last executing test programs: 2m43.171333534s ago: executing program 0 (id=473): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m43.073795135s ago: executing program 0 (id=475): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmmsg(r3, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x24044884) close(0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) 2m41.611849957s ago: executing program 0 (id=479): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$inet6_udplite(0xa, 0x2, 0x88) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xb}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) r8 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, &(0x7f0000000000)=0xfffffffd) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_emit_vhci(&(0x7f0000002380)=ANY=[@ANYBLOB="042fff01aa"], 0x102) 2m38.349963846s ago: executing program 0 (id=485): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) read$dsp(r0, 0x0, 0x0) 2m38.206725098s ago: executing program 0 (id=490): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x200ce0c0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r9, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) sendto$inet6(r3, 0x0, 0x0, 0x20004011, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @empty, 0x5}, 0x1c) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x129000, 0x0) readv(r10, &(0x7f0000000000)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) 2m37.050673785s ago: executing program 0 (id=496): r0 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x582) 2m21.452770018s ago: executing program 32 (id=496): r0 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x582) 12.631054592s ago: executing program 2 (id=1039): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x23b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x4, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = bpf$PROG_LOAD(0x5, 0x0, 0xa) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x141083, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x408e41, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000b6010400180012800b00d70a952c05006e6c00000800028004001300080003001d3e89bb2dfe081aa6ec16a935d6d16f429e31367839f571095e2dfa8ad9511dd162dcf2ec384e8338df1231f5611c5b0c3b9c1cd383e4b9142149cf30039f5416bba5769c330a99919b323783ee46889514171f9b279720cad1cc8244633b3d4d942dfcd6e3080a483c91314b79447463acc51f18b4a572450d4100b89cfe523c4cf1a0d9f48b31645e075eb2e54c7a37c6e1019990c5c0382b2688173371db0e9c6a3d80b5f2f5b6a3b88923709eccbbcf354d0f82e28c19f78f9319e2e111162f1eaed1db8ca5462a8b3a5642ba125eb1163d0005c1991d9da8414b214d94aa4f5db2b3df6cae5f02b84e6b0036b018936e1974e0cee9f200960315d30fdd6334daf13679f2874acb7dc280e1d646a6e0f54bdac089ca73851e11c4160aa274f6e517f6ca6e20b460a5716b8ccfaa4a8e5b10e9ec645b8a3a3f910ac344", @ANYRES32=r7, @ANYRES32=r2], 0x40}}, 0x24000840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) r8 = syz_clone(0x80148400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) 10.756701499s ago: executing program 4 (id=1049): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x1}}) 10.623405361s ago: executing program 1 (id=1050): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf252c00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000810) 10.623006441s ago: executing program 4 (id=1051): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x2, 0x8811, 0x50, &(0x7f0000000180)="47710e74fa24395c4d517ae141d81576bc028a43dd5a2892f9cbc7a1690082b9c89aacebe9528b604052f417556f4898c5d9fd493f359a419f751595b926a09ad179c7ff273f8c32a52d6aafa9ef4d5c"}], 0x1}) 10.458112504s ago: executing program 1 (id=1052): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x80}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 10.338589136s ago: executing program 1 (id=1053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0xffffffff, 0x2) 10.287320276s ago: executing program 2 (id=1054): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$vim2m(0x0, 0x800000001005, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2530000000", @ANYRES32=r7, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) 10.00864968s ago: executing program 4 (id=1055): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x604440, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x5c7e, &(0x7f00000000c0)={0x0, 0x96b5, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000000f", @ANYRES8=r5], 0x3c}}, 0x10) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000001c0), 0x1) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ptrace(0x10, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47b8, 0x850, 0x50, 0x0, 0xfffffeb7) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r1, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r9, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}, 0x80000000}], 0x2, 0x2020, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) io_uring_enter(r2, 0x3517, 0x173d, 0x42, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000340)={'vxcan0\x00'}) 8.929562887s ago: executing program 4 (id=1056): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4103, 0x1007, 0x97) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000080)=0xd, 0x4) 8.147287848s ago: executing program 2 (id=1061): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x4c004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_emit_ethernet(0x17b, &(0x7f0000000680)={@local, @empty, @void, {@generic={0x17, "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"}}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7.200620392s ago: executing program 3 (id=1062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 7.179920092s ago: executing program 2 (id=1063): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0x8, 0x0) io_getevents(0x0, 0x1d, 0x0, 0x0, 0x0) 7.087433984s ago: executing program 3 (id=1064): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r1, r0, 0x0, 0xfc8) 7.058338374s ago: executing program 3 (id=1066): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f0c81087f180002ad6b37ed03010902240001000000000904"], 0x0) 7.043810445s ago: executing program 2 (id=1067): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, 0x0, 0x0) 6.527067533s ago: executing program 1 (id=1068): socket$inet6(0xa, 0x1, 0x8010000000000084) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$pid(0x3, 0x0, 0x0) r4 = open(0x0, 0x80242, 0x0) write$FUSE_CREATE_OPEN(r4, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x7f03) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x8081) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r7 = syz_io_uring_setup(0x233, &(0x7f0000000300)={0x0, 0xfffffffd, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r7, 0x7a98, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000400)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0xa, 0x1000, 0x7, @mcast1}, r6}}, 0x48) 6.355857985s ago: executing program 3 (id=1070): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40400d1}, 0x0) 6.326788725s ago: executing program 3 (id=1071): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x1d9}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x40000000, &(0x7f0000000300)={0x0, 0x0, 0x1000, 0x0, 0x3ce, 0x0, r0}, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='\a'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE) io_uring_enter(r0, 0x2d3c, 0x0, 0x0, 0x0, 0x0) 5.576931597s ago: executing program 1 (id=1073): ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f00000000c0)=0x6fbb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 4.283281626s ago: executing program 5 (id=1077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="ffea0000000000e56200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) clock_adjtime(0x1, &(0x7f0000000000)={0x3fd, 0x6, 0x24, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffffffffffffff7f, 0x1003, 0x3, 0x0, 0x0, 0xd, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x83}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x138) r6 = socket(0x2, 0x3, 0x67) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000000d001c000000000000000000000008"], 0x38}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 3.219271912s ago: executing program 5 (id=1078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0xffffffff, 0x2) 2.215440047s ago: executing program 3 (id=1079): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfc, 0xfc, 0xa8}]}) setresuid(0x0, 0xee00, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0x0, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4004, r0, 0x2}) lseek(r3, 0x100, 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) dup(r4) r12 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r12, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r12, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000740)={0x20, 0x5, 0x4, "5a0db97d"}, 0x0, 0x0, &(0x7f0000000840), 0x0}) 2.193535027s ago: executing program 5 (id=1080): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(r2, &(0x7f0000000240)='net\x00') writev(r5, 0x0, 0x0) r6 = socket$inet6(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 1.470026328s ago: executing program 4 (id=1081): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100edff0000000000000000000a58000000060a09040000000000000000020000002c000480280001800d00010073796e70726f78790000000014000280050002"], 0x80}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 1.33151467s ago: executing program 5 (id=1082): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x17, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40400d1}, 0x0) 1.262830721s ago: executing program 5 (id=1083): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000280)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) r5 = fcntl$dupfd(r2, 0x0, r3) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x70bd28}, 0x14}}, 0x0) 1.132234023s ago: executing program 4 (id=1084): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100)='H', 0x0}, 0x20) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000100), 0x6) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x7, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 441.040073ms ago: executing program 2 (id=1085): socket$kcm(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000190c0)=0x7) setregid(0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000125c0), 0x8000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000012600)=@l={0x92, 0x8, 0xb0, 0x1b, 0x8, 0xdb, 0x8}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000ac1e000100800000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011007f0000010000000000000000000000000a0101000000000000000000000000000a010100000000000000000000000000640101000000000000000000000000003c000000000000000a0002001c000400feff4e244e230000fc0100"/116], 0xbc}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080), 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x928, 0x200000008b}, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) listen(r7, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r8, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) 207.433947ms ago: executing program 5 (id=1086): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbc02, 0x10, 0x0, 0x30f}, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 0s ago: executing program 1 (id=1087): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. [ 40.745160][ T4014] cgroup: Unknown subsys name 'net' [ 40.999135][ T4014] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 41.336584][ T4014] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 43.514061][ T4026] chnl_net:caif_netlink_parms(): no params data found [ 43.541618][ T4033] chnl_net:caif_netlink_parms(): no params data found [ 43.554879][ T4036] chnl_net:caif_netlink_parms(): no params data found [ 43.597014][ T4025] chnl_net:caif_netlink_parms(): no params data found [ 43.639619][ T4026] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.641796][ T4026] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.645256][ T4026] device bridge_slave_0 entered