last executing test programs: 3m19.783814s ago: executing program 2 (id=20): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@jqfmt_vfsv0}, {@nouid32}, {@noblock_validity}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nouid32}, {@noacl}, {@noinit_itable}, {@usrquota}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000098) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @random="2cd3cc6c8f3f"}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x400005, 0x9fd, 0x85, 0x41, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) socket$key(0xf, 0x3, 0x2) 3m10.754215591s ago: executing program 2 (id=36): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@multicast, @multicast, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) syz_emit_ethernet(0x57, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x49, 0x0, 0xe000, 0x9, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x35, 0x0, @gue={{0x1, 0x0, 0x1, 0x6, 0x100, @void}, "e1715b80363a02f0c137397a3ab498cf34cc25b73d1159b6ca297434a0b728a9ce79380bac185d726f"}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'sit0\x00', 0x0}) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') 3m9.694255244s ago: executing program 2 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) bind$vsock_stream(r3, &(0x7f00000003c0)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r5, &(0x7f0000000540), 0x1197) 3m8.394209783s ago: executing program 2 (id=45): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x5, 0x0, 0x18, 0x2, 0x5c, 0x4}}) pread64(r0, &(0x7f00000014c0)=""/4104, 0x1008, 0x10000) 3m6.754315069s ago: executing program 2 (id=53): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000140), 0x4) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)}], 0x1}, 0x4005) 2m46.758152572s ago: executing program 2 (id=53): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000140), 0x4) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)}], 0x1}, 0x4005) 2m31.000961322s ago: executing program 32 (id=53): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000140), 0x4) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)}], 0x1}, 0x4005) 2.71427292s ago: executing program 3 (id=1294): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="040000000400000004000000000000000000", @ANYRES32], 0x50) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001980)=0x1) 2.567208263s ago: executing program 0 (id=1297): unshare(0xc000400) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r1, &(0x7f0000009680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=""/162, 0xa2}, 0x80200000}], 0x1, 0x10103, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) dup(0xffffffffffffffff) 2.510118505s ago: executing program 5 (id=1299): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0xfffffffffffffff8, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4b}, {0xc}, {0xc, 0x9}}}]}]}, 0x70}}, 0x0) 2.210462571s ago: executing program 3 (id=1301): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="68cabf2dfb58fc0a1d6b6898", 0xc}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 2.152265422s ago: executing program 0 (id=1302): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) gettimeofday(0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@filter={'filter\x00', 0x2, 0x4, 0x350, 0xffffffff, 0x1a8, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0xffffff00], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x1, 0x65}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private1, @empty, [0xffffff00], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6}, {0x0, 0x4, 0x2}, 0x0, 0xd}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'veth1_vlan\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x20, 0x1000, 0x2, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x1c, '\x00', r6, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback}}}}}}, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b6a, &(0x7f0000000040)={0x200b, 0x200d, 0x2000d, 0x7, 0x200e, 0x0}) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) 2.151378142s ago: executing program 3 (id=1303): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000bc0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x1, 0x1537, &(0x7f0000001140)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvfrom$unix(r0, &(0x7f0000000340)=""/198, 0xc6, 0x40000140, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 2.139908423s ago: executing program 1 (id=1304): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x8}, 0x2) 1.739983831s ago: executing program 4 (id=1305): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008404, &(0x7f0000000100)=ANY=[], 0x85, 0x6b9, &(0x7f00000008c0)="$eJzs3c1vHGcZAPBn1uu1N5TESZM2QZViNRIgrCb+kAvm0oAQ8qFCVTlwthInsbJJg+0it0LEfBQuHHrIH1AOvnFASNwjyoUL3Hr1sRKCSy81p0Hzseu1vbte49TrTX+/aDzvzDvv+z7zzNeuN9YG8KW1OBXVp5HE4tSbG9ny9tZcY3tr7kGzHBFjEVGJqBazSD5P0/TjiJtRTHElW1l2l+zt/dG5ZunJysLbn3y2/WmxVC2nfPvKwXZd/P5xl4rNcorJiBgp58ewp79bh/U3flh3SWsPs4RdayYOBm00ItLcv58Ua3769xdaNW3qnVofeuYDQyApnpsHTEScKS/07HVA8VQsntlDbXPQAQAAAMAJOLcTO7ERZwcdBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyT8vv/k3KqNMuTkTS//79WrouyfLpcPdrmT7+oOAAAAAAAAADgBF3diZ3YiLPN5TTJP/N/NV+4mP/8Srwba7Ecq3E9NmIp1mM9VmMmIibaOqptLK2vr860Wjb/Z8DBlrMdW84eEuhYOa8/i70GAAAAAAAAgGHzeZqmPTf4VSzufv4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACnQZKm6eOIJIrpYjlPJqJSjYjxiKhl221G/LNZHlZXXot4OuggAAAA4BjSPrc7txM7sRFnW+2S/D3/S/n7/vF4Nx7GeqzEejRiOW7nvwso3vVXtrfmGttbcw+y6WC/3/vPkcLNe4yIkXyp08iX8y3qcSdW8jXX41a8E0lyOyp5y8zlLJbRKGI6GNcvs5iSNwqjfUZ2u5xne/5hOd+veqR97eqIv0yZyDMy2srIdBlblo3zzQx0zsQRj87+kWai0gr2YtsoWSL27cSenL/R53hnynm2P7/tkvPB2J+J2baz76XdTIx3vCq+8Zc//uRe4+H9e3fWpk7PLh202WHdSDkv7iv1MhOPdzMx15aJl3uffcOTib5M5+fEpdbyYvwwfhxTMRlvxWqsxM9iKdZjOSbjB3lpqTyfk7ZLvi1Tlbaub+4Z6K3DIqmVZ2hxsPbGFIfE9Gre9mysxI/inbgdy/F6/m82ZuLbMR/zsdB2hC/1PsL5VV/pctWnX+0Y/LVvloV6RPyunOfudrm/9nsLP7Ysr+fb8to665PiSJ7fcxfezdKFPrK0/974p96hVL9WFrIxfh17T5fBmtiXiZm2TLzYOxN/yG8ra42H91fvLT3qb7gLH5aF7Bh80Psp8Ywe0P3KzpcLrWH3nh1Z3YtFXf4apD1ftfITl6Jd5UDdpVZdcaVudr1Sa+VruIM9zeZ1L3esG8/XXG6r2/96q9F6PTTsH/4APLc+qEWc+daZWv1f9X/UP6r/pn6v/ub498e+M/ZKLUb/Nvrd6vTI1yuvJH+Oj+IXu+//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/9/ae+/fX2o0llf3FdI0fdylapgLza8zO8FBr7wQMahdrkXE6cj8f9M0LdckpyGe3oU0MxbpUZsnReGvEdFfq2pEdKq6Ovgk9Lhp+AIoeC7cWH/w6Mbae++/tvJg6e7y3eWHC/PzC9ML86/P3biz0lieLn4OOkrgi7D70B90JAAAAAAAAAAAAEC/TuLPCbqPPn6SuwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMqcWpqD6NJGamr09ny9tbc41sapZ3t6xGRCUikp9HJB9H3Ixiiom27pJu4zxZWXj7k8+2P93tq9rcvtKrXX82yykmI2KknD+r/m4du7+ktYdZwq41EweD9r8AAAD//0jrDBA=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xa2242, 