakFKW4UWaisFF9pbKU6pVKgdaOmlJ8FOF1AsEZIclZBbDkKuHrJcQ96CRg8hQS/Jm8jFWyBHw8yYhCwv4f+5ze+/wTyf3k/Siisfm43/C06r5fxKfbMrpe8n/X7RzYNA+Frd7x8U4S+awQuYdsCNR1H4/a/uGLVm3f2eFiEEWPfmOY3YxT0rruloyOHPp5/D8JHXZ3A7cwoEvLnHGqyYn2WBJ5vwkhnWAz9z950CJigVnB97arJaziQfKljuZXZ3Dr+OD8pvXn9w1vKl7qtIwswAW1gqvD/6c2zOpybjyhe7Yk8K+fy7QjZn8PbIW9juoj9HFuGnAu3uM/D2BUk80z9gRcG6d2u6p6LAcOPMboQu/3V7yUyBSvZq1URguxq/b2CmtVuZcQev4j2CEEIIIYQQQgghhBBCCCGEEEIIccN5AAAA//9YP1Ga") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, &(0x7f0000000040)) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_vhci(0x0, 0x22) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0x1, 0xfd, 0x2, 0x8, 0x6b, 0x0, 0x3, 0xa3, 0x4, [0x2, 0x101, 0x86, 0x66, 0x5, 0x40800, 0x4, 0x8]}}) openat(0xffffffffffffff9c, 0x0, 0x41842, 0x136) 4.826161876s ago: executing program 7 (id=619): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x800) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff9, 0x100a99e, 0x10}) io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0xe5c4, 0x40, 0x6, 0x23}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="137c0300231a05002c0012800e0001006970366772657461700000001800028014000700000000000000000000000000020000000d0001"], 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x20040840) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x34, 0x0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x34}}, 0x0) 4.178403446s ago: executing program 0 (id=621): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x20004040) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0xc0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0xe, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3fd, 0x0, 0x0, 0x0, 0xfe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x4000}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, &(0x7f00000000c0), 0x18) connect$can_j1939(r4, &(0x7f0000000240)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x3}}, 0x18) sendmmsg(r4, 0x0, 0x0, 0x4) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000440)=@userptr={0x0, 0x2, 0x4, 0x408, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0xff, 0x14, "c4363c16"}, 0x1, 0x2, {0x0}, 0x7000000}) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x20000840) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 4.05472162s ago: executing program 6 (id=622): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x2968, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0xb, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x18, &(0x7f0000000140)={0x40, 0x9, 0x2c, {0x2c, 0x10, "e75bcfb03d43af0c0ab502d8cf47a88ac334ee0bb519068ecbcce31b3390979534d2dd23136b3103db14"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.4239779s ago: executing program 7 (id=623): socket$kcm(0x10, 0x2, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000140)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x41}], 0x2) gettid() listen(0xffffffffffffffff, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) 3.288402315s ago: executing program 5 (id=624): syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, 0x0) r2 = syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = syz_open_dev$evdev(0x0, 0x3, 0x640000) ioctl$EVIOCGBITSW(r4, 0x40095505, 0x0) 3.250931126s ago: executing program 0 (id=625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 2.879766318s ago: executing program 6 (id=626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x9c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x7b, 0x3, "fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f4f247aa2bc4978345407669db4999bf4d277be1203e812a25bea54f1839749e2fcf0c6c1bb457b5bfa52e41edd07d452fbea5fa0e0d5083a5cd3809bf3b6"}]}], {0x14}}, 0xc4}}, 0x0) 2.873508098s ago: executing program 1 (id=627): r0 = timerfd_create(0x8, 0x80000) close_range(r0, 0xffffffffffffffff, 0x6) 2.723278773s ago: executing program 0 (id=628): socket$inet6(0xa, 0x80002, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r1, 0x1) 2.555767258s ago: executing program 6 (id=629): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x800) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff9, 0x100a99e, 0x10}) r3 = io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0xe5c4, 0x40, 0x6, 0x23}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="137c0300231a05002c0012800e0001006970366772657461700000001800028014000700000000000000000000000000020000000d0001"], 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x20040840) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2c, 0x0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x2c}}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) 2.526881889s ago: executing program 7 (id=630): mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) unshare(0x400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 2.523203529s ago: executing program 1 (id=631): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0x80000000, 0xf, 0x8, 0x80, 0x2, 0x318, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0xbc5b, 0x80000001, 0x25, 0x11, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x5, 0x3, 0x8, 0x2, 0x8, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x10000, 0x200, 0x3e, 0x7fffffff, 0x6, 0x6, 0x2, 0x9, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x9, 0x5, 0xfffffff7, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0xfffff001, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x4, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x0, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0x5, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0xf94, 0x9, 0x5, 0x7fff, 0xc2, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x3, 0x5, 0x1, 0x486, 0x3, 0x303c, 0x3e7, 0x4, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d04, 0x6, 0x1, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x47, 0xaa, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x9, 0x5, 0x1c, 0x120000, 0x3, 0x7f, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x69d9, 0xb, 0x5, 0x4, 0x6, 0x0, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb70, 0x101, 0x10000, 0x4, 0x7fff, 0x14000, 0x7f, 0x2, 0x5, 0x7, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7fffffff, 0x1, 0x98, 0xa1f, 0xf40, 0x2, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.368039054s ago: executing program 0 (id=632): timer_create(0x2, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) unshare(0x44040200) timer_settime(r0, 0x1, &(0x7f0000000380)={{}, {0x0, 0x3938700}}, &(0x7f00000003c0)) 2.363994044s ago: executing program 5 (id=633): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@fd={0x13c, 0x6, 0x4, 0xa3, 0x4, {0x0, 0xea60}, {0x4, 0x0, 0xc, 0x1d, 0xf1, 0x40, "9a71fa08"}, 0x4}) 2.315032415s ago: executing program 7 (id=634): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64=0x0, @ANYRES8, @ANYRES64], 0x2, 0x1c4, &(0x7f0000000280)="$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") 2.17208486s ago: executing program 5 (id=635): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000003100)='/', 0x1}], 0x1) 2.123845442s ago: executing program 7 (id=636): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) r2 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x80, 0x7, @local, 0x3aa7}, @ib={0x1b, 0x7, 0x0, {"0700000000000000025e5bc3004000"}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x2}}, 0x18) 2.048443174s ago: executing program 5 (id=637): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "611aa09f6de4ef2a", "4867f60c9366f8caca55097828d9173185df9cd607089de85deb98049bc3b01e", "7185a435", 'N_3\t\x00\x00\x008'}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.116136234s ago: executing program 6 (id=638): r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) read(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$FUSE_STATX(r0, 0x0, 0x0) 1.036750276s ago: executing program 5 (id=639): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000002700)=""/4088, 0xff8}], 0x1, 0x15c, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f00000003c0), 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) read(r4, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04223d04"], 0x40) 949.393919ms ago: executing program 0 (id=640): close(0xffffffffffffffff) socket(0x28, 0x5, 0x0) listen(0xffffffffffffffff, 0x4) syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) 871.722761ms ago: executing program 7 (id=641): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xcc, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x4e4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x40000000015, 0x5, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) write$P9_RMKNOD(r3, 0x0, 0x0) timer_create(0x7, 0x0, &(0x7f0000bbdffc)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) 871.515321ms ago: executing program 6 (id=642): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[], 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) 18.560759ms ago: executing program 5 (id=643): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 0s ago: executing program 6 (id=644): r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x400) syz_usb_connect$uac3(0x3, 0x80, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x20000000) set_mempolicy(0x6005, &(0x7f0000000080)=0x1, 0x40000004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth1_to_batadv\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x4b, 0x44, "4b721b782a17a7b6a00d960a64048655bcb0b0ac551fdb8a571f6b3c1cb52ecdf3e8721b8ac2e30000ff5ee018d48c7c3b54f8dbdeee0aab7d3d8edaf144e5d524000000"}}) unshare(0x22020400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r3, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00000002c0)=0x7) kernel console output (not intermixed with test programs): : hci3: command 0x0419 tx timeout [ 72.499894][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 72.507029][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.519888][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 72.526855][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 72.550094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.967782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.445598][ T4295] loop2: detected capacity change from 0 to 65 [ 74.163372][ T4295] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 74.377640][ T4299] loop4: detected capacity change from 0 to 131072 [ 74.896106][ T4315] xt_hashlimit: size too large, truncated to 1048576 [ 74.907720][ T4299] F2FS-fs (loop4): Test dummy encryption mode enabled [ 75.016769][ T4319] loop2: detected capacity change from 0 to 164 [ 75.710557][ T4299] F2FS-fs (loop4): invalid crc value [ 75.717695][ T4318] loop3: detected capacity change from 0 to 1024 [ 75.727071][ T4319] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 75.745314][ T4312] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 75.756745][ T4312] rock: directory entry would overflow storage [ 75.763138][ T4312] rock: sig=0x4f50, size=4, remaining=3 [ 75.768734][ T4312] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 75.831304][ T4299] F2FS-fs (loop4): Found nat_bits in checkpoint [ 75.891337][ T4299] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 75.945166][ T4190] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 76.040740][ T4190] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 76.078122][ T4190] rock: directory entry would overflow storage [ 76.089259][ T4190] rock: sig=0x4f50, size=4, remaining=3 [ 76.100353][ T4299] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 76.140276][ T4190] iso9660: Corrupted directory entry in block 3 of inode 1856 [ 76.148675][ T4190] VFS: Lookup of '' in iso9660 loop2 would have caused loop [ 76.209880][ T4190] VFS: Lookup of '' in iso9660 loop2 would have caused loop [ 77.225985][ T4344] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 77.473643][ T4339] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.896673][ T26] audit: type=1326 audit(1780383314.892:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.3.22" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba88a52e59 code=0x7ffc0000 [ 78.368267][ T26] audit: type=1326 audit(1780383314.892:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.3.22" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba88a52e59 code=0x7ffc0000 [ 78.474700][ T26] audit: type=1326 audit(1780383314.902:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.3.22" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fba88a52e59 code=0x7ffc0000 [ 78.504175][ T4339] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.516898][ T26] audit: type=1326 audit(1780383314.902:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.3.22" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba88a52e59 code=0x7ffc0000 [ 78.556337][ T26] audit: type=1326 audit(1780383314.902:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.3.22" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba88a52e59 code=0x7ffc0000 [ 78.583343][ T26] audit: type=1326 audit(1780383314.902:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.3.22" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba88a52e59 code=0x7ffc0000 [ 78.607947][ T26] audit: type=1326 audit(1780383314.902:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.3.22" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba88a52e59 code=0x7ffc0000 [ 78.649152][ T4352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25'. [ 78.661342][ T26] audit: type=1326 audit(1780383314.912:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.3.22" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba88a52e59 code=0x7ffc0000 [ 78.671670][ T4352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25'. [ 78.729181][ T4352] device team0 entered promiscuous mode [ 78.769999][ T26] audit: type=1326 audit(1780383314.912:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.3.22" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fba88a52e59 code=0x7ffc0000 [ 78.805462][ T4352] device team_slave_0 entered promiscuous mode [ 78.819333][ T4352] device team_slave_1 entered promiscuous mode [ 78.841817][ T4352] device bond0 entered promiscuous mode [ 78.847445][ T4352] device bond_slave_0 entered promiscuous mode [ 78.859532][ T26] audit: type=1326 audit(1780383314.912:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.3.22" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba88a52e59 code=0x7ffc0000 [ 78.955217][ T4352] device bond_slave_1 entered promiscuous mode [ 78.993237][ T4352] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 79.042668][ T4339] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.102804][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 79.178241][ T4339] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.654035][ T4354] loop3: detected capacity change from 0 to 32768 [ 79.665643][ T4355] chnl_net:caif_netlink_parms(): no params data found [ 79.687388][ T4366] loop0: detected capacity change from 0 to 1024 [ 79.700588][ T4354] ======================================================= [ 79.700588][ T4354] WARNING: The mand mount option has been deprecated and [ 79.700588][ T4354] and is ignored by this kernel. Remove the mand [ 79.700588][ T4354] option from the mount to silence this warning. [ 79.700588][ T4354] ======================================================= [ 79.781776][ T4366] EXT4-fs (loop0): Ignoring removed oldalloc option [ 79.788512][ T4366] EXT4-fs (loop0): Ignoring removed orlov option [ 