promiscuous mode [ 43.662066][ T4034] chnl_net:caif_netlink_parms(): no params data found [ 43.674016][ T4026] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.676100][ T4026] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.678757][ T4026] device bridge_slave_1 entered promiscuous mode [ 43.728024][ T4033] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.730050][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.732994][ T4033] device bridge_slave_0 entered promiscuous mode [ 43.745173][ T4036] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.747232][ T4036] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.750151][ T4036] device bridge_slave_0 entered promiscuous mode [ 43.766048][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.768208][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.770993][ T4033] device bridge_slave_1 entered promiscuous mode [ 43.782373][ T4036] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.784539][ T4036] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.787412][ T4036] device bridge_slave_1 entered promiscuous mode [ 43.797871][ T4026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.830759][ T4026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.860673][ T4033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.871070][ T4036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.876383][ T4026] team0: Port device team_slave_0 added [ 43.879943][ T4036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.891233][ T4033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.901756][ T4026] team0: Port device team_slave_1 added [ 43.910886][ T4025] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.913511][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.916276][ T4025] device bridge_slave_0 entered promiscuous mode [ 43.925025][ T4034] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.927129][ T4034] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.930109][ T4034] device bridge_slave_0 entered promiscuous mode [ 43.949533][ T4025] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.951624][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.955169][ T4025] device bridge_slave_1 entered promiscuous mode [ 43.969068][ T4034] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.971075][ T4034] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.974388][ T4034] device bridge_slave_1 entered promiscuous mode [ 43.990091][ T4036] team0: Port device team_slave_0 added [ 43.999437][ T4033] team0: Port device team_slave_0 added [ 44.014675][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.016569][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.024264][ T4026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.029713][ T4036] team0: Port device team_slave_1 added [ 44.038947][ T4033] team0: Port device team_slave_1 added [ 44.042941][ T4025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.051581][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.059479][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.067118][ T4026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.089116][ T4025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.100729][ T4034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.125957][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.127931][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.135733][ T4033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.152968][ T4034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.161668][ T4036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.169637][ T4036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.177603][ T4036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.181600][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.183910][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.191626][ T4033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.196612][ T4025] team0: Port device team_slave_0 added [ 44.255349][ T4026] device hsr_slave_0 entered promiscuous mode [ 44.293628][ T4026] device hsr_slave_1 entered promiscuous mode [ 44.333936][ T4036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.335920][ T4036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.343877][ T4036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.356376][ T4025] team0: Port device team_slave_1 added [ 44.381271][ T4034] team0: Port device team_slave_0 added [ 44.415462][ T4034] team0: Port device team_slave_1 added [ 44.417810][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.419775][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.427517][ T4025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.454457][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.456385][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.464416][ T4025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.525210][ T4036] device hsr_slave_0 entered promiscuous mode [ 44.563462][ T4036] device hsr_slave_1 entered promiscuous mode [ 44.613155][ T4036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.615699][ T4036] Cannot create hsr debugfs directory [ 44.655261][ T4033] device hsr_slave_0 entered promiscuous mode [ 44.693542][ T4033] device hsr_slave_1 entered promiscuous mode [ 44.753190][ T4033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.755626][ T4033] Cannot create hsr debugfs directory [ 44.801127][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.809283][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.817505][ T4034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.858818][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.860971][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.869621][ T4034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.915259][ T4025] device hsr_slave_0 entered promiscuous mode [ 44.953704][ T4025] device hsr_slave_1 entered promiscuous mode [ 44.993285][ T4025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.995479][ T4025] Cannot create hsr debugfs directory [ 45.165163][ T4034] device hsr_slave_0 entered promiscuous mode [ 45.193910][ T4016] Bluetooth: hci1: command 0x0409 tx timeout [ 45.196234][ T4016] Bluetooth: hci0: command 0x0409 tx timeout [ 45.203449][ T4034] device hsr_slave_1 entered promiscuous mode [ 45.243325][ T4034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.245721][ T4034] Cannot create hsr debugfs directory [ 45.269553][ T4016] Bluetooth: hci4: command 0x0409 tx timeout [ 45.271541][ T4016] Bluetooth: hci3: command 0x0409 tx timeout [ 45.273934][ T4016] Bluetooth: hci2: command 0x0409 tx timeout [ 45.360331][ T4026] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.401071][ T4026] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.466079][ T4026] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.508123][ T4026] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.592437][ T4033] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.660835][ T4033] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.696965][ T4033] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.753788][ T4033] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.832305][ T4036] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.865713][ T4036] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.905226][ T4036] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.968739][ T4036] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.033486][ T4026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.040184][ T4025] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 46.075358][ T4025] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 46.125293][ T4025] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 46.177540][ T4025] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 46.267196][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.271033][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.286053][ T4026] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.320950][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.324973][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.328496][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.330599][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.334968][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.345494][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.348718][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.351788][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.353935][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.357472][ T4034] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.383151][ T4034] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.417775][ T4034] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.459408][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.462974][ T4034] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.556445][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.559575][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.563192][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.566732][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.577430][ T4036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.600667][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.604457][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.607605][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.610095][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.620066][ T4033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.627474][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.630370][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.645785][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.648739][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.654629][ T4036] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.662556][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.671773][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.675558][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.678142][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.681054][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.685233][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.687364][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.691094][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.700346][ T4025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.720942][ T4033] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.727315][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.730237][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.737348][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.739381][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.749943][ T4025] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.765882][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.772341][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.776137][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.778900][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.781693][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.786394][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.788426][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.799060][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.802014][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.807283][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.809298][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.811729][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.828299][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.831090][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.835617][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.838402][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.840358][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.842832][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.848704][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.851390][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.853471][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.857752][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.871361][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.876214][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.879140][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.882434][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.890699][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.894227][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.897133][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.900328][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.906265][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.921746][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.924756][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.928598][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.940576][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.946186][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.956314][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.959571][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.962586][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.966548][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.976810][ T4034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.980795][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.984307][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.987972][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.990817][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.007274][ T4026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.011073][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.021715][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.026856][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.030196][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.042365][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.045737][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.061898][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.065588][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.078236][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.081248][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.087676][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.090604][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.094853][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.097823][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.108393][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.121258][ T4034] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.126392][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.131801][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.136122][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.150240][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.155742][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.159317][ T1709] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.161334][ T1709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.177707][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.180584][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.182867][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.196291][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.199268][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.211873][ T1709] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.214000][ T1709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.231254][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.241738][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.245380][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.253947][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.263712][ T1535] Bluetooth: hci0: command 0x041b tx timeout [ 47.265566][ T1535] Bluetooth: hci1: command 0x041b tx timeout [ 47.269999][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.272581][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.297338][ T4026] device veth0_vlan entered promiscuous mode [ 47.304765][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.308431][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.311380][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.316183][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.318486][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.322562][ T4036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.338572][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.341709][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.344344][ T4074] Bluetooth: hci2: command 0x041b tx timeout [ 47.346115][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.346112][ T4074] Bluetooth: hci3: command 0x041b tx timeout [ 47.349041][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.360167][ T1535] Bluetooth: hci4: command 0x041b tx timeout [ 47.367739][ T4033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.373997][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.376294][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.381712][ T4026] device veth1_vlan entered promiscuous mode [ 47.389791][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.401953][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.405169][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.407945][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.430242][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.444319][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.447333][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.450288][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.459841][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.462793][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.490879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.495017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.510255][ T4026] device veth0_macvtap entered promiscuous mode [ 47.516588][ T4033] device veth0_vlan entered promiscuous mode [ 47.520965][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.524827][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.527532][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.540098][ T4036] device veth0_vlan entered promiscuous mode [ 47.543803][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.550102][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.552758][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.558298][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.568309][ T4026] device veth1_macvtap entered promiscuous mode [ 47.578419][ T4033] device veth1_vlan entered promiscuous mode [ 47.582562][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.589573][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.592274][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.596132][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.612410][ T4036] device veth1_vlan entered promiscuous mode [ 47.631175][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.639371][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.642139][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.645712][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.648367][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.651050][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.661432][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.666213][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.682550][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.692674][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.696264][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.702582][ T4026] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.707888][ T4026] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.710189][ T4026] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.712511][ T4026] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.726448][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.728608][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.742737][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.746280][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.748983][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.751671][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.756527][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.759050][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.762861][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.766490][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.775719][ T4034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.790389][ T4033] device veth0_macvtap entered promiscuous mode [ 47.800197][ T4036] device veth0_macvtap entered promiscuous mode [ 47.804350][ T4025] device veth0_vlan entered promiscuous mode [ 47.810954][ T4033] device veth1_macvtap entered promiscuous mode [ 47.820450][ T4036] device veth1_macvtap entered promiscuous mode [ 47.825881][ T4025] device veth1_vlan entered promiscuous mode [ 47.855060][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.859876][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.862387][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.865757][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.868459][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.871061][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.875140][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.888236][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.891221][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.896191][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.902991][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.906250][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.940257][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.944078][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.946664][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.949440][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.954783][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.963348][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.966107][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.969883][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.972052][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.981484][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.985063][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.987806][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.990542][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.993618][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.004424][ T4034] device veth0_vlan entered promiscuous mode [ 48.009850][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.012662][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.016703][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.019519][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.026658][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.030366][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.032412][ T4036] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.032541][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.036530][ T4036] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.039573][ T4036] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.041796][ T4036] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.050205][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.053264][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.055806][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.058400][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.061119][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.069532][ T4034] device veth1_vlan entered promiscuous mode [ 48.084141][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.086702][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.089750][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.101411][ T4033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.105375][ T4033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.107678][ T4033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.110070][ T4033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.117031][ T4025] device veth0_macvtap entered promiscuous mode [ 48.146476][ T4025] device veth1_macvtap entered promiscuous mode [ 48.192325][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.196076][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.232617][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.241596][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.244676][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.247319][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.269054][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.271874][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.276258][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.279079][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.281751][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.290802][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.298397][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.314833][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.317054][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.319293][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.322137][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.325478][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.352416][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.358781][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.361457][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.387472][ T4104] loop1: detected capacity change from 0 to 1024 [ 48.390260][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.392968][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.396792][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.400743][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.402841][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.412192][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.428454][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.432847][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.446583][ T4034] device veth0_macvtap entered promiscuous mode [ 48.451450][ T4034] device veth1_macvtap entered promiscuous mode [ 48.482670][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.485127][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.489588][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.492765][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.500848][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.517741][ T1709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.520009][ T1709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.520133][ T4025] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.527582][ T4025] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.530187][ T4025] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.532461][ T4025] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.546030][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.572730][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.575743][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.578385][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.581077][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.586878][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.590056][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.592827][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.596605][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.600652][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.616288][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.618363][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.618646][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.621637][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.626977][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.642531][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.646576][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.649533][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.652519][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.658069][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.660916][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.665085][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.668145][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.672918][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.686223][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.689105][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.734657][ T4034] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.747808][ T4034] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.754566][ T4034] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.757782][ T4034] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.889035][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.891277][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.906868][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.916846][ T4107] loop0: detected capacity change from 0 to 64 [ 48.998052][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.000353][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.003892][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.710821][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.716033][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.719217][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.767663][ T4071] Bluetooth: hci1: command 0x040f tx timeout [ 49.769478][ T4071] Bluetooth: hci0: command 0x040f tx timeout [ 49.771166][ T4071] Bluetooth: hci4: command 0x040f tx timeout [ 49.777861][ T4071] Bluetooth: hci3: command 0x040f tx timeout [ 49.779577][ T4071] Bluetooth: hci2: command 0x040f tx timeout [ 49.802847][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.845491][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.848805][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.854760][ T153] hfsplus: b-tree write err: -5, ino 4 [ 49.994971][ T4115] loop3: detected capacity change from 0 to 4096 [ 50.051525][ T4115] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 50.189956][ T4115] fuse: Bad value for 'user_id' [ 50.191856][ T4115] capability: warning: `syz.3.7' uses 32-bit capabilities (legacy support in use) [ 50.202580][ T4129] loop4: detected capacity change from 0 to 1024 [ 50.251738][ T4130] loop1: detected capacity change from 0 to 512 [ 50.268504][ T4130] EXT4-fs: failed to create workqueue [ 50.269971][ T4130] EXT4-fs (loop1): mount failed [ 51.104649][ T4129] Zero length message leads to an empty skb [ 51.116853][ T4120] loop0: detected capacity change from 0 to 32768 [ 52.162167][ T4071] Bluetooth: hci2: command 0x0419 tx timeout [ 52.164394][ T4071] Bluetooth: hci3: command 0x0419 tx timeout [ 52.166098][ T4071] Bluetooth: hci4: command 0x0419 tx timeout [ 52.169800][ T4071] Bluetooth: hci0: command 0x0419 tx timeout [ 52.181207][ T4071] Bluetooth: hci1: command 0x0419 tx timeout [ 52.419314][ T4120] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.6 (4120) [ 52.472262][ T4120] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 52.483115][ T4120] BTRFS info (device loop0): doing ref verification [ 52.485007][ T4120] BTRFS info (device loop0): force clearing of disk cache [ 52.486896][ T4120] BTRFS info (device loop0): turning off barriers [ 52.488577][ T4120] BTRFS info (device loop0): enabling ssd optimizations [ 52.490333][ T4120] BTRFS info (device loop0): using spread ssd allocation scheme [ 52.500248][ T4120] BTRFS info (device loop0): setting nodatasum [ 52.502010][ T4120] BTRFS info (device loop0): turning on sync discard [ 52.504041][ T4120] BTRFS info (device loop0): using free space tree [ 52.505724][ T4120] BTRFS info (device loop0): has skinny extents [ 52.638432][ T4173] udc-core: couldn't find an available UDC or it's busy [ 52.640420][ T4173] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.412011][ T4210] udc-core: couldn't find an available UDC or it's busy [ 54.597108][ T4210] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.680248][ T4120] BTRFS error (device loop0): open_ctree failed: -22 [ 54.761207][ T4221] udc-core: couldn't find an available UDC or it's busy [ 54.790717][ T4017] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (4017) [ 54.792428][ T4221] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.808580][ T4228] udc-core: couldn't find an available UDC or it's busy [ 54.827387][ T4228] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 57.800769][ T1535] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.812169][ T1535] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.018384][ T4272] 9pnet_virtio: no channels available for device syz [ 59.466564][ T4279] fido_id[4279]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.555323][ T4314] input: syz0 as /devices/virtual/input/input2 [ 61.618897][ T4316] udc-core: couldn't find an available UDC or it's busy [ 61.683306][ T4316] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 61.741021][ T4353] udc-core: couldn't find an available UDC or it's busy [ 61.775338][ T4353] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 62.487424][ T4419] binder: 4418:4419 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 67.220814][ T4459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72'. [ 68.688499][ T4486] udc-core: couldn't find an available UDC or it's busy [ 68.690476][ T4486] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 68.775798][ T4488] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 68.801062][ T4482] sched: RT throttling activated [ 69.452440][ T4488] xt_CT: No such helper "syz1" [ 69.611036][ T4497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 69.622791][ T4497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 69.883693][ T4502] udc-core: couldn't find an available UDC or it's busy [ 69.885822][ T4502] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 69.991483][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.993606][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.309226][ T4501] netlink: 48 bytes leftover after parsing attributes in process `syz.1.85'. [ 72.639882][ T4532] loop4: detected capacity change from 0 to 524255232 [ 72.956083][ T4516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'. [ 74.786052][ T1961] cfg80211: failed to load regulatory.db [ 74.885480][ T4570] ksmbd: Unknown IPC event: 3, ignore. [ 75.366641][ T4584] process 'syz.3.111' launched '/dev/fd/-1' with NULL argv: empty string added [ 76.210870][ T4602] netlink: 'syz.3.120': attribute type 2 has an invalid length. [ 76.213287][ T4602] netlink: 'syz.3.120': attribute type 1 has an invalid length. [ 78.208291][ T26] audit: type=1326 audit(78.140:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b31a768 code=0x7ffc0000 [ 78.218198][ T26] audit: type=1326 audit(78.150:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b31a768 code=0x7ffc0000 [ 78.241386][ T26] audit: type=1326 audit(78.150:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b31a768 code=0x7ffc0000 [ 78.270457][ T26] audit: type=1326 audit(78.150:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b31a768 code=0x7ffc0000 [ 78.308131][ T26] audit: type=1326 audit(78.160:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b31a768 code=0x7ffc0000 [ 78.332521][ T26] audit: type=1326 audit(78.160:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b31a768 code=0x7ffc0000 [ 78.368269][ T26] audit: type=1326 audit(78.160:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b31a768 code=0x7ffc0000 [ 78.414245][ T26] audit: type=1326 audit(78.160:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=27 compat=0 ip=0xffff9b31a768 code=0x7ffc0000 [ 78.449788][ T26] audit: type=1326 audit(78.160:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b31a768 