0x4c) 1.737868871s ago: executing program 1 (id=1315): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x489, &(0x7f0000000a40)="$eJzs3M9vFFUcAPDvTFug/GpFREXRKhqJP1paUDl4UKM3DyZ64FrbgsgChtZESBOrMXg0Jt6NRxP/Am9eiHowJl418WhIiDYmFE9r5hfdbrelLW1Xup9Psux7M2/73ndm3u6becwE0LEGsn+SiN0R8VtE9BXZhQUGire52emxm7PTY0nU62/9leTlbsxOj1VFq8/tKjNH0oj00yReThbXO3np8tnRWm3iYpkfmjr3/tDkpcvPnTk3enri9MT5kRMnjh8bfvGFkefXJc4srhsH611FbuzkF+/8+G3WrAOHiiWNcdzWzRYBtTCQbbW/67nmdU+uuLK7w56GdNLdxoawKlmHyHZXT97/+6Ir5ndeX7z+SVsbB2yo7Ldp+9KrZ+rAFpZEu1sAtEf1Q5+d/1avTRp6/C9cfyViW5mem50em7sVf3ek5fKeDax/ICJOzvz7VfaK1V6HAABYg3xs82yr8V8aB/L3Yq5jbzmH0h8R90TEvoi4NyL2R8R9EXnZ+yPigazw1aj3rbD+gab84vFPeq1lm9dJNv57qWHsN9cQf/nW31Xm9uTx9ySnztQmjpbb5Ej0bM/yw8vU8f1rv36+1LrG8V/2yuqvxoJlA651N12gGx+dGl2vjXD944iD3a3iT27NBGRHwIMRcXB1f3pvlTjz9DcPL1Xo9vEvYx3mmepfRzxV7P+ZaIq/kiw/Pzm0I2oTR4eqo2Kxn3658uZS9d9R/Osg2/87Fx7/TSX6/kmK+dqeqNUmLk6uvo4rv3+25DnNWo//bcnb+Zz1z+8Wyz4cnZq6OByxLXkjz1fndPnykfnPVvmqfBb/kcOt+/++8jNZ/A9FRHYQH4qIRyLi0bLtj0XE4xFxeJn4f3j1ifeWiT+JJNq6/8dbfv/dOv77k8b5+jUkus5e/W6pGfOV7f/jMZN/1xby77/bWGkD73DzAQAAwF0hjYjdkaSDRXpgd6Tp4GDxf/j3x860dmFy6plTFz44P17cI9AfPWl1pauv4XrocDJT/sUiP1JeK67WHyuvG3/Z1ZvnB8cu1MbbHDt0ul0L+39U/T/zZ1e7WwdsOPdrQedq7v9pm9oBbL6V/P47F4CtqUX/721HO4DN5/wfOler/v9RU974H7amxf3/jxaPrAO2IuN/6Fz6P3Qu/R860p3c17/2RHWzwIJVvSu+af/S5bM7VlO4IxLVEy82sq7emF8SadtD7qBE1mM2o675Z33MP0MFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgbvZfAAAA//+dEeOQ") r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x2) fstat(r0, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, 0x0, &(0x7f0000000140)={0x4, 0x2000400, 0x9a, 0x0, 0x7, 0x3fd, 0x28ab, 0x100000000, 0x8}) 1.665884003s ago: executing program 4 (id=1306): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.611037445s ago: executing program 1 (id=1307): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x5}) syz_open_procfs(0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 1.610068605s ago: executing program 4 (id=1308): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) 1.593080275s ago: executing program 5 (id=1309): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xc1401) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x3, 0x3, 0x1, 0x1, 0x9}, 0x2, 0x9, 'id1\x00', 'timer0\x00', 0x0, 0x25, 0x2, 0x3, 0x80000001}) 1.522277526s ago: executing program 4 (id=1310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') read$eventfd(r3, &(0x7f0000000100), 0x8) 1.521896266s ago: executing program 1 (id=1311): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000063c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1.521778906s ago: executing program 5 (id=1312): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1.514144067s ago: executing program 1 (id=1313): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x803, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000080)) 1.501290667s ago: executing program 5 (id=1314): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000300)=0x3ff, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000540)=0xe8) socket$inet6(0xa, 0x1, 0x6) quotactl$Q_GETNEXTQUOTA(0xffffffff00001203, &(0x7f0000000100)=@md0, r2, &(0x7f0000000580)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x5f0}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000100003040000000002dcdf2500007400", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 1.151343025s ago: executing program 0 (id=1316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x90002) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000020) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb77d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_io_uring_setup(0x1333, 0x0, 0x0, &(0x7f00000002c0), 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) syz_open_dev$usbmon(&(0x7f00000000c0), 0xfffffffffffffa47, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000b80)={0x1f, 0x0, @none, 0x100, 0x2}, 0xe) 1.120502816s ago: executing program 5 (id=1317): syz_usb_connect(0x3, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="120110014142dd407018010011980102030109022d0001800180050904e600030a0000070905081008003f0a0d090587a3"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084) 1.046259407s ago: executing program 3 (id=1318): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchown(r1, 0x0, 0x0) 702.611785ms ago: executing program 4 (id=1319): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000500)={r2, r0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x9f45, 0x6, 0x6, 0x0, 0x8, 'syz1\x00'}) 654.005136ms ago: executing program 1 (id=1320): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0xfffffffffffffff8, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4b}, {0xc}, {0xc, 0x9}}}]}]}, 0x70}}, 0x0) 590.159217ms ago: executing program 4 (id=1321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x7ff, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0xfffffffc, @mcast2}}}, 0x108) r6 = accept4$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x0, 0x80000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0xfffffffffffffe26, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r7, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_opts(r6, 0x29, 0x37, 0x0, 0xffffffffffffff9e) close_range(r3, 0xffffffffffffffff, 0x0) 141.247947ms ago: executing program 5 (id=1322): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./bus\x00', 