79.890808][ T4366] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,nojournal_checksum,jqfmt=vfsv0,norecovery,debug_want_extra_isize=0x0000000000000036,orlov,journal_ioprio=0x0000000000000003,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 79.951677][ T4354] JBD2: Ignoring recovery information on journal [ 80.176985][ T4354] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 80.198743][ T4355] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.342882][ T4355] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.380341][ T4355] device bridge_slave_0 entered promiscuous mode [ 80.442529][ T4355] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.696131][ T4354] syz.3.26 (4354) used greatest stack depth: 20408 bytes left [ 80.706416][ T4355] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.996964][ T4355] device bridge_slave_1 entered promiscuous mode [ 81.163476][ T4196] ocfs2: Unmounting device (7,3) on (node local) [ 81.170418][ T4231] Bluetooth: hci3: command 0x0409 tx timeout [ 81.395924][ T4355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.517150][ T4355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.026873][ T4355] team0: Port device team_slave_0 added [ 82.239935][ T4355] team0: Port device team_slave_1 added [ 82.468576][ T4355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.503347][ T4408] loop0: detected capacity change from 0 to 256 [ 82.507665][ T4355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.566206][ T4408] exfat: Deprecated parameter 'namecase' [ 82.579581][ T4355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.597342][ T4408] exfat: Unknown parameter 'keep_last_dots' [ 82.678888][ T4355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.689685][ T4355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.786308][ T4405] loop3: detected capacity change from 0 to 8192 [ 82.799592][ T4355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.873145][ T4181] loop3: p2 p4 < > [ 82.883239][ T4181] loop3: p2 size 16777217 extends beyond EOD, truncated [ 82.978645][ T4355] device hsr_slave_0 entered promiscuous mode [ 82.994079][ T4405] loop3: p2 p4 < > [ 82.998708][ T4405] loop3: p2 size 16777217 extends beyond EOD, truncated [ 83.020017][ T4355] device hsr_slave_1 entered promiscuous mode [ 83.026829][ T4355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.066154][ T4355] Cannot create hsr debugfs directory [ 83.240581][ T4194] Bluetooth: hci3: command 0x041b tx timeout [ 83.358915][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 83.379157][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 83.640282][ T4355] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 83.688609][ T4355] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 83.700152][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 83.713512][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 83.760785][ T4355] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 83.822343][ T4355] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.822859][ T4423] loop1: detected capacity change from 0 to 4096 [ 83.861512][ T4339] device hsr_slave_0 left promiscuous mode [ 83.878395][ T4339] device hsr_slave_1 left promiscuous mode [ 83.891411][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.909290][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.932095][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.941280][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.951677][ T4423] __ntfs_error: 4 callbacks suppressed [ 83.951692][ T4423] ntfs: (device loop1): parse_options(): Unrecognized mount option  ¯øŒ£—P´Ñsz. [ 83.982282][ T4339] device bridge_slave_1 left promiscuous mode [ 83.989794][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.057832][ T4339] device bridge_slave_0 left promiscuous mode [ 84.079935][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.178482][ T4339] device veth1_macvtap left promiscuous mode [ 84.199283][ T4339] device veth0_macvtap left promiscuous mode [ 84.225641][ T4339] device veth1_vlan left promiscuous mode [ 84.251427][ T4339] device veth0_vlan left promiscuous mode [ 84.418799][ T4438] loop1: detected capacity change from 0 to 1024 [ 84.862283][ T4342] hfsplus: b-tree write err: -5, ino 25 [ 84.883893][ T4342] hfsplus: b-tree write err: -5, ino 4 [ 84.904848][ T4342] hfsplus: b-tree write err: -5, ino 2 [ 84.913305][ T4342] hfsplus: b-tree write err: -5, ino 26 [ 84.999633][ T4232] Bluetooth: hci5: command 0x1003 tx timeout [ 85.005911][ T4204] Bluetooth: hci5: sending frame failed (-49) [ 85.012720][ T4339] team0 (unregistering): Port device team_slave_1 removed [ 85.035958][ T4339] team0 (unregistering): Port device team_slave_0 removed [ 85.115497][ T4339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.145271][ T4339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.314770][ T4339] bond0 (unregistering): Released all slaves [ 85.330609][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 85.475221][ T4444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.43'. [ 85.717847][ T4355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.754100][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.771360][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.783872][ T4355] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.842315][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.897332][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.936208][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.943437][ T4342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.047211][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.078261][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.352945][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.533862][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.541061][ T4342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.653926][ T1107] cfg80211: failed to load regulatory.db [ 86.730042][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.835524][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.900863][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.960332][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.988697][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.012196][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.039059][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.080665][ T4232] Bluetooth: hci5: command 0x1001 tx timeout [ 87.086804][ T4204] Bluetooth: hci5: sending frame failed (-49) [ 87.159881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.191780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.220371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.249562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.373573][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.459307][ T4468] netlink: 44 bytes leftover after parsing attributes in process `syz.3.48'. [ 87.644249][ T4448] loop1: detected capacity change from 0 to 32768 [ 87.797651][ T4448] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.45 (4448) [ 87.815869][ T1107] Bluetooth: hci3: command 0x0419 tx timeout [ 87.885980][ T4448] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 87.898693][ T4448] BTRFS info (device loop1): setting nodatacow, compression disabled [ 87.914068][ T4448] BTRFS info (device loop1): setting datasum, datacow enabled [ 87.949768][ T4448] BTRFS info (device loop1): force clearing of disk cache [ 87.980400][ T4448] BTRFS info (device loop1): enabling ssd optimizations [ 87.987426][ T4448] BTRFS info (device loop1): using spread ssd allocation scheme [ 88.046365][ T4448] BTRFS info (device loop1): turning on sync discard [ 88.074198][ T4448] BTRFS info (device loop1): turning on flush-on-commit [ 88.105721][ T4448] BTRFS info (device loop1): not using ssd optimizations [ 88.148469][ T4448] BTRFS info (device loop1): not using spread ssd allocation scheme [ 88.182378][ T4448] BTRFS info (device loop1): using free space tree [ 88.189008][ T4448] BTRFS info (device loop1): has skinny extents [ 88.307983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.329737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.342014][ T4355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.594833][ T4448] BTRFS info (device loop1): clearing free space tree [ 88.610366][ T4448] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 88.659916][ T4448] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 88.865145][ T4448] BTRFS info (device loop1): creating free space tree [ 88.907840][ T4448] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 88.959560][ T4448] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 89.159727][ T1107] Bluetooth: hci5: command 0x1009 tx timeout [ 89.350338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.361198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.616104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.691070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.759196][ T4355] device veth0_vlan entered promiscuous mode [ 89.776408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.800676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.867333][ T4355] device veth1_vlan entered promiscuous mode [ 89.999455][ T4524] loop4: detected capacity change from 0 to 128 [ 90.076677][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.120963][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.180526][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.241696][ T4524] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.258749][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.267211][ T4524] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.320495][ T4355] device veth0_macvtap entered promiscuous mode [ 90.361041][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.421409][ T4355] device veth1_macvtap entered promiscuous mode [ 90.512750][ T4355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.554372][ T4355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.594910][ T4355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.623028][ T4355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.653297][ T4355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.685281][ T4355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.725308][ T4355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.739633][ T4355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.760314][ T4355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.835440][ T4533] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.858543][ T4533] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.965566][ T4554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.55'. [ 90.996078][ T4537] device syzkaller0 entered promiscuous mode [ 91.013243][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.035226][ T4554] netlink: 232 bytes leftover after parsing attributes in process `syz.4.55'. [ 91.049934][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.074815][ T4355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.133312][ T4355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.189827][ T4355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.205943][ T4355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.221260][ T4355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.236924][ T4355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.272135][ T4355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.293016][ T4355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.319318][ T4355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.417289][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.478856][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.523176][ T4355] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.542390][ T4355] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.575388][ T4355] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.609526][ T4355] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.819238][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.843820][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.903849][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.932009][ T4286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.961183][ T4286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.968789][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.104381][ T4560] loop4: detected capacity change from 0 to 32768 [ 92.724454][ T4560] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 93.255636][ T4592] loop0: detected capacity change from 0 to 512 [ 93.361623][ T4565] loop1: detected capacity change from 0 to 32768 [ 93.396515][ T4565] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.59 (4565) [ 93.424127][ T4592] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.459676][ T4592] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.487297][ T4565] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 93.564664][ T4592] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.65: corrupted inode contents [ 93.581305][ T4565] BTRFS info (device loop1): turning off barriers [ 93.590457][ T4565] BTRFS info (device loop1): enabling auto defrag [ 93.596971][ T4565] BTRFS info (device loop1): force zlib compression, level 3 [ 93.615817][ T4592] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #2: comm syz.0.65: mark_inode_dirty error [ 93.680624][ T4187] ocfs2: Unmounting device (7,4) on (node local) [ 93.689912][ T4565] BTRFS info (device loop1): enabling ssd optimizations [ 93.691743][ T4592] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.65: corrupted inode contents [ 93.696929][ T4565] BTRFS info (device loop1): using spread ssd allocation scheme [ 93.847490][ T4592] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.65: mark_inode_dirty error [ 93.909564][ T4565] BTRFS info (device loop1): using free space tree [ 93.916414][ T4565] BTRFS info (device loop1): has skinny extents [ 94.181825][ T4592] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #2: block 21: comm syz.0.65: lblock 0 mapped to illegal pblock 21 (length 1) [ 94.362285][ T4619] loop5: detected capacity change from 0 to 512 [ 94.833745][ T4619] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.063061][ T4589] loop3: detected capacity change from 0 to 32768 [ 95.207836][ T4589] (syz.3.64,4589,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 95.400908][ T4589] (syz.3.64,4589,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 95.618273][ T4589] JBD2: Ignoring recovery information on journal [ 95.705390][ T4565] BTRFS error (device loop1): open_ctree failed: -12 [ 95.759977][ T4585] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm kworker/u4:14: Invalid inode table block 34 in block_group 0 [ 95.781099][ T4180] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by udevd (4180) [ 95.895580][ T4585] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm kworker/u4:14: Invalid inode table block 34 in block_group 0 [ 95.951716][ T4589] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 96.037698][ T4189] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 34 in block_group 0 [ 96.049521][ C1] sched: RT throttling activated [ 96.070915][ T4189] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 96.212632][ T4189] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 96.358065][ T4196] ocfs2: Unmounting device (7,3) on (node local) [ 96.490096][ T4661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 98.592205][ T4681] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 99.761562][ T4709] loop4: detected capacity change from 0 to 8 [ 99.928032][ T4709] unable to read inode lookup table [ 100.069664][ T4712] loop3: detected capacity change from 0 to 4096 [ 100.161062][ T4712] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 100.521762][ T4689] loop5: detected capacity change from 0 to 32768 [ 101.462022][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.554335][ T13] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 102.959299][ T4758] block device autoloading is deprecated and will be removed. [ 103.638515][ T4753] fido_id[4753]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 103.939375][ T4757] loop0: detected capacity change from 0 to 4096 [ 104.447629][ T26] audit: type=1326 audit(1780383342.584:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.4.98" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0460350e59 code=0x0 [ 104.706943][ T4746] loop1: detected capacity change from 0 to 32768 [ 105.090997][ T4746] XFS (loop1): Mounting V5 Filesystem [ 105.275884][ T4746] XFS (loop1): Ending clean mount [ 105.384533][ T4746] XFS (loop1): Quotacheck needed: Please wait. [ 105.564153][ T4800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.106'. [ 105.932982][ T4746] XFS (loop1): Quotacheck: Done. [ 106.285889][ T4188] XFS (loop1): Unmounting Filesystem [ 107.510776][ T4825] loop4: detected capacity change from 0 to 128 [ 109.040515][ T4844] loop0: detected capacity change from 0 to 32768 [ 109.194973][ T4859] loop3: detected capacity change from 0 to 8 [ 109.201411][ T4844] XFS (loop0): Mounting V5 Filesystem [ 109.258522][ T4844] XFS (loop0): Ending clean mount [ 109.269815][ T4844] XFS (loop0): Quotacheck needed: Please wait. [ 109.358948][ T4859] netlink: 232 bytes leftover after parsing attributes in process `syz.3.119'. [ 109.412872][ T4844] XFS (loop0): Quotacheck: Done. [ 109.421714][ T4868] loop1: detected capacity change from 0 to 128 [ 109.667439][ T4868] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.846338][ T4868] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.878364][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.382234][ T4880] device syzkaller1 entered promiscuous mode [ 110.393094][ T4189] XFS (loop0): Unmounting Filesystem [ 110.600426][ T4886] process 'syz.1.107' launched './file1' with NULL argv: empty string added [ 111.089343][ T4855] loop5: detected capacity change from 0 to 32768 [ 111.122209][ T4855] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.118 (4855) [ 111.333706][ T4855] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 111.359674][ T4855] BTRFS info (device loop5): turning on sync discard [ 111.376886][ T4855] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 111.443879][ T4855] BTRFS info (device loop5): use zstd compression, level 3 [ 111.525115][ T4855] BTRFS info (device loop5): turning on async discard [ 111.544957][ T4894] delete_channel: no stack [ 111.580509][ T4855] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 111.592483][ T4855] BTRFS info (device loop5): trying to use backup root at mount time [ 111.600788][ T4855] BTRFS info (device loop5): enabling auto defrag [ 111.612953][ T4855] BTRFS warning (device loop5): excessive commit interval 14058 [ 111.621078][ T4855] BTRFS info (device loop5): using free space tree [ 111.627722][ T4855] BTRFS info (device loop5): has skinny extents [ 111.719887][ T4905] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 112.492760][ T4924] device syzkaller0 entered promiscuous mode [ 114.056738][ T4855] BTRFS error (device loop5): open_ctree failed: -12 [ 114.069872][ T4180] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (4180) [ 114.300972][ T4952] binder: 4951:4952 ioctl c0306201 0 returned -14 [ 116.950373][ T4999] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 117.773405][ T5010] loop3: detected capacity change from 0 to 1024 [ 117.946469][ T5010] EXT4-fs (loop3): error: could not find journal device path: error -2 [ 117.986487][ T5012] tipc: Started in network mode [ 118.012351][ T5012] tipc: Node identity ac14140f, cluster identity 4711 [ 118.058188][ T5012] tipc: New replicast peer: 255.255.255.255 [ 118.068803][ T5012] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 118.077981][ T5012] tipc: Enabled bearer , priority 10 [ 118.167309][ T5019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'. [ 118.201656][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 118.231059][ T5021] rtc_cmos 00:00: Alarms can be up to one day in the future [ 118.349773][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 118.521985][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 118.659715][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 118.799811][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 118.940198][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 119.268612][ T4941] tipc: Node number set to 2886997007 [ 119.369645][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 119.441470][ T5039] netlink: 'syz.3.155': attribute type 10 has an invalid length. [ 119.588855][ T5039] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.596570][ T5039] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.650026][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 119.680746][ T5039] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.687999][ T5039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.697041][ T5039] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.704228][ T5039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.146638][ T5039] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 120.155452][ T5042] device macsec0 entered promiscuous mode [ 120.162297][ T5044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.156'. [ 120.179647][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 120.200408][ T5044] device veth1_macvtap left promiscuous mode [ 120.254774][ T5044] device macsec0 left promiscuous mode [ 120.491001][ T5058] binder: 5057:5058 ioctl c0306201 200000000080 returned -14 [ 120.525881][ T5058] binder: BINDER_SET_CONTEXT_MGR already set [ 120.565847][ T5058] binder: 5057:5058 ioctl 4018620d 200000000040 returned -16 [ 120.631694][ T5064] binder: 5057:5064 ioctl c0306201 2000000003c0 returned -14 [ 120.691793][ T5066] device syzkaller0 entered promiscuous mode [ 120.760744][ T5066] tipc: Started in network mode [ 120.777768][ T5066] tipc: Node identity da6730c93f67, cluster identity 4711 [ 120.813224][ T5066] tipc: Enabled bearer , priority 0 [ 120.859713][ T5065] tipc: Resetting bearer [ 120.964001][ T5065] tipc: Disabling bearer [ 120.979599][ T4647] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.768470][ T5091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.169'. [ 121.813678][ T5091] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.823407][ T5091] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.832548][ T5091] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.841721][ T5091] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.059744][ T5091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.169'. [ 123.209526][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 123.229525][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 123.239510][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 123.249503][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 123.259492][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 123.269501][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 123.279499][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 123.289506][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 123.299501][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 123.329635][ C1] net_ratelimit: 2 callbacks suppressed [ 123.329652][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 123.649219][ T5103] loop5: detected capacity change from 0 to 32768 [ 124.066022][ T5103] XFS (loop5): Mounting V5 Filesystem [ 124.360119][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 124.453260][ T5103] XFS (loop5): Ending clean mount [ 124.459663][ T4647] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 124.465560][ T5103] XFS (loop5): Quotacheck needed: Please wait. [ 124.479718][ T4647] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.623608][ T5103] XFS (loop5): Quotacheck: Done. [ 124.645726][ T4647] usb 1-1: can't set config #1, error -71 [ 124.699668][ T4647] usb 1-1: USB disconnect, device number 2 [ 125.409759][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 126.161599][ T4355] XFS (loop5): Unmounting Filesystem [ 126.274461][ T5151] loop3: detected capacity change from 0 to 512 [ 126.398278][ T5151] EXT4-fs (loop3): Test dummy encryption mode enabled [ 126.454626][ T5151] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 126.518415][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 126.537321][ T5151] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 126.625388][ T5158] loop2: detected capacity change from 0 to 7 [ 126.637496][ T5158] loop2: p1 [ 126.644540][ T5158] loop2: partition table partially beyond EOD, truncated [ 126.652036][ T5151] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.184: bad orphan inode 131083 [ 126.663131][ T5158] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 126.719641][ T5151] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,journal_ioprio=0x0000000000000002,norecovery,,errors=continue. Quota mode: none. [ 126.832821][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 127.530248][ T5128] loop0: detected capacity change from 0 to 40427 [ 127.570260][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 127.671540][ T5151] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 128.828310][ T5192] loop2: detected capacity change from 0 to 7 [ 128.888927][ T4181] loop2: p1 [ 128.894036][ T4181] loop2: partition table partially beyond EOD, truncated [ 128.925801][ T4181] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 129.031623][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 129.044723][ T5192] loop2: p1 [ 129.048229][ T5192] loop2: partition table partially beyond EOD, truncated [ 129.159840][ T5192] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 129.321769][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 129.488096][ T5203] tipc: Enabling of bearer rejected, failed to enable media [ 129.511009][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 129.909656][ T4202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 129.921260][ T4202] CPU: 0 PID: 4202 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 129.928861][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 129.938950][ T4202] Workqueue: hci4 hci_rx_work [ 129.943712][ T4202] Call Trace: [ 129.947019][ T4202] [ 129.949978][ T4202] dump_stack_lvl+0x188/0x250 [ 129.954697][ T4202] ? show_regs_print_info+0x20/0x20 [ 129.959964][ T4202] ? load_image+0x400/0x400 [ 129.964518][ T4202] sysfs_create_dir_ns+0x26a/0x290 [ 129.969666][ T4202] ? sysfs_warn_dup+0xa0/0xa0 [ 129.974378][ T4202] ? process_one_work+0x85f/0x1010 [ 129.979530][ T4202] ? do_raw_spin_unlock+0x11d/0x230 [ 129.984761][ T4202] kobject_add_internal+0x6e0/0xd90 [ 129.990000][ T4202] kobject_add+0x160/0x230 [ 129.994448][ T4202] ? kobject_init+0x1d0/0x1d0 [ 129.999157][ T4202] ? klist_children_get+0x50/0x50 [ 130.004299][ T4202] ? get_device_parent+0x121/0x3f0 [ 130.009449][ T4202] device_add+0x48c/0x1000 [ 130.013918][ T4202] hci_conn_add_sysfs+0xd1/0x1e0 [ 130.018938][ T4202] le_conn_complete_evt+0xc4b/0x15c0 [ 130.024280][ T4202] ? cs_le_create_conn+0x5e0/0x5e0 [ 130.029447][ T4202] ? __mutex_trylock_common+0x155/0x260 [ 130.035037][ T4202] hci_le_meta_evt+0x285/0x3cb0 [ 130.039927][ T4202] ? hci_event_packet+0x37e/0x1370 [ 130.045080][ T4202] ? __lock_acquire+0x7d10/0x7d10 [ 130.050151][ T4202] ? hci_remote_host_features_evt+0x290/0x290 [ 130.056250][ T4202] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 130.061914][ T4202] ? mark_lock+0x94/0x320 [ 130.066277][ T4202] ? mutex_unlock+0x10/0x10 [ 130.070815][ T4202] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 130.076932][ T4202] ? lock_chain_count+0x20/0x20 [ 130.080042][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 130.081814][ T4202] ? __rwlock_init+0x140/0x140 [ 130.094097][ T4202] hci_event_packet+0xe4b/0x1370 [ 130.099069][ T4202] ? lockdep_hardirqs_on+0x94/0x140 [ 130.104314][ T4202] ? rcu_lock_release+0x20/0x20 [ 130.109207][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 130.114444][ T4202] hci_rx_work+0x255/0xa10 [ 130.118912][ T4202] process_one_work+0x85f/0x1010 [ 130.123904][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 130.129574][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 130.134906][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 130.139962][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 130.145896][ T4202] ? wq_worker_running+0x97/0x170 [ 130.150950][ T4202] worker_thread+0xaa6/0x1290 [ 130.155695][ T4202] kthread+0x436/0x520 [ 130.159794][ T4202] ? rcu_lock_release+0x20/0x20 [ 130.164678][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 130.169306][ T4202] ret_from_fork+0x1f/0x30 [ 130.173769][ T4202] [ 130.185950][ T4202] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 130.199762][ T4202] Bluetooth: hci4: failed to register connection device [ 130.644269][ T5223] loop1: detected capacity change from 0 to 1024 [ 131.170390][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 131.400921][ T9] hfsplus: b-tree write err: -5, ino 25 [ 131.501081][ T9] hfsplus: b-tree write err: -5, ino 4 [ 131.579502][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 131.697016][ T9] hfsplus: b-tree write err: -5, ino 2 [ 131.827691][ T9] hfsplus: b-tree write err: -5, ino 17 [ 132.199648][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 132.713419][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.721669][ T4647] Bluetooth: hci4: command 0x2016 tx timeout [ 132.727697][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.104026][ T4204] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 133.114125][ T4204] CPU: 0 PID: 4204 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 133.121721][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.131816][ T4204] Workqueue: hci4 hci_rx_work [ 133.136544][ T4204] Call Trace: [ 133.139854][ T4204] [ 133.142807][ T4204] dump_stack_lvl+0x188/0x250 [ 133.147495][ T4204] ? show_regs_print_info+0x20/0x20 [ 133.152699][ T4204] ? load_image+0x400/0x400 [ 133.157220][ T4204] sysfs_create_dir_ns+0x26a/0x290 [ 133.162346][ T4204] ? sysfs_warn_dup+0xa0/0xa0 [ 133.167037][ T4204] ? process_one_work+0x85f/0x1010 [ 133.172155][ T4204] ? do_raw_spin_unlock+0x11d/0x230 [ 133.177369][ T4204] kobject_add_internal+0x6e0/0xd90 [ 133.182616][ T4204] kobject_add+0x160/0x230 [ 133.187054][ T4204] ? kobject_init+0x1d0/0x1d0 [ 133.191755][ T4204] ? klist_children_get+0x50/0x50 [ 133.196804][ T4204] ? get_device_parent+0x121/0x3f0 [ 133.202457][ T4204] device_add+0x48c/0x1000 [ 133.206890][ T4204] hci_conn_add_sysfs+0xd1/0x1e0 [ 133.211839][ T4204] le_conn_complete_evt+0xc4b/0x15c0 [ 133.217137][ T4204] ? cs_le_create_conn+0x5e0/0x5e0 [ 133.222271][ T4204] ? __mutex_trylock_common+0x155/0x260 [ 133.227890][ T4204] hci_le_meta_evt+0x285/0x3cb0 [ 133.232755][ T4204] ? hci_event_packet+0x37e/0x1370 [ 133.237873][ T4204] ? __lock_acquire+0x7d10/0x7d10 [ 133.243154][ T4204] ? hci_remote_host_features_evt+0x290/0x290 [ 133.249238][ T4204] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 133.254912][ T4204] ? mark_lock+0x94/0x320 [ 133.259257][ T4204] ? mutex_unlock+0x10/0x10 [ 133.263774][ T4204] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 133.269779][ T4204] ? lock_chain_count+0x20/0x20 [ 133.270125][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 133.274665][ T4204] ? __rwlock_init+0x140/0x140 [ 133.274696][ T4204] hci_event_packet+0xe4b/0x1370 [ 133.274720][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 133.274753][ T4204] ? rcu_lock_release+0x20/0x20 [ 133.302012][ T4204] ? hci_send_to_monitor+0x9c/0x4a0 [ 133.307235][ T4204] hci_rx_work+0x255/0xa10 [ 133.311674][ T4204] process_one_work+0x85f/0x1010 [ 133.316649][ T4204] ? worker_detach_from_pool+0x240/0x240 [ 133.322293][ T4204] ? lockdep_hardirqs_off+0x70/0x100 [ 133.328382][ T4204] ? _raw_spin_lock_irq+0xb7/0xf0 [ 133.333416][ T4204] ? _raw_spin_lock_irqsave+0x100/0x100 [ 133.338969][ T4204] ? wq_worker_running+0x97/0x170 [ 133.344003][ T4204] worker_thread+0xaa6/0x1290 [ 133.348696][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 133.353906][ T4204] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 133.359814][ T4204] kthread+0x436/0x520 [ 133.363901][ T4204] ? rcu_lock_release+0x20/0x20 [ 133.368757][ T4204] ? kthread_blkcg+0xd0/0xd0 [ 133.373354][ T4204] ret_from_fork+0x1f/0x30 [ 133.377792][ T4204] [ 133.388287][ T4204] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 133.402406][ T4204] Bluetooth: hci4: failed to register connection device [ 134.289676][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 135.319691][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 136.369651][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 138.034812][ T5302] loop1: detected capacity change from 0 to 512 [ 138.051207][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 138.196308][ T5306] loop4: detected capacity change from 0 to 128 [ 138.447217][ T5306] EXT4-fs (loop4): Test dummy encryption mode enabled [ 138.472524][ T5302] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.215: inode has both inline data and extents flags [ 138.554828][ T5302] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.215: couldn't read orphan inode 15 (err -117) [ 138.566469][ T5306] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 138.584181][ T5306] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.602545][ T5302] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.668339][ T5311] 9pnet_virtio: no channels available for device syz [ 139.089957][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 139.575339][ T5302] overlayfs: conflicting lowerdir path [ 139.816551][ T5324] loop0: detected capacity change from 0 to 4096 [ 139.836078][ T5330] loop4: detected capacity change from 0 to 4096 [ 139.980213][ T5324] EXT4-fs (loop0): Test dummy encryption mode enabled [ 140.044741][ T5324] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 140.076512][ T5330] ntfs: volume version 3.1. [ 140.119684][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 140.146569][ T5330] fuse: Unknown parameter '0x0000000000000008' [ 142.211162][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 143.234859][ T5353] loop1: detected capacity change from 0 to 512 [ 143.244541][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 143.283073][ T5351] loop5: detected capacity change from 0 to 4096 [ 143.435765][ T5353] EXT4-fs (loop1): Unrecognized mount option "context=unconfined_u" or missing value [ 144.923405][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 146.471917][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 146.958873][ T5372] loop5: detected capacity change from 0 to 64 [ 147.032259][ T5383] loop4: detected capacity change from 0 to 1024 [ 147.091637][ T5372] hfs: unable to locate alternate MDB [ 147.097581][ T5372] hfs: continuing without an alternate MDB [ 147.126223][ T5372] hfs: inconsistency in B*Tree (3,2,0,3,0) [ 147.132772][ T5372] hfs: get root inode failed [ 147.479645][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 147.699303][ T26] audit: type=1804 audit(1780383385.684:17): pid=5387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.230" name="/newroot/51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop4" ino=2 res=1 errno=0 [ 147.741173][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.529641][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 149.224460][ T5405] loop5: detected capacity change from 0 to 512 [ 149.270825][ T5400] loop4: detected capacity change from 0 to 4096 [ 149.504937][ T5400] ntfs: volume version 3.1. [ 149.521913][ T5405] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.234: inode has both inline data and extents flags [ 149.539959][ T5405] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.234: couldn't read orphan inode 15 (err -117) [ 149.569665][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 149.608766][ T5405] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.657352][ T5400] fuse: Unknown parameter '0xffffffffffffffff' [ 150.609742][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 152.220796][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 153.693817][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 153.992874][ T5435] loop4: detected capacity change from 0 to 128 [ 154.769874][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 156.388256][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 157.856978][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 159.138581][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 159.322668][ T5477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.333183][ T5477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.343062][ T5477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.353567][ T5477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.363417][ T5477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.373897][ T5477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.383747][ T5477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.394208][ T5477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.404078][ T5477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.440592][ T5477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.199737][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 161.249684][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 161.281495][ T5495] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 161.972617][ T4941] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 161.988018][ T4941] Bluetooth: hci4: Injecting HCI hardware error event [ 162.161692][ T4202] Bluetooth: hci4: hardware error 0x00 [ 162.289624][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 163.319711][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 163.398250][ T5505] loop4: detected capacity change from 0 to 512 [ 163.440904][ T5505] EXT4-fs (loop4): Unrecognized mount option "context=unconfined_u" or missing value [ 163.472709][ T5514] loop5: detected capacity change from 0 to 64 [ 163.502227][ T4204] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 163.579019][ T4204] CPU: 1 PID: 4204 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 163.586669][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 163.597373][ T4204] Workqueue: hci0 hci_rx_work [ 163.602104][ T4204] Call Trace: [ 163.605496][ T4204] [ 163.608456][ T4204] dump_stack_lvl+0x188/0x250 [ 163.613179][ T4204] ? show_regs_print_info+0x20/0x20 [ 163.618410][ T4204] ? load_image+0x400/0x400 [ 163.622956][ T4204] sysfs_create_dir_ns+0x26a/0x290 [ 163.628104][ T4204] ? sysfs_warn_dup+0xa0/0xa0 [ 163.632811][ T4204] ? process_one_work+0x85f/0x1010 [ 163.637972][ T4204] ? do_raw_spin_unlock+0x11d/0x230 [ 163.643224][ T4204] kobject_add_internal+0x6e0/0xd90 [ 163.648480][ T4204] kobject_add+0x160/0x230 [ 163.652945][ T4204] ? kobject_init+0x1d0/0x1d0 [ 163.657687][ T4204] ? klist_children_get+0x50/0x50 [ 163.662755][ T4204] ? get_device_parent+0x121/0x3f0 [ 163.667915][ T4204] device_add+0x48c/0x1000 [ 163.672374][ T4204] hci_conn_add_sysfs+0xd1/0x1e0 [ 163.677360][ T4204] le_conn_complete_evt+0xc4b/0x15c0 [ 163.682867][ T4204] ? cs_le_create_conn+0x5e0/0x5e0 [ 163.688052][ T4204] ? __mutex_trylock_common+0x155/0x260 [ 163.693755][ T4204] hci_le_meta_evt+0x285/0x3cb0 [ 163.698642][ T4204] ? hci_event_packet+0x37e/0x1370 [ 163.703785][ T4204] ? __lock_acquire+0x7d10/0x7d10 [ 163.708860][ T4204] ? hci_remote_host_features_evt+0x290/0x290 [ 163.714971][ T4204] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 163.720659][ T4204] ? mark_lock+0x94/0x320 [ 163.725046][ T4204] ? mutex_unlock+0x10/0x10 [ 163.729809][ T4204] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 163.736459][ T4204] ? lock_chain_count+0x20/0x20 [ 163.741370][ T4204] ? __rwlock_init+0x140/0x140 [ 163.746394][ T4204] hci_event_packet+0xe4b/0x1370 [ 163.751374][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 163.756716][ T4204] ? rcu_lock_release+0x20/0x20 [ 163.761703][ T4204] ? hci_send_to_monitor+0x9c/0x4a0 [ 163.766946][ T4204] hci_rx_work+0x255/0xa10 [ 163.772902][ T4204] process_one_work+0x85f/0x1010 [ 163.777908][ T4204] ? worker_detach_from_pool+0x240/0x240 [ 163.783581][ T4204] ? lockdep_hardirqs_off+0x70/0x100 [ 163.789515][ T4204] ? _raw_spin_lock_irq+0xb7/0xf0 [ 163.794610][ T4204] ? _raw_spin_lock_irqsave+0x100/0x100 [ 163.800194][ T4204] ? wq_worker_running+0x97/0x170 [ 163.805255][ T4204] worker_thread+0xaa6/0x1290 [ 163.810080][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 163.815318][ T4204] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 163.821288][ T4204] kthread+0x436/0x520 [ 163.825416][ T4204] ? rcu_lock_release+0x20/0x20 [ 163.830570][ T4204] ? kthread_blkcg+0xd0/0xd0 [ 163.835636][ T4204] ret_from_fork+0x1f/0x30 [ 163.840115][ T4204] [ 163.880068][ T4204] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 163.893574][ T4204] Bluetooth: hci0: failed to register connection device [ 164.359670][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 165.750163][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 166.315443][ T5525] syz.1.261 (5525) used greatest stack depth: 19632 bytes left [ 166.769630][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 167.799706][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 168.849692][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 169.372180][ T4947] Bluetooth: hci2: command 0x0406 tx timeout [ 169.889680][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 170.810984][ T4941] Bluetooth: hci0: command 0x0406 tx timeout [ 170.919626][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 171.544019][ T5570] loop5: detected capacity change from 0 to 1024 [ 171.969695][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 172.999679][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 174.190391][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 175.714651][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 176.924607][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 177.970065][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 178.802804][ T5611] loop0: detected capacity change from 0 to 512 [ 178.973059][ T5611] EXT4-fs (loop0): Unrecognized mount option "context=unconfined_u" or missing value [ 179.009650][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 180.050340][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 181.518496][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 182.986040][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 183.313432][ T5636] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 183.326992][ T5636] Error parsing options; rc = [-22] [ 183.346148][ T5635] 9pnet_virtio: no channels available for device syz [ 184.039698][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 185.079613][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 186.119656][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 187.159624][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 188.552686][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 189.638068][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 190.679737][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 192.499950][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 192.508451][ T4519] Bluetooth: hci1: command 0x0406 tx timeout [ 192.532368][ T4519] Bluetooth: hci0: command 0x0406 tx timeout [ 192.656073][ T5691] 9pnet_virtio: no channels available for device syz [ 193.560083][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 194.135696][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.142109][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.599912][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 195.899159][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 197.341524][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 198.359652][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 199.993837][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 200.475767][ T5722] loop0: detected capacity change from 0 to 2048 [ 200.658219][ T5723] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.797616][ T5725] loop1: detected capacity change from 0 to 2048 [ 200.899084][ T5725] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.999613][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 201.886015][ T5729] loop0: detected capacity change from 0 to 32768 [ 201.967878][ T5729] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.314 (5729) [ 202.039613][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 202.130163][ T4635] Bluetooth: hci3: command 0x0406 tx timeout [ 202.145642][ T5729] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 202.154585][ T5729] BTRFS info (device loop0): metadata ratio 0 [ 202.161012][ T5729] BTRFS info (device loop0): setting nodatasum [ 202.167256][ T5729] BTRFS info (device loop0): using free space tree [ 202.173846][ T5729] BTRFS info (device loop0): has skinny extents [ 202.700220][ T5729] BTRFS info (device loop0): enabling ssd optimizations [ 202.949649][ T26] audit: type=1800 audit(1780383441.074:18): pid=5729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.314" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 203.079693][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 203.193481][ T5764] CIFS: iocharset name too long [ 203.315555][ T5767] loop1: detected capacity change from 0 to 256 [ 204.119622][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 205.029215][ T5767] FAT-fs (loop1): Directory bread(block 64) failed [ 205.100129][ T5767] FAT-fs (loop1): Directory bread(block 65) failed [ 205.106999][ T5767] FAT-fs (loop1): Directory bread(block 66) failed [ 205.159604][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 205.190220][ T5767] FAT-fs (loop1): Directory bread(block 67) failed [ 205.237446][ T5767] FAT-fs (loop1): Directory bread(block 68) failed [ 205.266497][ T5767] FAT-fs (loop1): Directory bread(block 69) failed [ 205.300767][ T5767] FAT-fs (loop1): Directory bread(block 70) failed [ 205.356061][ T5767] FAT-fs (loop1): Directory bread(block 71) failed [ 205.392169][ T5767] FAT-fs (loop1): Directory bread(block 72) failed [ 205.417692][ T5767] FAT-fs (loop1): Directory bread(block 73) failed [ 206.199651][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 206.549816][ T5791] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 206.642149][ T5789] loop0: detected capacity change from 0 to 32768 [ 207.583821][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 207.909680][ T5784] loop1: detected capacity change from 0 to 32768 [ 208.599643][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 209.343277][ T5818] autofs4:pid:5818:autofs_fill_super: called with bogus options [ 209.639618][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 210.679674][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 211.399599][ T4635] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 211.719782][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 212.679801][ T4635] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 212.710817][ T4635] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 212.759636][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 214.738956][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 215.422208][ T4635] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 215.433701][ T4635] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.479631][ T4635] usb 1-1: can't set config #27, error -71 [ 215.488417][ T4635] usb 1-1: USB disconnect, device number 3 [ 215.799830][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 215.933526][ T5854] loop5: detected capacity change from 0 to 2048 [ 216.733249][ T5847] loop4: detected capacity change from 0 to 32768 [ 216.839635][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 216.951214][ T5847] XFS (loop4): Mounting V5 Filesystem [ 217.375656][ T5847] XFS (loop4): Ending clean mount [ 217.396420][ T5847] XFS (loop4): Quotacheck needed: Please wait. [ 217.493491][ T5847] XFS (loop4): Quotacheck: Done. [ 217.777097][ T4187] XFS (loop4): Unmounting Filesystem [ 217.879629][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 218.919650][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 220.002258][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 221.072985][ T5891] fuse: Bad value for 'fd' [ 221.080023][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 221.643821][ T5889] netlink: 'syz.5.355': attribute type 2 has an invalid length. [ 222.119885][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 222.198762][ T5898] loop1: detected capacity change from 0 to 2048 [ 222.200487][ T5891] netlink: 'syz.5.355': attribute type 2 has an invalid length. [ 222.769723][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.159885][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 224.199865][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 224.351187][ T5915] chnl_net:caif_netlink_parms(): no params data found [ 224.576258][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.709674][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.789744][ T5915] device bridge_slave_0 entered promiscuous mode [ 224.808794][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.824447][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.845693][ T5915] device bridge_slave_1 entered promiscuous mode [ 224.895189][ T5915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.918340][ T5915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.983658][ T5915] team0: Port device team_slave_0 added [ 225.007412][ T5915] team0: Port device team_slave_1 added [ 225.054028][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.070833][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.136377][ T5915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.167271][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.190887][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.239869][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 225.256855][ T5915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.521048][ T5927] binder: BINDER_SET_CONTEXT_MGR already set [ 225.527075][ T5927] binder: 5926:5927 ioctl 4018620d 200000004a80 returned -16 [ 226.279851][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 226.504098][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 226.529636][ T5915] device hsr_slave_0 entered promiscuous mode [ 226.867287][ T5941] loop5: detected capacity change from 0 to 16 [ 228.249772][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 228.280073][ T5915] device hsr_slave_1 entered promiscuous mode [ 228.820403][ T4519] Bluetooth: hci5: command 0x041b tx timeout [ 228.842407][ T5941] erofs: (device loop5): mounted with root inode @ nid 36. [ 228.870888][ T5915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.878489][ T5915] Cannot create hsr debugfs directory [ 229.319869][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 230.369901][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 231.298103][ T4519] Bluetooth: hci5: command 0x040f tx timeout [ 231.399788][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 233.514377][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 233.533858][ T4519] Bluetooth: hci5: command 0x0419 tx timeout [ 233.701260][ T5915] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 234.094553][ T5915] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 234.298624][ T5915] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 234.519604][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 234.549876][ T5915] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 235.267771][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.367070][ T5915] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.432377][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.474813][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.569622][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 235.653027][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.333965][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.406175][ T5430] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.413403][ T5430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.481527][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.609592][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 236.706669][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.760723][ T5430] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.767938][ T5430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.106029][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.430647][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.512694][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.540763][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.610169][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.639603][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 237.665022][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.684551][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.735956][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.766223][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.806522][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.335230][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.492627][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.560840][ T5915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.629852][ T6014] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 238.689658][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 239.298517][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.341565][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.659384][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.719650][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 240.024493][ T5998] loop0: detected capacity change from 0 to 32768 [ 240.512281][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.537186][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.605877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.627576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.703081][ T26] audit: type=1800 audit(1780383478.834:19): pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.383" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 240.711677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.759629][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 240.798320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.846805][ T5915] device veth0_vlan entered promiscuous mode [ 240.887733][ T5915] device veth1_vlan entered promiscuous mode [ 240.990103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 241.017685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 241.045243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.082597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.100673][ T5915] device veth0_macvtap entered promiscuous mode [ 241.125024][ T5915] device veth1_macvtap entered promiscuous mode [ 241.159602][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.196059][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.222478][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.799636][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 242.249127][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.299618][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.330731][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.390916][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.430036][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.454498][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.495101][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.525348][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.574732][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 242.616439][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.638669][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.680404][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.714383][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.769503][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.779390][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.836244][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.846398][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 242.875005][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.906219][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.936230][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.024470][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.116337][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.221879][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.430763][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.643540][ T5915] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.757616][ T5915] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.808399][ T5915] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.869524][ T5915] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.889606][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 243.960174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.969104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.089985][ T4637] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 244.481205][ T4637] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 244.585138][ T4637] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 244.809625][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.822744][ T4637] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 244.919705][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 245.028733][ T4637] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.076804][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.091866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 245.316259][ T5430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.328685][ T5430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.537605][ T6071] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 245.936138][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 245.959917][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 246.713512][ T4637] usb 1-1: USB disconnect, device number 4 [ 247.009600][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 247.197565][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.039620][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 248.909376][ T6110] block device autoloading is deprecated and will be removed. [ 249.089670][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 249.312336][ T6119] netlink: 'syz.5.409': attribute type 4 has an invalid length. [ 249.320568][ T6119] netlink: 17 bytes leftover after parsing attributes in process `syz.5.409'. [ 249.439370][ T6122] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 250.119663][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 251.331588][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 252.064249][ T6132] loop1: detected capacity change from 0 to 128 [ 252.157926][ T6132] EXT4-fs (loop1): Test dummy encryption mode enabled [ 252.273510][ T6137] program syz.0.421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.293518][ T6132] EXT4-fs (loop1): inline encryption not supported [ 252.360515][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 252.834035][ T6132] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none. [ 253.028161][ T6132] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 253.079082][ T6142] netlink: 'syz.5.423': attribute type 10 has an invalid length. [ 253.139275][ T6142] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.146922][ T6142] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.567632][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 254.637815][ T6142] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.645014][ T6142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.652523][ T6142] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.659686][ T6142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.734244][ T6142] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 254.986077][ T6154] autofs4:pid:6154:autofs_fill_super: called with bogus options [ 255.566227][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.577580][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.092558][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 257.159949][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 257.276147][ T6159] chnl_net:caif_netlink_parms(): no params data found [ 258.199577][ T13] Bluetooth: hci6: command 0x0409 tx timeout [ 258.442899][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 258.471135][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.518435][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.558883][ T6159] device bridge_slave_0 entered promiscuous mode [ 258.631243][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.668722][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.001889][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 260.049829][ T6159] device bridge_slave_1 entered promiscuous mode [ 260.079529][ T4231] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 260.362417][ T6159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.409809][ T4231] usb 1-1: Using ep0 maxpacket: 32 [ 260.426736][ T6159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.443619][ T4194] Bluetooth: hci6: command 0x041b tx timeout [ 260.553747][ T4231] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 260.590510][ T6159] team0: Port device team_slave_0 added [ 260.621057][ T6159] team0: Port device team_slave_1 added [ 260.760345][ T6159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.770155][ T4231] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 260.782881][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 260.800820][ T4231] usb 1-1: Product: syz [ 260.807162][ T6159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.809719][ T4231] usb 1-1: Manufacturer: syz [ 260.837995][ T4231] usb 1-1: SerialNumber: syz [ 260.853253][ T4231] usb 1-1: config 0 descriptor?? [ 260.889958][ T6187] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 260.921990][ T4231] hub 1-1:0.0: bad descriptor, ignoring hub [ 260.931013][ T4231] hub: probe of 1-1:0.0 failed with error -5 [ 260.957907][ T6159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.980499][ T6159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.988033][ T6159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.025943][ T6159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.074963][ T6159] device hsr_slave_0 entered promiscuous mode [ 261.081682][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 261.111028][ T6159] device hsr_slave_1 entered promiscuous mode [ 261.118530][ T6159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.158679][ T6159] Cannot create hsr debugfs directory [ 261.289854][ T4340] usb 1-1: USB disconnect, device number 5 [ 261.630932][ T6159] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 261.649602][ T4340] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 261.792576][ T6159] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 261.821663][ T6159] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 261.883225][ T6159] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 261.909979][ T4340] usb 1-1: Using ep0 maxpacket: 32 [ 262.090431][ T4340] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 262.119804][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 262.579567][ T4340] usb 1-1: string descriptor 0 read error: -71 [ 262.585998][ T4340] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 262.678214][ T4637] Bluetooth: hci6: command 0x040f tx timeout [ 262.699542][ T4340] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 262.970269][ T4340] usb 1-1: config 0 descriptor?? [ 263.159665][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 263.561701][ T4340] usb 1-1: can't set config #0, error -71 [ 263.572371][ T4340] usb 1-1: USB disconnect, device number 6 [ 263.620527][ T6159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.673457][ T26] audit: type=1326 audit(1780383501.814:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.437" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6b79e59 code=0x50000 [ 263.699329][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.722573][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.785715][ T6159] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.828967][ T26] audit: type=1326 audit(1780383501.854:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.437" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7feed6b79e59 code=0x50000 [ 263.852855][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.932615][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.957439][ T26] audit: type=1326 audit(1780383501.854:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.437" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feed6b3a68e code=0x50000 [ 263.977982][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.039603][ T26] audit: type=1326 audit(1780383501.854:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.437" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7feed6b79e59 code=0x50000 [ 264.128095][ T26] audit: type=1326 audit(1780383501.944:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.437" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feed6b73bd7 code=0x50000 [ 264.128405][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.151753][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.165262][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.199609][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 264.582805][ T26] audit: type=1326 audit(1780383501.944:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.437" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feed6b1b1d9 code=0x50000 [ 264.653631][ T26] audit: type=1326 audit(1780383501.944:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.437" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7feed6b1b29d code=0x50000 [ 264.678467][ T26] audit: type=1326 audit(1780383501.944:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.437" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7feed6b79e59 code=0x50000 [ 264.702057][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.732709][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.759884][ T4194] Bluetooth: hci6: command 0x0419 tx timeout [ 264.780261][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.896847][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.904155][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.974303][ T6248] loop1: detected capacity change from 0 to 512 [ 265.060935][ T6248] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,noload,noblock_validity,,errors=continue. Quota mode: none. [ 265.081385][ T6248] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.449: Unimplemented hash flags: 0x0001 [ 265.093734][ T6248] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.449: Corrupt directory, running e2fsck is recommended [ 265.109335][ T6248] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.449: Unimplemented hash flags: 0x0001 [ 265.121938][ T6248] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.449: Corrupt directory, running e2fsck is recommended [ 265.209669][ T6250] xt_nat: multiple ranges no longer supported [ 265.239602][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 265.683073][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.769334][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.853325][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 266.105865][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 266.279592][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 266.300386][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.378866][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.780178][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.847306][ T6159] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.968434][ T6159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.015247][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.033333][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.066954][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.100284][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.138551][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.189741][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.319649][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 267.696418][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.721051][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.758634][ T6159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.932634][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.458'. [ 268.079015][ T6266] loop6: detected capacity change from 0 to 32768 [ 268.298213][ T6266] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.455 (6266) [ 268.359972][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 268.476832][ T6266] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 268.509668][ T6266] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 268.526217][ T6266] BTRFS info (device loop6): use zstd compression, level 3 [ 268.536588][ T6266] BTRFS info (device loop6): force clearing of disk cache [ 268.580369][ T6266] BTRFS info (device loop6): enabling disk space caching [ 268.713638][ T6266] BTRFS info (device loop6): disk space caching is enabled [ 268.761482][ T6266] BTRFS info (device loop6): has skinny extents [ 270.748657][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 271.045597][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.462'. [ 271.085711][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.462'. [ 271.800084][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 271.980760][ T6324] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 272.012057][ T6266] BTRFS error (device loop6): open_ctree failed: -12 [ 272.103966][ T6311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.143605][ T6311] bond1: (slave bond0): making interface the new active one [ 272.232594][ T6311] bond1: (slave bond0): Enslaving as an active interface with an up link [ 272.277837][ T6320] netlink: 'syz.5.462': attribute type 4 has an invalid length. [ 272.329992][ T6320] netlink: 152 bytes leftover after parsing attributes in process `syz.5.462'. [ 272.366195][ T6320] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 272.839940][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 273.889639][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 273.901480][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.960928][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 274.031807][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 274.053324][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 274.092590][ T6159] device veth0_vlan entered promiscuous mode [ 274.171549][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 274.268587][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 274.382887][ T6159] device veth1_vlan entered promiscuous mode [ 274.431443][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 274.501546][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 274.560513][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 274.569308][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.683063][ T6159] device veth0_macvtap entered promiscuous mode [ 274.726611][ T6159] device veth1_macvtap entered promiscuous mode [ 274.891841][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.974709][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.039621][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.109490][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.165921][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 275.193731][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.234428][ T6343] loop1: detected capacity change from 0 to 4096 [ 275.256624][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.299464][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.351085][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.392905][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.421250][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.464652][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.503207][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.536536][ T6349] loop6: detected capacity change from 0 to 2048 [ 275.547771][ T6159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.570342][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 275.591149][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 275.608488][ T6343] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 275.690036][ T6343] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 275.708473][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 275.842344][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 275.866114][ T6349] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 275.880197][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.906266][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.922615][ T6349] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 275.929713][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.982022][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.992389][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.003752][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.014130][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.037481][ T6349] fs-verity: sha512 using implementation "sha512-avx2" [ 276.062611][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.087612][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.116181][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.149537][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.175866][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.210148][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 276.248387][ T4188] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 276.259172][ T6159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.292225][ T4188] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 276.338296][ T4238] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.421333][ T4238] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.469324][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.492003][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.670461][ T6159] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.366792][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 277.396163][ T6159] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.429771][ T6159] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.455325][ T6159] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.665674][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.473'. [ 278.424283][ T4238] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.439793][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 278.520765][ T4238] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.583029][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'. [ 278.649154][ T4238] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.679868][ T4238] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.842261][ T4238] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.975583][ T4637] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 279.019961][ T4238] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.760179][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 279.890468][ T4637] usb 1-1: Using ep0 maxpacket: 16 [ 279.942658][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.975205][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.026864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 280.049819][ T4637] usb 1-1: unable to get BOS descriptor or descriptor too short [ 280.170998][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.178894][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.322938][ T4637] usb 1-1: config 4 has an invalid interface number: 55 but max is 0 [ 280.331547][ T4637] usb 1-1: config 4 has no interface number 0 [ 280.337685][ T4637] usb 1-1: config 4 interface 55 has no altsetting 0 [ 280.839895][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 281.170521][ T4637] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 281.185851][ T4637] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.188849][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 281.209926][ T4637] usb 1-1: Product: syz [ 281.218784][ T4637] usb 1-1: Manufacturer: syz [ 281.231616][ T4637] usb 1-1: SerialNumber: syz [ 281.592599][ T4637] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 281.607371][ T4637] gspca_mr97310a: reg write [21] error -22 [ 281.879677][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 282.988363][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 282.997715][ T4637] mr97310a: probe of 1-1:4.55 failed with error -22 [ 283.029189][ T4637] usb 1-1: USB disconnect, device