code=0x7ffc0000 [ 78.513384][ T26] audit: type=1326 audit(78.160:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b31a768 code=0x7ffc0000 [ 79.340746][ T4646] udc-core: couldn't find an available UDC or it's busy [ 79.389355][ T4646] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 79.443713][ T4650] netlink: 'syz.1.136': attribute type 1 has an invalid length. [ 79.490748][ T4650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.678635][ T4654] bond1: (slave veth0_to_bond): making interface the new active one [ 79.691219][ T4654] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 79.734455][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 79.746749][ T4650] device veth1 entered promiscuous mode [ 79.756140][ T4650] device veth1 left promiscuous mode [ 79.784250][ T4650] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 81.425037][ T4670] netlink: 830 bytes leftover after parsing attributes in process `syz.4.143'. [ 82.053446][ T4685] syz.1.146 uses obsolete (PF_INET,SOCK_PACKET) [ 82.056564][ T4685] udc-core: couldn't find an available UDC or it's busy [ 82.058497][ T4685] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 83.452266][ T4711] delete_channel: no stack [ 87.011027][ T4732] device bridge0 entered promiscuous mode [ 87.024548][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.238760][ T4734] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 88.587752][ T4755] udc-core: couldn't find an available UDC or it's busy [ 88.601825][ T4755] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 90.398684][ T4789] udc-core: couldn't find an available UDC or it's busy [ 90.401094][ T4789] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 91.587091][ T4808] netlink: 'syz.0.185': attribute type 1 has an invalid length. [ 91.600579][ T4808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.611460][ T4808] device ip6erspan0 entered promiscuous mode [ 91.620207][ T4808] bond1: (slave ip6erspan0): making interface the new active one [ 91.624396][ T4808] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 91.627350][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 91.694901][ T4815] device bridge0 entered promiscuous mode [ 91.702632][ T4815] device macvlan2 entered promiscuous mode [ 91.746303][ T4821] netlink: 'syz.3.190': attribute type 1 has an invalid length. [ 91.749094][ T4821] netlink: 'syz.3.190': attribute type 7 has an invalid length. [ 92.051790][ T4826] netlink: 'syz.0.199': attribute type 2 has an invalid length. [ 92.054193][ T4826] netlink: 'syz.0.199': attribute type 1 has an invalid length. [ 95.400150][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 96.368011][ T4839] udc-core: couldn't find an available UDC or it's busy [ 96.369949][ T4839] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 96.514906][ T4849] futex_wake_op: syz.2.191 tries to shift op by -1; fix this program [ 99.837081][ T4848] hub 8-0:1.0: USB hub found [ 99.839193][ T4848] hub 8-0:1.0: 8 ports detected [ 102.497899][ T4898] netlink: 'syz.1.218': attribute type 4 has an invalid length. [ 103.040598][ T4907] loop6: detected capacity change from 0 to 7 [ 103.045256][ T4907] Dev loop6: unable to read RDB block 7 [ 103.046976][ T4907] loop6: unable to read partition table [ 103.048609][ T4907] loop6: partition table beyond EOD, truncated [ 103.050280][ T4907] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 104.265634][ T26] audit: type=1326 audit(104.200:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4929 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff907f2768 code=0x7ffc0000 [ 104.271515][ T26] audit: type=1326 audit(104.200:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4929 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff907f2768 code=0x7ffc0000 [ 104.293528][ T26] audit: type=1326 audit(104.210:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4929 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=20 compat=0 ip=0xffff907f2768 code=0x7ffc0000 [ 104.299522][ T26] audit: type=1326 audit(104.210:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4929 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff907f2768 code=0x7ffc0000 [ 104.338801][ T26] audit: type=1326 audit(104.220:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4929 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff907f2768 code=0x7ffc0000 [ 104.373155][ T26] audit: type=1326 audit(104.220:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4929 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff907f2768 code=0x7ffc0000 [ 104.378835][ T26] audit: type=1326 audit(104.220:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4929 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff907f2768 code=0x7ffc0000 [ 104.410406][ T26] audit: type=1326 audit(104.220:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4929 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=22 compat=0 ip=0xffff907f2768 code=0x7ffc0000 [ 104.429456][ T4935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 104.448876][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.713180][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 104.986092][ T13] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.989087][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.991887][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.994731][ T13] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.998275][ T13] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.000811][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.737301][ T26] audit: type=1326 audit(105.670:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4929 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff907f2768 code=0x7ffc0000 [ 105.751742][ T26] audit: type=1326 audit(105.670:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4929 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff907f2768 code=0x7ffc0000 [ 105.853232][ T13] usb 1-1: GET_CAPABILITIES returned 0 [ 105.854949][ T13] usbtmc 1-1:16.0: can't read capabilities [ 106.835048][ T4969] netlink: 68 bytes leftover after parsing attributes in process `syz.4.241'. [ 106.907762][ T4969] netlink: 830 bytes leftover after parsing attributes in process `syz.4.241'. [ 106.934201][ T7] usb 1-1: USB disconnect, device number 2 [ 108.747094][ T5002] netlink: 68 bytes leftover after parsing attributes in process `syz.0.255'. [ 108.770079][ T5002] netlink: 830 bytes leftover after parsing attributes in process `syz.0.255'. [ 109.208183][ T5016] udc-core: couldn't find an available UDC or it's busy [ 109.210158][ T5016] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 109.411512][ T5018] mmap: syz.0.259 (5018) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 109.683359][ T5005] syz.1.256 (5005): drop_caches: 2 [ 111.866076][ T5049] netlink: 68 bytes leftover after parsing attributes in process `syz.3.269'. [ 111.901641][ T5049] netlink: 830 bytes leftover after parsing attributes in process `syz.3.269'. [ 112.825696][ T5057] udc-core: couldn't find an available UDC or it's busy [ 112.843171][ T5057] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 113.721491][ T5064] udc-core: couldn't find an available UDC or it's busy [ 113.728640][ T5064] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 115.064151][ T5090] udc-core: couldn't find an available UDC or it's busy [ 115.073247][ T5089] netlink: 68 bytes leftover after parsing attributes in process `syz.2.283'. [ 115.081049][ T5090] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 115.124363][ T5089] netlink: 830 bytes leftover after parsing attributes in process `syz.2.283'. [ 117.354367][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 117.410633][ T5110] udc-core: couldn't find an available UDC or it's busy [ 117.439856][ T5110] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 117.461151][ T5112] trusted_key: encrypted_key: keyword 'loadTwÂñyK¾s' not recognized [ 117.653369][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 118.563757][ T5124] udc-core: couldn't find an available UDC or it's busy [ 118.565710][ T5124] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 118.594164][ T5124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 118.603636][ T5124] udc-core: couldn't find an available UDC or it's busy [ 118.605725][ T5124] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 118.626246][ T5124] udc-core: couldn't find an available UDC or it's busy [ 118.628319][ T5124] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 118.674433][ T7] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 118.677013][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.679177][ T7] usb 1-1: Product: syz [ 118.680303][ T7] usb 1-1: Manufacturer: syz [ 118.685661][ T7] usb 1-1: SerialNumber: syz [ 118.704015][ T7] usb 1-1: config 0 descriptor?? [ 118.757041][ T7] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 119.514674][ T7] gspca_sonixj: reg_r err -110 [ 119.517229][ T7] sonixj: probe of 1-1:0.0 failed with error -110 [ 120.932138][ T1961] usb 1-1: USB disconnect, device number 3 [ 121.066322][ T5155] udc-core: couldn't find an available UDC or it's busy [ 121.068680][ T5155] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 121.205622][ T5143] ksmbd: Unknown IPC event: 6, ignore. [ 121.633153][ T1961] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.166135][ T1961] usb 1-1: Using ep0 maxpacket: 32 [ 122.483206][ T1961] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 122.485632][ T1961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.490535][ T1961] usb 1-1: config 0 descriptor?? [ 122.524728][ T5173] udc-core: couldn't find an available UDC or it's busy [ 122.528802][ T5173] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 122.538542][ T5173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'. [ 122.546908][ T1961] gspca_main: sq930x-2.14.0 probing 041e:403c [ 122.556908][ T5173] udc-core: couldn't find an available UDC or it's busy [ 122.559711][ T5173] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 122.617883][ T5173] udc-core: couldn't find an available UDC or it's busy [ 122.619850][ T5173] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 123.933196][ T1961] gspca_sq930x: ucbus_write failed -110 [ 123.934902][ T1961] sq930x: probe of 1-1:0.0 failed with error -110 [ 124.153202][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 124.238496][ T4073] usb 1-1: USB disconnect, device number 4 [ 124.754619][ T5217] udc-core: couldn't find an available UDC or it's busy [ 124.756608][ T5217] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 124.882989][ T5217] udc-core: couldn't find an available UDC or it's busy [ 124.886707][ T5217] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 126.246624][ T1535] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.285313][ T5222] udc-core: couldn't find an available UDC or it's busy [ 126.293124][ T5222] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 126.554734][ T1535] usb 1-1: Using ep0 maxpacket: 16 [ 126.673769][ T1535] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 126.676276][ T1535] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.699476][ T1535] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.721242][ T5238] udc-core: couldn't find an available UDC or it's busy [ 126.731363][ T5238] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 126.873243][ T1535] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.876022][ T1535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.878320][ T1535] usb 1-1: Product: syz [ 126.879567][ T1535] usb 1-1: Manufacturer: syz [ 126.880890][ T1535] usb 1-1: SerialNumber: syz [ 127.384005][ T1535] usb 1-1: 0:2 : does not exist [ 128.317323][ T5258] udc-core: couldn't find an available UDC or it's busy [ 128.323465][ T5258] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 131.496063][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.563098][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.572765][ T1535] usb 1-1: USB disconnect, device number 5 [ 132.543694][ T1535] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 132.783187][ T1535] usb 1-1: Using ep0 maxpacket: 32 [ 132.910301][ T1535] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 132.913304][ T1535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.917642][ T1535] usb 1-1: config 0 descriptor?? [ 132.955639][ T1535] gspca_main: sq930x-2.14.0 probing 041e:403c [ 133.145454][ T5332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'. [ 133.173955][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'. [ 133.359800][ T5345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.370'. [ 133.368452][ T5345] device vcan0 entered promiscuous mode [ 134.243425][ T1535] gspca_sq930x: reg_w 0105 bf00 failed -110 [ 134.319142][ T1535] sq930x: probe of 1-1:0.0 failed with error -110 [ 134.396140][ T4883] udevd[4883]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.434442][ T4031] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 134.437158][ T4031] CPU: 1 PID: 4031 Comm: kworker/u5:3 Not tainted 5.15.184-syzkaller #0 [ 134.439315][ T4031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.442000][ T4031] Workqueue: hci1 hci_rx_work [ 134.443271][ T4031] Call trace: [ 134.444154][ T4031] dump_backtrace+0x0/0x43c [ 134.445366][ T4031] show_stack+0x2c/0x3c [ 134.446473][ T4031] __dump_stack+0x30/0x40 [ 134.447664][ T4031] dump_stack_lvl+0xf8/0x160 [ 134.448880][ T4031] dump_stack+0x1c/0x5c [ 134.450025][ T4031] sysfs_create_dir_ns+0x22c/0x24c [ 134.451432][ T4031] kobject_add_internal+0x590/0xc54 [ 134.452822][ T4031] kobject_add+0x134/0x1f8 [ 134.453969][ T4031] device_add+0x3f0/0xf94 [ 134.455156][ T4031] hci_conn_add_sysfs+0xbc/0x1cc [ 134.456507][ T4031] le_conn_complete_evt+0x9a4/0x11bc [ 134.457879][ T4031] hci_le_meta_evt+0x85c/0x3010 [ 134.459153][ T4031] hci_event_packet+0xd10/0x11bc [ 134.460473][ T4031] hci_rx_work+0x1cc/0x880 [ 134.461655][ T4031] process_one_work+0x79c/0x1140 [ 134.462972][ T4031] worker_thread+0x8f4/0x101c [ 134.464196][ T4031] kthread+0x374/0x454 [ 134.465262][ T4031] ret_from_fork+0x10/0x20 [ 134.466834][ T4031] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 134.470540][ T4031] Bluetooth: hci1: failed to register connection device [ 134.674301][ T5296] udc-core: couldn't find an available UDC or it's busy [ 134.676298][ T5296] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 134.750182][ T5296] udc-core: couldn't find an available UDC or it's busy [ 134.759925][ T5296] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 135.701765][ T1535] usb 1-1: USB disconnect, device number 6 [ 136.583565][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.933185][ T5408] ksmbd: Unknown IPC event: 6, ignore. [ 140.247830][ T5438] udc-core: couldn't find an available UDC or it's busy [ 140.250171][ T5438] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.314998][ T5439] udc-core: couldn't find an available UDC or it's busy [ 140.319342][ T5439] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.342953][ T5439] udc-core: couldn't find an available UDC or it's busy [ 140.361484][ T5433] netlink: 76 bytes leftover after parsing attributes in process `syz.0.407'. [ 140.383113][ T5438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'. [ 140.385885][ T5439] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 142.066306][ T4072] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 142.069784][ T4072] Bluetooth: hci4: Injecting HCI hardware error event [ 142.075478][ T144] Bluetooth: hci4: hardware error 0x00 [ 144.373661][ T5485] udc-core: couldn't find an available UDC or it's busy [ 144.375666][ T5485] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 145.898038][ T5500] udc-core: couldn't find an available UDC or it's busy [ 145.899980][ T5500] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 146.010427][ T5501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 146.820032][ T5505] udc-core: couldn't find an available UDC or it's busy [ 146.822038][ T5505] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 146.862187][ T5505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.419'. [ 150.049673][ T5535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.427'. [ 150.173629][ T4016] Bluetooth: hci0: command 0x0406 tx timeout [ 150.315599][ T5532] block nbd4: shutting down sockets [ 150.536662][ T5547] udc-core: couldn't find an available UDC or it's busy [ 150.538689][ T5547] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 150.583235][ T5547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.431'. [ 150.651741][ T5548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'. [ 151.532200][ T5552] netlink: 'syz.0.434': attribute type 1 has an invalid length. [ 151.590964][ T5552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.822581][ T5556] bond2: (slave veth3): Enslaving as an active interface with a down link [ 152.122249][ T5552] bond2: (slave veth0_to_bond): making interface the new active one [ 152.197128][ T5552] device veth0_to_bond entered promiscuous mode [ 152.199152][ T5552] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 152.301254][ T5559] device veth1 entered promiscuous mode [ 152.519238][ T5559] device veth1 left promiscuous mode [ 152.522363][ T5559] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 152.531279][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 155.240953][ T5592] udc-core: couldn't find an available UDC or it's busy [ 155.242826][ T5592] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 155.248522][ T5592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 155.749805][ T4016] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 156.583198][ T5603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 157.038499][ T4016] usb 1-1: Using ep0 maxpacket: 8 [ 159.323164][ T4016] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 159.325741][ T4016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.328161][ T4016] usb 1-1: Product: syz [ 159.329340][ T4016] usb 1-1: Manufacturer: syz [ 159.332711][ T4016] usb 1-1: config 0 descriptor?? [ 159.523285][ T4016] usb 1-1: can't set config #0, error -71 [ 159.527604][ T4016] usb 1-1: USB disconnect, device number 7 [ 162.155558][ T5656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'. [ 164.996397][ T5697] udc-core: couldn't find an available UDC or it's busy [ 164.998383][ T5697] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 165.032804][ T5697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 166.555274][ T5707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.479'. [ 168.618542][ T5724] tc_dump_action: action bad kind [ 168.631279][ T5725] udc-core: couldn't find an available UDC or it's busy [ 168.675484][ T5725] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 169.746720][ T4072] Bluetooth: hci0: command 0x0406 tx timeout [ 169.748330][ T4072] Bluetooth: hci2: command 0x0406 tx timeout [ 169.749925][ T4072] Bluetooth: hci3: command 0x0406 tx timeout [ 169.751602][ T4072] Bluetooth: hci1: command 0x0406 tx timeout [ 169.787194][ T5740] udc-core: couldn't find an available UDC or it's busy [ 169.813111][ T5740] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 169.818171][ T5740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.493'. [ 169.977018][ T5747] nbd0: detected capacity change from 0 to 4294967296 [ 170.003311][ T5745] nbd0: detected capacity change from 4294967296 to 2820 [ 171.100825][ T144] block nbd0: Receive control failed (result -104) [ 171.593548][ T5769] udc-core: couldn't find an available UDC or it's busy [ 171.595789][ T5769] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 172.658374][ T5786] udc-core: couldn't find an available UDC or it's busy [ 172.660431][ T5786] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 172.678833][ T5786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'. [ 172.686447][ T5788] binder: 5784:5788 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 172.690397][ T5788] binder: 5788 RLIMIT_NICE not set [ 172.737887][ T5789] binder: 5784:5789 unknown command 1074553619 [ 172.739646][ T5789] binder: 5784:5789 ioctl c0306201 20000640 returned -22 [ 173.069353][ T5790] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.073484][ T5790] qnx4: unable to read the superblock [ 174.095981][ T4387] device veth0_to_bond left promiscuous mode [ 176.686551][ T5819] MPTCP: addr_signal error, add_addr=1, echo=0 [ 176.707426][ T5827] udc-core: couldn't find an available UDC or it's busy [ 176.714103][ T5827] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 178.100017][ T5846] udc-core: couldn't find an available UDC or it's busy [ 178.102141][ T5846] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 181.875010][ T5884] udc-core: couldn't find an available UDC or it's busy [ 181.876905][ T5884] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 182.269655][ T13] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 182.271866][ T13] Bluetooth: hci1: Injecting HCI hardware error event [ 182.288308][ T144] Bluetooth: hci1: hardware error 0x00 [ 183.529755][ T5912] udc-core: couldn't find an available UDC or it's busy [ 183.531804][ T5912] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 185.540334][ T5938] udc-core: couldn't find an available UDC or it's busy [ 185.570726][ T5938] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 186.942317][ T5921] syz.1.557 (5921): drop_caches: 2 [ 188.105161][ T4072] Bluetooth: hci5: command 0x0409 tx timeout [ 188.355363][ T5965] binder: BINDER_SET_CONTEXT_MGR already set [ 188.357254][ T5965] binder: 5964:5965 ioctl 4018620d 20000040 returned -16 [ 188.382523][ T5965] binder: 5964:5965 got transaction to invalid handle, 1 [ 188.422980][ T5965] binder: 5964:5965 transaction failed 29201/-22, size 0-0 line 2917 [ 188.432928][ T5965] binder: 5964:5965 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 188.451546][ T5965] binder: 5965 RLIMIT_NICE not set [ 188.467619][ T5965] binder: 5964:5965 ioctl c0306201 20001440 returned -11 [ 188.470659][ T1535] binder: undelivered TRANSACTION_ERROR: 29201 [ 188.790283][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 189.170116][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.172178][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.175141][ T5945] device bridge_slave_0 entered promiscuous mode [ 189.178534][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.180500][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.184571][ T5945] device bridge_slave_1 entered promiscuous mode [ 189.235017][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.241209][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.258228][ T5945] team0: Port device team_slave_0 added [ 189.261748][ T5945] team0: Port device team_slave_1 added [ 189.281576][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.284016][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.291017][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.304170][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.306116][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.312932][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.375556][ T5945] device hsr_slave_0 entered promiscuous mode [ 189.413547][ T5945] device hsr_slave_1 entered promiscuous mode [ 189.463279][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.465533][ T5945] Cannot create hsr debugfs directory [ 189.538388][ T5945] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 189.565559][ T5945] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 189.616420][ T5945] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 189.673512][ T5945] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 189.780841][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.791716][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.801911][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.807448][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.814970][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.823706][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.826381][ T1709] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.828387][ T1709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.830892][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.852622][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.855660][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.858329][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.860186][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.865934][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.870412][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.878201][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.881455][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.888497][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.892909][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.897535][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.904151][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.906881][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.916359][ T5945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.920320][ T5945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.924325][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.927057][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.002975][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.005709][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.013847][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.127209][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.130071][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.145586][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.148424][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.151236][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.154634][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.159088][ T5945] device veth0_vlan entered promiscuous mode [ 190.167000][ T5945] device veth1_vlan entered promiscuous mode [ 190.186077][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 190.188852][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 190.191508][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.196744][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.202096][ T5945] device veth0_macvtap entered promiscuous mode [ 190.208308][ T5945] device veth1_macvtap entered promiscuous mode [ 190.219036][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.222358][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.226949][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.229838][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.232350][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.235740][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.238386][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.241058][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.244331][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.247117][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.251319][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.257161][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.260059][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.262892][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.266645][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.269249][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.272016][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.275347][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.278241][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.280893][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.284803][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.289563][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.293882][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 190.296747][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.299295][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.302027][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.305785][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.308752][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.314487][ T5945] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.317034][ T5945] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.319549][ T5945] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.322058][ T5945] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.370745][ T4387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.380366][ T4387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.388653][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 190.396597][ T1709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.398862][ T1709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.403418][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 190.475216][ T4073] Bluetooth: hci5: command 0x041b tx timeout [ 190.528535][ T6003] udc-core: couldn't find an available UDC or it's busy [ 190.530624][ T6003] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 192.478460][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.577'. [ 192.545999][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.548347][ T4072] Bluetooth: hci5: command 0x040f tx timeout [ 192.550128][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.911111][ T6031] udc-core: couldn't find an available UDC or it's busy [ 192.913214][ T6031] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 194.507562][ T6038] hub 8-0:1.0: USB hub found [ 194.511666][ T6038] hub 8-0:1.0: 8 ports detected [ 194.592555][ T6042] capability: warning: `syz.4.590' uses deprecated v2 capabilities in a way that may be insecure [ 194.623462][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 196.398690][ T6068] udc-core: couldn't find an available UDC or it's busy [ 196.415607][ T6068] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 196.449064][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.595'. [ 197.792727][ T6079] hub 8-0:1.0: USB hub found [ 197.797541][ T6079] hub 8-0:1.0: 8 ports detected [ 198.553602][ T6082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.601'. [ 200.242485][ T227] block nbd0: Possible stuck request 000000000ca0bc21: control (read@0,4096B). Runtime 30 seconds [ 201.769116][ T6117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.611'. [ 201.771667][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 201.901636][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.614'. [ 203.834691][ T6127] hub 8-0:1.0: USB hub found [ 203.837151][ T6127] hub 8-0:1.0: 8 ports detected [ 205.259875][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 208.017762][ T6190] hub 8-0:1.0: USB hub found [ 208.020640][ T6190] hub 8-0:1.0: 8 ports detected [ 208.355535][ T6195] udc-core: couldn't find an available UDC or it's busy [ 208.357620][ T6195] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 214.021243][ T6272] input: syz1 as /devices/virtual/input/input4 [ 214.463699][ T6287] udc-core: couldn't find an available UDC or it's busy [ 214.465773][ T6287] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 217.615483][ T6328] device syzkaller1 entered promiscuous mode [ 217.620312][ T6327] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 217.622485][ T6327] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 217.651481][ T6327] vhci_hcd vhci_hcd.0: Device attached [ 217.735683][ T6327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.685'. [ 217.742765][ T6329] vhci_hcd: connection closed [ 217.747807][ T4355] vhci_hcd: stop threads [ 217.750756][ T4355] vhci_hcd: release socket [ 217.752054][ T4355] vhci_hcd: disconnect device [ 218.141643][ T6350] netlink: 'syz.3.694': attribute type 16 has an invalid length. [ 218.145350][ T6350] netlink: 'syz.3.694': attribute type 17 has an invalid length. [ 218.147903][ T6350] netlink: 'syz.3.694': attribute type 27 has an invalid length. [ 218.796858][ T6359] udc-core: couldn't find an available UDC or it's busy [ 218.798805][ T6359] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 220.775798][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'. [ 220.791329][ T6369] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 220.794295][ T6369] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 221.392736][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.5.701'. [ 224.102137][ T26] audit: type=1326 audit(224.030:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.3.717" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa57bd768 code=0x0 [ 224.607095][ T6422] udc-core: couldn't find an available UDC or it's busy [ 224.609238][ T6422] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 228.525889][ T6461] netlink: 12 bytes leftover after parsing attributes in process `syz.5.730'. [ 228.530851][ T6461] device vlan2 entered promiscuous mode [ 228.532439][ T6461] device veth0_virt_wifi entered promiscuous mode [ 229.446016][ T6469] udc-core: couldn't find an available UDC or it's busy [ 229.448071][ T6469] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 230.923584][ T6484] udc-core: couldn't find an available UDC or it's busy [ 230.925676][ T6484] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 231.085656][ T227] block nbd0: Possible stuck request 000000000ca0bc21: control (read@0,4096B). Runtime 60 seconds [ 234.024161][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.747'. [ 234.129025][ T6512] overlayfs: overlapping lowerdir path [ 234.558161][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.750'. [ 234.595345][ T6523] device vlan2 entered promiscuous mode [ 234.596931][ T6523] device veth0_virt_wifi entered promiscuous mode [ 239.263570][ T6556] udc-core: couldn't find an available UDC or it's busy [ 239.265487][ T6556] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 239.809083][ T6563] udc-core: couldn't find an available UDC or it's busy [ 239.823440][ T6563] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 240.918738][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.769'. [ 240.956975][ T6578] device vlan3 entered promiscuous mode [ 240.958720][ T6578] device veth0_virt_wifi entered promiscuous mode [ 245.577108][ T6618] udc-core: couldn't find an available UDC or it's busy [ 245.579124][ T6618] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 246.483690][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.788'. [ 246.492899][ T6633] device vlan2 entered promiscuous mode [ 246.494634][ T6633] device veth0_virt_wifi entered promiscuous mode [ 248.261776][ T6652] netlink: 'syz.4.793': attribute type 1 has an invalid length. [ 248.759447][ T6652] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.762078][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.790'. [ 248.772051][ T6654] device veth3 entered promiscuous mode [ 248.778662][ T6654] bond1: (slave veth3): Enslaving as an active interface with a down link [ 248.786189][ T6661] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 248.855765][ T153] Bluetooth: hci6: Frame reassembly failed (-84) [ 248.867565][ T1709] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 251.103218][ T25] Bluetooth: hci6: command 0x1003 tx timeout [ 251.130863][ T4351] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 251.144616][ T4351] Bluetooth: hci6: Frame reassembly failed (-84) [ 253.239774][ T4070] Bluetooth: hci6: command 0x1001 tx timeout [ 253.767166][ T1124] Bluetooth: hci6: Frame reassembly failed (-84) [ 254.298576][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.300347][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.314868][ T1124] Bluetooth: hci6: Frame reassembly failed (-84) [ 256.131570][ T4070] Bluetooth: hci6: command 0x1009 tx timeout [ 256.521609][ T6741] udc-core: couldn't find an available UDC or it's busy [ 256.530752][ T6741] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 260.651265][ T6770] udc-core: couldn't find an available UDC