0x3000490, &(0x7f00000000c0), 0x45, 0x7bf, &(0x7f0000001140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000000500)='\x00', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 140.401017ms ago: executing program 0 (id=1323): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x14a101, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) 67.413389ms ago: executing program 0 (id=1324): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000063c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 25.93283ms ago: executing program 3 (id=1325): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 24.81585ms ago: executing program 0 (id=1326): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 0s ago: executing program 3 (id=1327): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000300)=0x3ff, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000540)=0xe8) socket$inet6(0xa, 0x1, 0x6) quotactl$Q_GETNEXTQUOTA(0xffffffff00001203, &(0x7f0000000100)=@md0, r2, &(0x7f0000000580)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x5f0}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000100003040000000002dcdf2500007400", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) kernel console output (not intermixed with test programs): oid problems! [ 118.211662][ T5376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.213364][ T5376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.214817][ T5376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.216351][ T5376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.219656][ T5376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.222502][ T5376] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.224012][ T5376] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.225338][ T5376] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.226621][ T5376] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.281699][ T5157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.282996][ T5157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.284280][ T5157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.285599][ T5157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.290402][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.292037][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.301896][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.303209][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.304457][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.306232][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.308313][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.309761][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.317740][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.319332][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.320768][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.322330][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.323806][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.325211][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.326653][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.332248][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.333824][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.997180][ T4463] tipc: Left network mode [ 119.213521][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.215152][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.216486][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.299674][ T1620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.314972][ T1620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.321503][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.905442][ T5013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.906747][ T5013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.912928][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.042905][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.044116][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.045495][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.046644][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.062768][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.064362][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.070630][ T5002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.071887][ T5002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.210037][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.228449][ T5003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.229621][ T5003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.231358][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.246345][ T5751] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 121.206927][ T5785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.219684][ T5785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.438960][ T5785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.440506][ T5785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.720166][ T5780] netlink: 28 bytes leftover after parsing attributes in process `syz.3.109'. [ 122.063542][ T5824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.198'. [ 122.421533][ T5843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.424987][ T5843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.649473][ T5850] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 122.650762][ T5850] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 122.729164][ T5248] hid-generic 0080:F0CA:2000E.0002: unknown main item tag 0x0 [ 122.730496][ T5248] hid-generic 0080:F0CA:2000E.0002: unknown main item tag 0x0 [ 122.731696][ T5248] hid-generic 0080:F0CA:2000E.0002: unknown main item tag 0x0 [ 122.732783][ T5248] hid-generic 0080:F0CA:2000E.0002: unknown main item tag 0x0 [ 122.738140][ T5248] hid-generic 0080:F0CA:2000E.0002: unknown main item tag 0x0 [ 122.739306][ T5248] hid-generic 0080:F0CA:2000E.0002: unknown main item tag 0x0 [ 122.740504][ T5248] hid-generic 0080:F0CA:2000E.0002: unknown main item tag 0x0 [ 122.741609][ T5248] hid-generic 0080:F0CA:2000E.0002: unknown main item tag 0x0 [ 122.742679][ T5248] hid-generic 0080:F0CA:2000E.0002: unknown main item tag 0x0 [ 122.743770][ T5248] hid-generic 0080:F0CA:2000E.0002: unknown main item tag 0x0 [ 122.744957][ T5248] hid-generic 0080:F0CA:2000E.0002: unknown main item tag 0x0 [ 122.746147][ T5248] hid-generic 0080:F0CA:2000E.0002: unknown main item tag 0x0 [ 122.746167][ T5248] hid-generic 0080:F0CA:2000E.0002: unknown main item tag 0x0 [ 122.746175][ T5248] hid-generic 0080:F0CA:2000E.0002: unknown main item tag 0x0 [ 122.767427][ T5248] hid-generic 0080:F0CA:2000E.