number 7 [ 283.649995][ T6406] virtio-fs: tag not found [ 283.959480][ T2453] cec-vivid-000-vid-out0: message ef 84 10 00 00 timed out [ 284.050316][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 285.059816][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.067140][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.079927][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 286.119707][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 286.808717][ T6390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.884903][ T6390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.169622][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 287.676408][ T6390] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.691218][ T6390] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.709690][ T6390] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.719151][ T6390] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.129628][ T6422] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 288.141279][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.6.490'. [ 288.200051][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 289.180976][ T6442] ALSA: mixer_oss: invalid OSS volume '²' [ 289.187072][ T6442] ALSA: mixer_oss: invalid OSS volume '' [ 289.193117][ T6442] ALSA: mixer_oss: invalid OSS volume '§' [ 289.198963][ T6442] ALSA: mixer_oss: invalid OSS volume 'í' [ 289.204845][ T6442] ALSA: mixer_oss: invalid OSS volume '¼' [ 289.239837][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 290.279609][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 290.433645][ T4238] device hsr_slave_0 left promiscuous mode [ 290.468653][ T4238] device hsr_slave_1 left promiscuous mode [ 290.506183][ T4238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.575710][ T4238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.644486][ T4238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.669581][ T4238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.703370][ T4238] device bridge_slave_1 left promiscuous mode [ 290.735448][ T4238] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.820329][ T4238] device bridge_slave_0 left promiscuous mode [ 290.826665][ T4238] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.876662][ T6461] loop0: detected capacity change from 0 to 32768 [ 290.912671][ T6465] loop1: detected capacity change from 0 to 32768 [ 291.016232][ T4238] device veth0_macvtap left promiscuous mode [ 291.034599][ T4238] device veth1_vlan left promiscuous mode [ 291.056316][ T6465] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 291.094584][ T6461] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 291.114028][ T4238] device veth0_vlan left promiscuous mode [ 291.148631][ T6465] BTRFS info (device loop1): turning on sync discard [ 291.204490][ T6465] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 291.276291][ T6465] BTRFS info (device loop1): use zstd compression, level 3 [ 291.290037][ T6465] BTRFS info (device loop1): turning on async discard [ 291.303026][ T6465] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 291.319574][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 291.349535][ T6465] BTRFS info (device loop1): trying to use backup root at mount time [ 291.394369][ T6465] BTRFS info (device loop1): enabling auto defrag [ 291.434927][ T6465] BTRFS info (device loop1): using free space tree [ 291.459759][ T6465] BTRFS info (device loop1): has skinny extents [ 291.706248][ T6506] loop7: detected capacity change from 0 to 2048 [ 291.716078][ T1170] BTRFS warning (device loop1): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 291.772059][ T6465] BTRFS warning (device loop1): failed to read root (objectid=2): -5 [ 291.849557][ T1170] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 291.894693][ T6465] BTRFS warning (device loop1): couldn't read tree root [ 291.908458][ T4189] ocfs2: Unmounting device (7,0) on (node local) [ 291.932585][ T6465] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7 [ 291.973487][ T6478] loop7: detected capacity change from 0 to 512 [ 291.989911][ T6465] BTRFS warning (device loop1): couldn't read tree root [ 292.032600][ T6465] BTRFS info (device loop1): enabling ssd optimizations [ 292.085753][ T6478] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 292.098012][ T6465] BTRFS info (device loop1): clearing free space tree [ 292.130036][ T6478] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 292.141581][ T6465] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 292.192166][ T6465] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 292.207749][ T6478] EXT4-fs error (device loop7): xattr_find_entry:297: inode #15: comm syz.7.500: corrupted xattr entries [ 292.260685][ T6465] BTRFS info (device loop1): creating free space tree [ 292.310948][ T6465] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 292.351786][ T6478] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 292.365120][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 292.382100][ T6465] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 292.440890][ T6478] EXT4-fs (loop7): 1 orphan inode deleted [ 292.449769][ T6478] EXT4-fs (loop7): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,dioread_nolock,,errors=continue. Quota mode: none. [ 292.597874][ T4238] team0 (unregistering): Port device team_slave_1 removed [ 292.777775][ T4238] team0 (unregistering): Port device team_slave_0 removed [ 292.850173][ T4238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.925926][ T4238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.372342][ T6520] netlink: 232 bytes leftover after parsing attributes in process `syz.1.504'. [ 293.399606][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 293.488955][ T4238] bond0 (unregistering): Released all slaves [ 293.547689][ T6483] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 293.671453][ T6520] netlink: 20 bytes leftover after parsing attributes in process `syz.1.504'. [ 294.439613][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 295.479602][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 296.883471][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 297.184638][ T6549] netlink: 16 bytes leftover after parsing attributes in process `syz.5.512'. [ 297.959797][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 299.364103][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 300.440538][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 301.479681][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 302.519652][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 303.559658][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 304.632779][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 305.639576][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 306.679791][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 308.607162][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 308.621385][ T4279] Bluetooth: hci6: command 0x0405 tx timeout [ 310.121858][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 311.169656][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 311.378565][ T6683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.429666][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.460772][ T6683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.468266][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.199716][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 312.923371][ T6702] netlink: 'syz.0.543': attribute type 1 has an invalid length. [ 313.239612][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 313.314959][ T6705] 8021q: adding VLAN 0 to HW filter on device bond2 [ 313.381347][ T6705] bond1: (slave bond2): making interface the new active one [ 313.442641][ T6705] bond1: (slave bond2): Enslaving as an active interface with an up link [ 313.496113][ T6702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.543'. [ 313.519812][ T6702] device bond1 entered promiscuous mode [ 313.539614][ T6702] device bond2 entered promiscuous mode [ 313.568354][ T6702] 8021q: adding VLAN 0 to HW filter on device bond1 [ 313.582261][ T6713] netlink: 24 bytes leftover after parsing attributes in process `syz.5.545'. [ 314.041706][ T6730] overlayfs: failed to clone upperpath [ 314.088135][ T6732] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 314.115615][ T6732] overlayfs: missing 'lowerdir' [ 314.289663][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 314.516638][ T6740] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.538'. [ 314.532069][ T6740] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.538'. [ 315.319593][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 316.359988][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 316.501021][ T5806] Set syz1 is full, maxelem 65536 reached [ 316.838553][ T6770] usb usb8: usbfs: process 6770 (syz.7.554) did not claim interface 0 before use [ 317.003028][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.010324][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.580487][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 318.599726][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 319.007142][ T6749] netlink: 'syz.1.551': attribute type 10 has an invalid length. [ 319.269703][ T6749] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 319.639577][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 321.227451][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 321.974916][ T4238] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.056599][ T4238] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.159737][ T26] audit: type=1326 audit(1780383560.304:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.5.561" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5afb63e59 code=0x0 [ 322.202731][ T4238] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.280145][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 322.423372][ T4238] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.896570][ T4238] tipc: Left network mode [ 323.035211][ T6825] loop7: detected capacity change from 0 to 4096 [ 323.329833][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 323.607968][ T26] audit: type=1326 audit(1780383561.744:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.5.570" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5afb63e59 code=0x7ffc0000 [ 323.674807][ T26] audit: type=1326 audit(1780383561.744:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.5.570" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5afb63e59 code=0x7ffc0000 [ 324.035690][ T26] audit: type=1326 audit(1780383561.754:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.5.570" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5afb63e59 code=0x7ffc0000 [ 324.115158][ T26] audit: type=1326 audit(1780383561.754:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.5.570" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5afb63e59 code=0x7ffc0000 [ 324.359806][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 324.469610][ T26] audit: type=1326 audit(1780383561.754:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.5.570" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb5afb63e59 code=0x7ffc0000 [ 324.506870][ T6843] netlink: 64 bytes leftover after parsing attributes in process `syz.0.571'. [ 324.601267][ T26] audit: type=1326 audit(1780383561.754:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.5.570" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5afb63e59 code=0x7ffc0000 [ 324.712358][ T26] audit: type=1326 audit(1780383561.754:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.5.570" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5afb63e59 code=0x7ffc0000 [ 324.796860][ T6856] netlink: 'syz.6.575': attribute type 1 has an invalid length. [ 324.851570][ T4519] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 324.899060][ T6861] program syz.7.576 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.461167][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 325.741830][ T26] audit: type=1326 audit(1780383561.754:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.5.570" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5afb63e59 code=0x7ffc0000 [ 325.787509][ T6856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.798706][ T26] audit: type=1326 audit(1780383561.754:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.5.570" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb5afb2468e code=0x7ffc0000 [ 325.899312][ T4519] usb 1-1: device descriptor read/64, error -71 [ 327.384399][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 327.472018][ T6860] bond1: (slave ip6gretap1): making interface the new active one [ 327.501011][ T6860] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 327.528640][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 327.599201][ T4519] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 328.454337][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 328.672566][ T6885] loop0: detected capacity change from 0 to 512 [ 328.819476][ T4238] device hsr_slave_0 left promiscuous mode [ 328.881487][ T6885] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 328.930956][ T6885] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 328.965469][ T4238] device hsr_slave_1 left promiscuous mode [ 328.989267][ T4238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.050543][ T4238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.111351][ T4238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.119081][ T4236] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 329.138708][ T4238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.177025][ T4238] device bridge_slave_1 left promiscuous mode [ 329.211770][ T4238] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.241763][ T4238] device bridge_slave_0 left promiscuous mode [ 329.271409][ T4238] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.304344][ T4238] device veth1_macvtap left promiscuous mode [ 329.323769][ T4238] device veth0_macvtap left promiscuous mode [ 329.344046][ T4238] device veth1_vlan left promiscuous mode [ 329.382109][ T4238] device veth0_vlan left promiscuous mode [ 329.502056][ T4236] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 329.531992][ T4236] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 329.566146][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 329.574998][ T4236] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 329.595142][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.641345][ T6886] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 330.462749][ T6905] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 330.677973][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 331.789775][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 332.783977][ T13] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 332.905293][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 333.273306][ T4645] usb 2-1: USB disconnect, device number 2 [ 333.287017][ T13] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 333.329785][ T13] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 333.403233][ T13] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 333.455114][ T13] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.503373][ T4238] team0 (unregistering): Port device team_slave_1 removed [ 333.564570][ T4238] team0 (unregistering): Port device team_slave_0 removed [ 333.607688][ T6907] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 333.652348][ T4238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.691415][ T6913] ceph: No mds server is up or the cluster is laggy [ 333.714844][ T4649] libceph: connect (1)[c::]:6789 error -101 [ 333.744717][ T4649] libceph: mon0 (1)[c::]:6789 connect error [ 333.828517][ T4238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.010715][ T6923] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 334.019833][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 334.027992][ T6923] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 335.125280][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 336.670636][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 337.639273][ T4519] usb 8-1: USB disconnect, device number 2 [ 337.666906][ T4649] libceph: connect (1)[c::]:6789 error -101 [ 337.717598][ T4238] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 337.728084][ T4649] libceph: mon0 (1)[c::]:6789 connect error [ 337.742063][ T4238] bond0 (unregistering): Released all slaves [ 337.780265][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 337.831730][ T4647] libceph: connect (1)[c::]:6789 error -101 [ 337.837859][ T4647] libceph: mon0 (1)[c::]:6789 connect error [ 338.594215][ T6958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.671917][ T6967] loop7: detected capacity change from 0 to 512 [ 338.743972][ T6967] EXT4-fs (loop7): Ignoring removed oldalloc option [ 338.771487][ T6967] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 338.878538][ T6967] EXT4-fs (loop7): 1 truncate cleaned up [ 338.884267][ T6967] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,user_xattr,,errors=continue. Quota mode: none. [ 338.909863][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 338.957568][ T6967] EXT4-fs error (device loop7): mb_free_blocks:1889: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 339.005918][ T4279] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 339.471315][ T4279] usb 2-1: Using ep0 maxpacket: 32 [ 339.673271][ T4279] usb 2-1: unable to get BOS descriptor or descriptor too short [ 339.696768][ T7007] netlink: 'syz.0.614': attribute type 20 has an invalid length. [ 339.807945][ T4279] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 339.820997][ T4279] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 339.855210][ T4279] usb 2-1: config 14 has no interface number 0 [ 339.861782][ T4279] usb 2-1: config 14 has no interface number 1 [ 339.871585][ T7005] loop7: detected capacity change from 0 to 4096 [ 339.878517][ T4279] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 339.903684][ T7005] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 339.922147][ T4279] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 339.959597][ T4279] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 339.974745][ T4279] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.992044][ T4279] usb 2-1: config 14 interface 57 has no altsetting 0 [ 339.999202][ T4279] usb 2-1: config 14 interface 228 has no altsetting 0 [ 340.006445][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 340.224841][ T4279] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 340.244898][ T4279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.281036][ T4279] usb 2-1: Product: syz [ 340.304537][ T4279] usb 2-1: Manufacturer: syz [ 340.327971][ T4279] usb 2-1: SerialNumber: syz [ 340.458791][ T7019] loop0: detected capacity change from 0 to 16 [ 340.470171][ T7019] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 340.791269][ T7011] syz.6.615 (7011) used greatest stack depth: 17904 bytes left [ 340.867911][ T7019] input: syz1 as /devices/virtual/input/input5 [ 341.112141][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 341.183768][ T4279] legousbtower 2-1:14.57: interrupt endpoints not found [ 341.537275][ T4279] legousbtower 2-1:14.228: interrupt endpoints not found [ 342.234536][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 343.335660][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 343.898184][ T4235] usb 2-1: USB disconnect, device number 3 [ 344.153266][ T4202] Bluetooth: hci6: link tx timeout [ 344.159442][ T4202] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 344.447498][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 344.575961][ T7097] loop7: detected capacity change from 0 to 8 [ 344.602383][ T7097] Page size > filesystem block size (0). This is currently not supported! [ 344.650857][ T4236] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 345.570000][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 345.751777][ T4236] usb 2-1: Using ep0 maxpacket: 8 [ 345.890842][ T4236] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 345.914048][ T4236] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 345.953836][ T4236] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 345.978741][ T4236] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 346.000777][ T4236] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.028519][ T4236] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 346.052677][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.235200][ T4647] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 346.328943][ T4279] Bluetooth: hci6: command 0x0406 tx timeout [ 346.361189][ T4236] usb 2-1: GET_CAPABILITIES returned 0 [ 346.366782][ T4236] usbtmc 2-1:16.0: can't read capabilities [ 346.583591][ T4236] usb 2-1: USB disconnect, device number 4 [ 346.633109][ T4647] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 346.646765][ T4647] usb 1-1: config 0 has no interface number 0 [ 346.681856][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 346.826989][ T4202] ================================================================== [ 346.835680][ T4202] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1333/0x3cb0 [ 346.842833][ T4647] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 346.843530][ T4202] Read of size 1 at addr ffff88801a9be40a by task kworker/u5:5/4202 [ 346.860637][ T4202] [ 346.862993][ T4202] CPU: 1 PID: 4202 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 346.870563][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 346.880654][ T4202] Workqueue: hci5 hci_rx_work [ 346.885388][ T4202] Call Trace: [ 346.888693][ T4202] [ 346.891647][ T4202] dump_stack_lvl+0x188/0x250 [ 346.896354][ T4647] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.896364][ T4202] ? show_regs_print_info+0x20/0x20 [ 346.896395][ T4202] ? load_image+0x400/0x400 [ 346.914094][ T4202] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 346.919592][ T4202] ? mutex_lock_io_nested+0x60/0x60 [ 346.924842][ T4202] print_address_description+0x60/0x2d0 [ 346.930433][ T4202] ? hci_le_meta_evt+0x1333/0x3cb0 [ 346.935589][ T4202] kasan_report+0xdf/0x130 [ 346.940057][ T4202] ? hci_le_meta_evt+0x1333/0x3cb0 [ 346.945212][ T4202] hci_le_meta_evt+0x1333/0x3cb0 [ 346.946971][ T4647] usb 1-1: Product: syz [ 346.950203][ T4202] ? hci_remote_host_features_evt+0x290/0x290 [ 346.950235][ T4202] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 346.950262][ T4202] ? mark_lock+0x94/0x320 [ 346.950283][ T4202] ? mutex_unlock+0x10/0x10 [ 346.950308][ T4202] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 346.981047][ T4202] ? lock_chain_count+0x20/0x20 [ 346.985948][ T4202] ? __rwlock_init+0x140/0x140 [ 346.990765][ T4202] hci_event_packet+0xe4b/0x1370 [ 346.995745][ T4202] ? lockdep_hardirqs_on+0x94/0x140 [ 347.000993][ T4202] ? rcu_lock_release+0x20/0x20 [ 347.004493][ T4647] usb 1-1: Manufacturer: syz [ 347.005892][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 347.005927][ T4202] hci_rx_work+0x255/0xa10 [ 347.020198][ T4202] process_one_work+0x85f/0x1010 [ 347.025202][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 347.030881][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 347.036215][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 347.041288][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 347.046880][ T4202] ? wq_worker_running+0x97/0x170 [ 347.051482][ T4647] usb 1-1: SerialNumber: syz [ 347.051937][ T4202] worker_thread+0xaa6/0x1290 [ 347.052078][ T4202] kthread+0x436/0x520 [ 347.065356][ T4202] ? rcu_lock_release+0x20/0x20 [ 347.070250][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 347.074889][ T4202] ret_from_fork+0x1f/0x30 [ 347.079360][ T4202] [ 347.082412][ T4202] [ 347.084762][ T4202] Allocated by task 7135: [ 347.089127][ T4202] __kasan_kmalloc+0xb5/0xf0 [ 347.093750][ T4202] __alloc_skb+0x22c/0x750 [ 347.098208][ T4202] vhci_write+0xbc/0x450 [ 347.102508][ T4202] vfs_write+0x745/0xd60 [ 347.106782][ T4202] ksys_write+0x152/0x260 [ 347.111146][ T4202] do_syscall_64+0x4c/0xa0 [ 347.115597][ T4202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 347.121530][ T4202] [ 347.123880][ T4202] Last potentially related work creation: [ 347.129619][ T4202] kasan_save_stack+0x35/0x60 [ 347.134343][ T4202] kasan_record_aux_stack+0xb8/0x100 [ 347.139666][ T4202] kvfree_call_rcu+0x105/0x7d0 [ 347.144478][ T4202] neigh_periodic_work+0x407/0xc70 [ 347.148149][ T4647] usb 1-1: config 0 descriptor?? [ 347.149620][ T4202] process_one_work+0x85f/0x1010 [ 347.149651][ T4202] worker_thread+0xaa6/0x1290 [ 347.149673][ T4202] kthread+0x436/0x520 [ 347.168321][ T4202] ret_from_fork+0x1f/0x30 [ 347.172775][ T4202] [ 347.175160][ T4202] The buggy address belongs to the object at ffff88801a9be000 [ 347.175160][ T4202] which belongs to the cache kmalloc-1k of size 1024 [ 347.189248][ T4202] The buggy address is located 10 bytes to the right of [ 347.189248][ T4202] 1024-byte region [ffff88801a9be000, ffff88801a9be400) [ 347.203084][ T4202] The buggy address belongs to the page: [ 347.208759][ T4202] page:ffffea00006a6e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1a9b8 [ 347.218947][ T4202] head:ffffea00006a6e00 order:3 compound_mapcount:0 compound_pincount:0 [ 347.227301][ T4202] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 347.235349][ T4202] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0 [ 347.243971][ T4202] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 347.246095][ T4647] hub 1-1:0.132: bad descriptor, ignoring hub [ 347.252577][ T4202] page dumped because: kasan: bad access detected [ 347.252608][ T4202] page_owner tracks the page as allocated [ 347.252615][ T4202] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4174, ts 63291220439, free_ts 63280629309 [ 347.252655][ T4202] get_page_from_freelist+0x1bbd/0x1ca0 [ 347.252683][ T4202] __alloc_pages+0x1ee/0x480 [ 347.252702][ T4202] new_slab+0xc0/0x4b0 [ 347.252719][ T4202] ___slab_alloc+0x80a/0xdd0 [ 347.252736][ T4202] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 347.252755][ T4202] __alloc_skb+0x22c/0x750 [ 347.252774][ T4202] sk_stream_alloc_skb+0x1fa/0xa60 [ 347.324336][ T4202] tcp_sendmsg_locked+0xc31/0x3320 [ 347.329489][ T4202] tcp_sendmsg+0x2b/0x40 [ 347.333767][ T4202] sock_write_iter+0x2a6/0x3a0 [ 347.337178][ T4647] hub: probe of 1-1:0.132 failed with error -5 [ 347.338561][ T4202] vfs_write+0x745/0xd60 [ 347.338584][ T4202] ksys_write+0x152/0x260 [ 347.338602][ T4202] do_syscall_64+0x4c/0xa0 [ 347.338628][ T4202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 347.338652][ T4202] page last free stack trace: [ 347.368413][ T4202] free_unref_page_prepare+0x637/0x6c0 [ 347.373917][ T4202] free_unref_page+0x8f/0x2a0 [ 347.378637][ T4202] skb_release_data+0x3b1/0x800 [ 347.383541][ T4202] __kfree_skb+0x4c/0x60 [ 347.387829][ T4202] tcp_ack+0x1ffd/0x61b0 [ 347.392117][ T4202] tcp_rcv_established+0x896/0x1ce0 [ 347.397352][ T4202] tcp_v4_do_rcv+0x44b/0x9b0 [ 347.401981][ T4202] __release_sock+0x1e1/0x450 [ 347.406730][ T4202] __sk_flush_backlog+0x22/0x30 [ 347.411629][ T4202] tcp_sendmsg_locked+0x2823/0x3320 [ 347.416863][ T4202] tcp_sendmsg+0x2b/0x40 [ 347.421131][ T4202] sock_write_iter+0x2a6/0x3a0 [ 347.425931][ T4202] vfs_write+0x745/0xd60 [ 347.430209][ T4202] ksys_write+0x152/0x260 [ 347.434580][ T4202] do_syscall_64+0x4c/0xa0 [ 347.439033][ T4202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 347.444960][ T4202] [ 347.447306][ T4202] Memory state around the buggy address: [ 347.452969][ T4202] ffff88801a9be300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 347.461062][ T4202] ffff88801a9be380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 347.469155][ T4202] >ffff88801a9be400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 347.477250][ T4202] ^ [ 347.481613][ T4202] ffff88801a9be480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 347.489712][ T4202] ffff88801a9be500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 347.497810][ T4202] ================================================================== [ 347.505938][ T4202] Disabling lock debugging due to kernel taint [ 347.514745][ T4202] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 347.522000][ T4202] CPU: 1 PID: 4202 Comm: kworker/u5:5 Tainted: G B syzkaller #0 [ 347.530965][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 347.531307][ T4647] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input6 [ 347.541045][ T4202] Workqueue: hci5 hci_rx_work [ 347.541075][ T4202] Call Trace: [ 347.541082][ T4202] [ 347.541089][ T4202] dump_stack_lvl+0x188/0x250 [ 347.541113][ T4202] ? show_regs_print_info+0x20/0x20 [ 347.541132][ T4202] ? load_image+0x400/0x400 [ 347.541156][ T4202] panic+0x2e5/0x810 [ 347.541181][ T4202] ? bpf_jit_dump+0xd0/0xd0 [ 347.584097][ T4202] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 347.590117][ T4202] ? _raw_spin_unlock+0x40/0x40 [ 347.595004][ T4202] ? hci_le_meta_evt+0x1333/0x3cb0 [ 347.600154][ T4202] check_panic_on_warn+0x80/0xa0 [ 347.605127][ T4202] ? hci_le_meta_evt+0x1333/0x3cb0 [ 347.610276][ T4202] end_report+0x6d/0xf0 [ 347.614468][ T4202] kasan_report+0x102/0x130 [ 347.619007][ T4202] ? hci_le_meta_evt+0x1333/0x3cb0 [ 347.624156][ T4202] hci_le_meta_evt+0x1333/0x3cb0 [ 347.629137][ T4202] ? hci_remote_host_features_evt+0x290/0x290 [ 347.635242][ T4202] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 347.640917][ T4202] ? mark_lock+0x94/0x320 [ 347.645280][ T4202] ? mutex_unlock+0x10/0x10 [ 347.649823][ T4202] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 347.655845][ T4202] ? lock_chain_count+0x20/0x20 [ 347.660735][ T4202] ? __rwlock_init+0x140/0x140 [ 347.665550][ T4202] hci_event_packet+0xe4b/0x1370 [ 347.670530][ T4202] ? lockdep_hardirqs_on+0x94/0x140 [ 347.675783][ T4202] ? rcu_lock_release+0x20/0x20 [ 347.680672][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 347.685912][ T4202] hci_rx_work+0x255/0xa10 [ 347.690370][ T4202] process_one_work+0x85f/0x1010 [ 347.695354][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 347.701021][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 347.706339][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 347.711398][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 347.717016][ T4202] ? wq_worker_running+0x97/0x170 [ 347.722083][ T4202] worker_thread+0xaa6/0x1290 [ 347.726810][ T4202] kthread+0x436/0x520 [ 347.730910][ T4202] ? rcu_lock_release+0x20/0x20 [ 347.735794][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 347.740422][ T4202] ret_from_fork+0x1f/0x30 [ 347.744918][ T4202] [ 347.748427][ T4202] Kernel Offset: disabled [ 347.752771][ T4202] Rebooting in 86400 seconds..