or it's busy [ 260.743992][ T6770] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 261.360324][ T6775] Can't find a SQUASHFS superblock on nullb0 [ 261.364675][ T6775] udc-core: couldn't find an available UDC or it's busy [ 261.366618][ T6775] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 261.813154][ T227] block nbd0: Possible stuck request 000000000ca0bc21: control (read@0,4096B). Runtime 90 seconds [ 265.734251][ T4074] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 265.736600][ T4074] Bluetooth: hci5: Injecting HCI hardware error event [ 265.740079][ T144] Bluetooth: hci5: hardware error 0x00 [ 266.112749][ T6830] udc-core: couldn't find an available UDC or it's busy [ 266.114753][ T6830] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 266.288054][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.848'. [ 268.450007][ T6859] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 268.452846][ T6859] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 270.195131][ T6881] udc-core: couldn't find an available UDC or it's busy [ 270.213818][ T6881] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 271.193959][ T6900] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.196200][ T6900] IPv6: NLM_F_CREATE should be set when creating new route [ 274.029220][ T6941] udc-core: couldn't find an available UDC or it's busy [ 274.031214][ T6941] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 274.124730][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 274.617252][ T6960] udc-core: couldn't find an available UDC or it's busy [ 274.619233][ T6960] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 277.882657][ T4074] Bluetooth: hci3: command 0x0405 tx timeout [ 277.928940][ T7011] udc-core: couldn't find an available UDC or it's busy [ 277.931192][ T7011] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 278.901471][ T7025] netlink: 200 bytes leftover after parsing attributes in process `syz.3.909'. [ 281.729645][ T7068] Can't find a SQUASHFS superblock on nullb0 [ 283.327434][ T4016] Bluetooth: hci7: command 0x1003 tx timeout [ 283.330724][ T4031] Bluetooth: hci7: sending frame failed (-49) [ 284.946540][ T7097] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.949958][ T7097] F2FS-fs (loop1): Unable to read 1th superblock [ 284.952021][ T7097] blk_update_request: I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.981721][ T7097] F2FS-fs (loop1): Unable to read 2th superblock [ 285.055794][ T7098] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.253697][ T7098] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.343262][ T13] Bluetooth: hci7: command 0x1001 tx timeout [ 285.345217][ T4031] Bluetooth: hci7: sending frame failed (-49) [ 286.001731][ T7098] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.346752][ T7098] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.234448][ T7098] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.241588][ T7098] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.256756][ T7098] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.274069][ T7098] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.499704][ T13] Bluetooth: hci7: command 0x1009 tx timeout [ 288.856873][ T7129] udc-core: couldn't find an available UDC or it's busy [ 288.859061][ T7129] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 292.792739][ T227] block nbd0: Possible stuck request 000000000ca0bc21: control (read@0,4096B). Runtime 120 seconds [ 292.854577][ T7169] udc-core: couldn't find an available UDC or it's busy [ 292.856864][ T7169] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 292.870790][ T7165] usb usb8: usbfs: process 7165 (syz.2.958) did not claim interface 0 before use [ 292.874589][ T7165] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 293.115189][ T7177] udc-core: couldn't find an available UDC or it's busy [ 293.130913][ T7177] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 294.194807][ T7195] udc-core: couldn't find an available UDC or it's busy [ 294.211678][ T7195] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 297.690608][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.5.974'. [ 298.416189][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.5.974'. [ 299.827566][ T7251] udc-core: couldn't find an available UDC or it's busy [ 299.829729][ T7251] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 302.675985][ T7274] udc-core: couldn't find an available UDC or it's busy [ 302.678016][ T7274] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 302.697743][ T7275] udc-core: couldn't find an available UDC or it's busy [ 302.699806][ T7275] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 304.979576][ T7306] udc-core: couldn't find an available UDC or it's busy [ 304.984855][ T7306] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 306.057610][ T7318] udc-core: couldn't find an available UDC or it's busy [ 306.080169][ T7318] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 307.251989][ T7342] udc-core: couldn't find an available UDC or it's busy [ 307.276418][ T7342] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 307.913797][ T7346] xt_hashlimit: max too large, truncated to 1048576 [ 307.916101][ T7346] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 308.847603][ T7349] udc-core: couldn't find an available UDC or it's busy [ 308.851706][ T7349] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 311.239096][ T7388] ksmbd: Unknown IPC event: 6, ignore. [ 315.603504][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.605313][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.288124][ T7449] udc-core: couldn't find an available UDC or it's busy [ 316.290297][ T7449] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 316.437394][ T7415] syz.2.1039 (7415): drop_caches: 2 [ 316.509470][ T7452] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1052'. [ 316.875296][ T7459] device veth1_macvtap left promiscuous mode [ 319.867296][ T7493] udc-core: couldn't find an available UDC or it's busy [ 319.869337][ T7493] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 320.574289][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1069'. [ 323.639447][ T227] block nbd0: Possible stuck request 000000000ca0bc21: control (read@0,4096B). Runtime 150 seconds [ 324.923862][ T26] audit: type=1326 audit(324.850:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.3.1079" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa57bd768 code=0x0 [ 325.552409][ T7547] device syzkaller1 entered promiscuous mode [ 327.586118][ T27] INFO: task udevd:5669 blocked for more than 143 seconds. [ 327.622190][ T27] Not tainted 5.15.184-syzkaller #0 [ 327.624292][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 327.626661][ T27] task:udevd state:D stack: 0 pid: 5669 ppid: 3643 flags:0x0000000c [ 327.629163][ T27] Call trace: [ 327.630050][ T27] __switch_to+0x2f4/0x558 [ 327.631253][ T27] __schedule+0xe00/0x1c0c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 327.734523][ T27] schedule+0x11c/0x1c8 [ 327.735819][ T27] io_schedule+0x84/0x160 [ 327.737041][ T27] wait_on_page_bit_common+0x61c/0xa74 [ 327.738487][ T27] do_read_cache_page+0x748/0x8f8 [ 327.739835][ T27] read_cache_page+0x68/0x88 [ 327.741040][ T27] read_part_sector+0xe8/0x4c4 [ 327.742332][ T27] adfspart_check_ICS+0xbc/0x560 [ 327.826607][ T7575] udc-core: couldn't find an available UDC or it's busy [ 327.828717][ T7575] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 327.834928][ T27] bdev_disk_changed+0x7fc/0x1378 [ 327.836392][ T27] blkdev_get_whole+0x2a4/0x344 [ 327.837727][ T27] blkdev_get_by_dev+0x224/0x874 [ 327.839078][ T27] blkdev_open+0x108/0x27c [ 327.840322][ T27] do_dentry_open+0x760/0xebc [ 327.901979][ T27] vfs_open+0x7c/0x90 [ 327.903569][ T27] path_openat+0x1f80/0x26e4 [ 327.905680][ T27] do_filp_open+0x164/0x330 [ 327.906916][ T27] do_sys_openat2+0x128/0x3d8 [ 327.913592][ T27] __arm64_sys_openat+0x120/0x154 [ 327.914969][ T27] invoke_syscall+0x98/0x2b8 [ 327.916261][ T27] el0_svc_common+0x138/0x258 [ 327.917570][ T27] do_el0_svc+0x58/0x14c [ 327.927895][ T27] el0_svc+0x78/0x1e0 [ 327.932231][ T27] el0t_64_sync_handler+0xcc/0xe4 [ 327.953132][ T27] el0t_64_sync+0x1a0/0x1a4 [ 327.954545][ T27] INFO: task syz.0.496:5747 blocked for more than 143 seconds. [ 327.956764][ T27] Not tainted 5.15.184-syzkaller #0 [ 327.958320][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 327.960673][ T27] task:syz.0.496 state:D stack: 0 pid: 5747 ppid: 4036 flags:0x00000009 [ 327.970563][ T27] Call trace: [ 327.971533][ T27] __switch_to+0x2f4/0x558 [ 327.972760][ T27] __schedule+0xe00/0x1c0c [ 327.980426][ T27] schedule+0x11c/0x1c8 [ 327.981613][ T27] schedule_preempt_disabled+0x18/0x2c [ 327.989782][ T27] __mutex_lock_common+0xa9c/0x1edc [ 327.991278][ T27] mutex_lock_nested+0xac/0x11c [ 327.992616][ T27] blkdev_put+0xdc/0x6ac [ 328.003193][ T27] blkdev_close+0x74/0xb0 [ 328.004502][ T27] __fput+0x1c0/0x7f8 [ 328.005583][ T27] ____fput+0x20/0x30 [ 328.006656][ T27] task_work_run+0x12c/0x1e0 [ 328.007905][ T27] do_notify_resume+0x24b4/0x3128 [ 328.009273][ T27] el0_svc+0xf0/0x1e0 [ 328.010328][ T27] el0t_64_sync_handler+0xcc/0xe4 [ 328.011757][ T27] el0t_64_sync+0x1a0/0x1a4 [ 328.053057][ T27] [ 328.053057][ T27] Showing all locks held in the system: [ 328.055334][ T27] 1 lock held by khungtaskd/27: [ 328.056680][ T27] #0: ffff8000143211e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 328.059504][ T27] 2 locks held by kworker/1:2/1535: [ 328.060990][ T27] #0: ffff0000c0021938 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 [ 328.101881][ T27] #1: ffff8000232c7c00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 [ 328.117539][ T27] 2 locks held by getty/3804: [ 328.118891][ T27] #0: ffff0000d37c6098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 [ 328.121499][ T27] #1: ffff80001bc7b2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2f0/0xf6c [ 328.133357][ T27] 2 locks held by kworker/0:3/4016: [ 328.134816][ T27] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 [ 328.137692][ T27] #1: ffff80001f297c00 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 [ 328.140422][ T27] 3 locks held by syz.4.353/5310: [ 328.141814][ T27] #0: ffff0000da394ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x60/0x105c [ 328.173129][ T27] #1: ffff0000da394078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x334/0x105c [ 328.175893][ T27] #2: ffff8000163b8da8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb0/0x214 [ 328.178807][ T27] 1 lock held by udevd/5669: [ 328.180025][ T27] #0: ffff0000cbb36d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x120/0x874 [ 328.182713][ T27] 1 lock held by syz.0.496/5747: [ 328.195083][ T27] #0: ffff0000cbb36d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xdc/0x6ac [ 328.197813][ T27] 1 lock held by syz.5.1086/7562: [ 328.199120][ T27] #0: ffff800014325ca8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x248/0x5e0 [ 328.202140][ T27] 2 locks held by cmp/7581: [ 328.234324][ T27] [ 328.235115][ T27] ============================================= [ 328.235115][ T27] [ 328.237411][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 328.239227][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.184-syzkaller #0 [ 328.241421][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.244187][ T27] Call trace: [ 328.245069][ T27] dump_backtrace+0x0/0x43c [ 328.246289][ T27] show_stack+0x2c/0x3c [ 328.247497][ T27] __dump_stack+0x30/0x40 [ 328.248754][ T27] dump_stack_lvl+0xf8/0x160 [ 328.250072][ T27] dump_stack+0x1c/0x5c [ 328.251204][ T27] panic+0x2e4/0x854 [ 328.252306][ T27] hung_task_panic+0x0/0x2c [ 328.253596][ T27] kthread+0x374/0x454 [ 328.254718][ T27] ret_from_fork+0x10/0x20 [ 328.255979][ T27] SMP: stopping secondary CPUs [ 328.257334][ T27] Kernel Offset: disabled [ 328.258457][ T27] CPU features: 0x8,000081c1,21302e40 [ 328.259918][ T27] Memory Limit: none [ 328.686889][ T27] Rebooting in 86400 seconds..