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 122.828868][ T5860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.830294][ T5860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.358691][ T5863] netlink: 28 bytes leftover after parsing attributes in process `syz.4.207'. [ 123.673183][ T5866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.910733][ T5866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.241104][ T5880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.252255][ T5880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.469909][ T5249] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.505287][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.506830][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.649154][ T5249] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 124.651039][ T5249] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 124.654252][ T5249] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 124.655618][ T5249] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.656897][ T5249] usb 1-1: Product: syz [ 124.657795][ T5249] usb 1-1: Manufacturer: syz [ 124.658498][ T5249] usb 1-1: SerialNumber: syz [ 124.804590][ T5896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.808247][ T5896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.875603][ T5249] usb 1-1: Can't get UAC3 power state for id 10 [ 124.879068][ T5249] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 124.882765][ T5249] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 124.914419][ T5249] usb 1-1: USB disconnect, device number 3 [ 125.147805][ T5899] udevd[5899]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.210532][ T5907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.222'. [ 125.718107][ T5935] input: syz1 as /devices/virtual/input/input5 [ 125.918805][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.919840][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.077249][ T4328] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 126.078973][ T4328] Bluetooth: hci0: command 0x0401 tx timeout [ 126.165054][ T5958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.166540][ T5958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.476652][ T4463] device hsr_slave_0 left promiscuous mode [ 126.528609][ T4463] device hsr_slave_1 left promiscuous mode [ 126.607234][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.608509][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.610182][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.611544][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.613004][ T4463] device bridge_slave_1 left promiscuous mode [ 126.621188][ T4463] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.668200][ T4463] device bridge_slave_0 left promiscuous mode [ 126.669412][ T4463] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.734010][ T4463] device hsr_slave_0 left promiscuous mode [ 126.750449][ T4463] device hsr_slave_1 left promiscuous mode [ 126.827473][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.828687][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.832206][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.833562][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.835058][ T4463] device bridge_slave_1 left promiscuous mode [ 126.845538][ T4463] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.897613][ T4463] device bridge_slave_0 left promiscuous mode [ 126.898824][ T4463] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.920247][ T4463] device hsr_slave_0 left promiscuous mode [ 126.977297][ T4463] device hsr_slave_1 left promiscuous mode [ 127.040618][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.041980][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.043772][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.045098][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.046569][ T4463] device bridge_slave_1 left promiscuous mode [ 127.047128][ T4330] Bluetooth: hci6: command 0x1003 tx timeout [ 127.049295][ T4342] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 127.061589][ T4463] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.107863][ T4463] device bridge_slave_0 left promiscuous mode [ 127.109043][ T4463] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.270720][ T4463] device veth1_macvtap left promiscuous mode [ 127.271929][ T4463] device veth0_macvtap left promiscuous mode [ 127.273282][ T4463] device veth1_vlan left promiscuous mode [ 127.274314][ T4463] device veth0_vlan left promiscuous mode [ 127.350808][ T4463] device veth1_macvtap left promiscuous mode [ 127.351831][ T4463] device veth0_macvtap left promiscuous mode [ 127.352782][ T4463] device veth1_vlan left promiscuous mode [ 127.353697][ T4463] device veth0_vlan left promiscuous mode [ 127.417265][ T4463] device veth1_macvtap left promiscuous mode [ 127.418477][ T4463] device veth0_macvtap left promiscuous mode [ 127.419441][ T4463] device veth1_vlan left promiscuous mode [ 127.420361][ T4463] device veth0_vlan left promiscuous mode [ 128.111614][ T4463] team0 (unregistering): Port device team_slave_1 removed [ 128.129004][ T4463] team0 (unregistering): Port device team_slave_0 removed [ 128.151141][ T4463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.167968][ T4463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.291723][ T4463] bond0 (unregistering): Released all slaves [ 128.493634][ T4463] team0 (unregistering): Port device team_slave_1 removed [ 128.506826][ T4463] team0 (unregistering): Port device team_slave_0 removed [ 128.521518][ T4463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.534982][ T4463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.633525][ T4463] bond0 (unregistering): Released all slaves [ 128.856969][ T4463] team0 (unregistering): Port device team_slave_1 removed [ 128.868575][ T4463] team0 (unregistering): Port device team_slave_0 removed [ 128.880423][ T4463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.892380][ T4463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.983904][ T4463] bond0 (unregistering): Released all slaves [ 129.108315][ T6045] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.109452][ T6045] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 129.112631][ T6045] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 129.114824][ T6045] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.115835][ T6045] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 129.122672][ T6045] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 129.123880][ T6045] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.124862][ T6045] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 129.130002][ T6045] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 129.131233][ T6045] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.132218][ T6045] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 129.134611][ T6045] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 129.135770][ T6045] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.136739][ T6045] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 129.162753][ T6045] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 129.167559][ T6056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.169037][ T6056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.375991][ T6094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.241'. [ 129.685285][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.687253][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.716448][ T6116] device bridge_slave_1 left promiscuous mode [ 129.720256][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.847442][ T6116] device bridge_slave_0 left promiscuous mode [ 129.848732][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.423624][ T6146] binder: 6145 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 130.423643][ T6146] binder: 6145:6146 ioctl c018620c 20000000 returned -22 [ 130.510855][ T6149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.512409][ T6149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.117159][ T4328] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.118202][ T4328] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.197080][ T4342] Bluetooth: hci4: command 0x0c1a tx timeout [ 131.198182][ T4342] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.199093][ T4342] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.202877][ T6170] binder: 6169:6170 ioctl 400c620e 20001480 returned -22 [ 131.242631][ T6173] binder: 6172:6173 tried to acquire reference to desc 0, got 1 instead [ 131.286035][ T6173] binder: 6172:6173 got reply transaction with bad transaction stack, transaction 10 has target 6172:0 [ 131.295032][ T6173] binder: 6172:6173 transaction reply to 0:0 failed 11/29201/-71, size 0-0 line 2961 [ 131.297112][ T5244] binder: release 6172:6173 transaction 10 out, still active [ 131.298366][ T5244] binder: undelivered TRANSACTION_COMPLETE [ 131.299211][ T5244] binder: undelivered TRANSACTION_ERROR: 29201 [ 131.322641][ T5249] binder: send failed reply for transaction 10, target dead [ 131.616980][ T6180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.621102][ T6180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.645105][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 131.706837][ T6191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.708716][ T6191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.021304][ T6195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.023058][ T6195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.131172][ T6197] capability: warning: `syz.0.273' uses 32-bit capabilities (legacy support in use) [ 132.433820][ T6214] netlink: 28 bytes leftover after parsing attributes in process `syz.1.278'. [ 132.610820][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.613328][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.207125][ T4328] Bluetooth: hci0: command 0x0406 tx timeout [ 133.208338][ T4328] Bluetooth: hci1: command 0x0406 tx timeout [ 133.277222][ T4342] Bluetooth: hci2: command 0x0406 tx timeout [ 133.278280][ T4342] Bluetooth: hci3: command 0x0406 tx timeout [ 133.279237][ T4342] Bluetooth: hci4: command 0x0406 tx timeout [ 133.561627][ T6234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.564493][ T6234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.667080][ T114] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 133.851677][ T114] usb 1-1: unable to get BOS descriptor or descriptor too short [ 133.853484][ T114] usb 1-1: not running at top speed; connect to a high speed hub [ 133.855553][ T114] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.857363][ T114] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.861041][ T114] usb 1-1: string descriptor 0 read error: -22 [ 133.861970][ T114] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.869525][ T114] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.876937][ T114] usb 1-1: 0:2 : does not exist [ 134.061525][ T6239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.063110][ T6239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.154737][ T6243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.159379][ T6243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.686562][ T6254] mmap: syz.5.295 (6254) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 134.691313][ T6254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.693253][ T6254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.089218][ T114] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 135.094194][ T114] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 135.097813][ T114] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 135.106578][ T114] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 135.109780][ T114] usb 1-1: USB disconnect, device number 4 [ 135.247821][ T6264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.249433][ T6264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.314772][ T6264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.316349][ T6264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.375775][ T5495] udevd[5495]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.441213][ T6267] netlink: 28 bytes leftover after parsing attributes in process `syz.5.298'. [ 135.633455][ T6269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.635153][ T6269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.035504][ T6319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.041765][ T6319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.599534][ T6343] binder: 6342:6343 got transaction to context manager from process owning it [ 138.600923][ T6343] binder: 6342:6343 transaction call to 6342:0 failed 13/29201/-22, size 0-249 line 3034 [ 138.603075][ T5249] binder: undelivered TRANSACTION_ERROR: 29201 [ 138.734720][ T6348] loop4: detected capacity change from 0 to 256 [ 139.521213][ T6348] FAT-fs (loop4): Directory bread(block 64) failed [ 139.522393][ T6348] FAT-fs (loop4): Directory bread(block 65) failed [ 139.527567][ T6348] FAT-fs (loop4): Directory bread(block 66) failed [ 139.528689][ T6348] FAT-fs (loop4): Directory bread(block 67) failed [ 139.529711][ T6348] FAT-fs (loop4): Directory bread(block 68) failed [ 139.547192][ T6348] FAT-fs (loop4): Directory bread(block 69) failed [ 139.548350][ T6348] FAT-fs (loop4): Directory bread(block 70) failed [ 139.549338][ T6348] FAT-fs (loop4): Directory bread(block 71) failed [ 139.550386][ T6348] FAT-fs (loop4): Directory bread(block 72) failed [ 139.551374][ T6348] FAT-fs (loop4): Directory bread(block 73) failed [ 139.647812][ T6351] binder: 6350:6351 got transaction to context manager from process owning it [ 139.649244][ T6351] binder: 6350:6351 transaction call to 6350:0 failed 15/29201/-22, size 0-0 line 3034 [ 139.659964][ T6351] binder: 6350:6351 ioctl c0306201 20000500 returned -14 [ 139.675746][ T5249] binder: undelivered TRANSACTION_ERROR: 29201 [ 140.552706][ T6381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.560180][ T6381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.661617][ T6396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.663952][ T6396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.719383][ T6398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.724792][ T6398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.391302][ T6433] netlink: 28 bytes leftover after parsing attributes in process `syz.5.332'. [ 142.455455][ T6437] random: crng reseeded on system resumption [ 144.130197][ T6476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.142593][ T6476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.154305][ T6479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.156646][ T6479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.311657][ T6494] binder: 6492:6494 ioctl c018620c 20000000 returned -22 [ 144.317229][ T114] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 144.487907][ T6506] tipc: Started in network mode [ 144.488870][ T6506] tipc: Node identity , cluster identity 4711 [ 144.489860][ T6506] tipc: Failed to obtain node identity [ 144.490842][ T6506] tipc: Enabling of bearer rejected, failed to enable media [ 144.768426][ T114] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 144.770290][ T114] usb 1-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 144.773958][ T114] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.775351][ T114] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.776573][ T114] usb 1-1: Product: syz [ 144.777334][ T114] usb 1-1: Manufacturer: syz [ 144.777988][ T114] usb 1-1: SerialNumber: syz [ 146.036727][ T6538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.041264][ T6538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.224039][ T6544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.225794][ T6544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.485345][ T114] cdc_ncm 1-1:1.0: failed to get mac address [ 146.487661][ T114] cdc_ncm 1-1:1.0: bind() failure [ 146.494887][ T114] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 146.497350][ T114] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 146.499886][ T114] usbtest: probe of 1-1:1.1 failed with error -71 [ 146.511531][ T114] usb 1-1: USB disconnect, device number 5 [ 146.762523][ T6553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.764060][ T6553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.218077][ T6570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.362'. [ 149.447069][ T114] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 149.638457][ T114] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 149.639749][ T114] usb 1-1: config 0 has no interface number 0 [ 149.642328][ T114] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 149.644015][ T114] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.645228][ T114] usb 1-1: Product: syz [ 149.645879][ T114] usb 1-1: Manufacturer: syz [ 149.646534][ T114] usb 1-1: SerialNumber: syz [ 149.659391][ T114] usb 1-1: config 0 descriptor?? [ 149.714657][ T6609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.722930][ T6609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.467529][ T4844] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 150.471740][ T4844] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 150.537113][ T114] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 150.538770][ T114] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 150.540347][ T114] asix: probe of 1-1:0.251 failed with error -71 [ 150.544242][ T114] usb 1-1: USB disconnect, device number 6 [ 150.722105][ T6652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.391'. [ 150.869484][ T6655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.872233][ T6655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.362971][ T6663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.364608][ T6663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.417999][ T6665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.420626][ T6665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.461654][ T6667] binder: 6666:6667 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000001000000 != 0000000000000000 [ 151.467213][ T4844] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 151.647059][ T4844] usb 1-1: Using ep0 maxpacket: 16 [ 151.649557][ T4844] usb 1-1: unable to get BOS descriptor or descriptor too short [ 151.651457][ T4844] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 151.652948][ T4844] usb 1-1: config 5 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.656034][ T4844] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 151.657828][ T4844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.659063][ T4844] usb 1-1: Product: syz [ 151.659684][ T4844] usb 1-1: Manufacturer: syz [ 151.660371][ T4844] usb 1-1: SerialNumber: syz [ 151.977761][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.979209][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.002052][ T4844] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 152.003587][ T4844] snd-usb-audio: probe of 1-1:5.0 failed with error -22 [ 152.367761][ T5247] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 152.369401][ T5247] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 152.411686][ T4844] usb 1-1: 2:1 : can't get Cluster Descriptor [ 152.583830][ T6704] binder: 6703:6704 tried to acquire reference to desc 0, got 1 instead [ 152.620527][ T4844] usb 1-1: USB disconnect, device number 7 [ 152.692981][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.694618][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.116003][ T6718] netlink: 28 bytes leftover after parsing attributes in process `syz.4.418'. [ 153.292006][ T6725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.296898][ T6725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.849263][ T6735] usb usb8: usbfs: process 6735 (syz.1.426) did not claim interface 3 before use [ 154.121971][ T6748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.123428][ T6748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.201152][ T6752] binder: 6751 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 154.201171][ T6752] binder: 6751:6752 ioctl c018620c 20000000 returned -22 [ 154.730836][ T6773] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 154.853713][ T6789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.855894][ T6789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.863465][ T6787] binder_alloc: binder_alloc_mmap_handler: 6786 ffffbd943000-ffffbd94f000 already mapped failed -16 [ 154.891622][ T6791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.893081][ T6791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.135056][ T6795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.453'. [ 155.392801][ T6797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.395262][ T6797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.404634][ T6809] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 156.406524][ T6809] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 156.408458][ T6809] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 156.409693][ T6809] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 156.410670][ T6809] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 156.413082][ T6809] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 156.414256][ T6809] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 156.415193][ T6809] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 156.416543][ T6809] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 156.419978][ T6809] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 156.420909][ T6809] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 156.423677][ T6809] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 156.424885][ T6809] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 156.425855][ T6809] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 156.427799][ T6809] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 156.429383][ T6811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.430860][ T6811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.465559][ T6824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.468550][ T6824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.645582][ T6811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.648398][ T6811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.656694][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.658490][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.215890][ T6847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.219698][ T6844] netlink: 28 bytes leftover after parsing attributes in process `syz.5.473'. [ 157.223724][ T6847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.511069][ T6862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.513898][ T6862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.637175][ T4374] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 157.677083][ T4328] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.779451][ T6864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.781353][ T6864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.827205][ T4374] usb 1-1: Using ep0 maxpacket: 16 [ 157.836079][ T4374] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 157.837809][ T4374] usb 1-1: config 0 has no interface number 0 [ 157.844376][ T4374] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 157.846125][ T4374] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 157.851400][ T4374] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 157.852765][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.854666][ T4374] usb 1-1: Product: syz [ 157.855329][ T4374] usb 1-1: Manufacturer: syz [ 157.856013][ T4374] usb 1-1: SerialNumber: syz [ 157.858988][ T4374] usb 1-1: config 0 descriptor?? [ 157.860272][ T6854] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.861431][ T6854] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 158.065513][ T6854] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 158.070009][ T6854] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 158.272413][ T4374] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 158.477143][ T4342] Bluetooth: hci4: command 0x0c1a tx timeout [ 158.478230][ T4342] Bluetooth: hci3: command 0x0c1a tx timeout [ 158.479224][ T4342] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.480225][ T4342] Bluetooth: hci1: command 0x0c1a tx timeout [ 158.654349][ T6866] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 158.655592][ T6866] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 158.657279][ T6866] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.658374][ T6866] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 158.659391][ T6866] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 158.778150][ T6904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.784936][ T6904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.011702][ T6929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.504'. [ 159.728775][ T6989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.735898][ T6989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.911364][ T4374] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 159.913077][ T4374] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 159.914726][ T4374] asix: probe of 1-1:0.34 failed with error -71 [ 159.923652][ T4374] usb 1-1: USB disconnect, device number 9 [ 159.927179][ T4328] Bluetooth: hci0: command 0x0c1a tx timeout [ 160.186895][ T7025] Invalid ELF header len 1 [ 160.274441][ T7037] syz.4.565 uses obsolete (PF_INET,SOCK_PACKET) [ 160.410308][ T7051] random: crng reseeded on system resumption [ 160.464472][ T7056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.466189][ T7056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.470764][ T7051] hibernate: Hibernate image not generated by this kernel! [ 160.473960][ T7051] PM: hibernation: Image mismatch: architecture specific data [ 160.717097][ T4328] Bluetooth: hci4: command 0x0c1a tx timeout [ 160.718145][ T4328] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.719141][ T4328] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.727558][ T4342] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.359115][ T4342] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.361899][ T4342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.364090][ T4342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.365746][ T4342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.367280][ T4342] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 161.368557][ T4342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.538376][ T4342] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.540606][ T4342] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.542796][ T4342] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.544179][ T4342] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.545816][ T4342] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 161.549461][ T4330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.596941][ T4328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.606214][ T4328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.614746][ T4328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.616444][ T4328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.625347][ T4328] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 161.628471][ T4328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.639653][ T5005] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.666457][ T4330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 161.669124][ T4330] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 161.671102][ T4330] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 161.672574][ T4330] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 161.693784][ T4328] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 161.695201][ T4328] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 161.758711][ T5005] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.589270][ T5005] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.699217][ T5005] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.768675][ T7079] chnl_net:caif_netlink_parms(): no params data found [ 162.785850][ T7081] chnl_net:caif_netlink_parms(): no params data found [ 162.909319][ T7086] chnl_net:caif_netlink_parms(): no params data found [ 162.962372][ T7111] netlink: 28 bytes leftover after parsing attributes in process `syz.5.594'. [ 162.985006][ T7075] chnl_net:caif_netlink_parms(): no params data found [ 163.044245][ T7079] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.048111][ T7079] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.050100][ T7079] device bridge_slave_0 entered promiscuous mode [ 163.095203][ T7086] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.096561][ T7086] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.098675][ T7086] device bridge_slave_0 entered promiscuous mode [ 163.100492][ T7079] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.101503][ T7079] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.102935][ T7079] device bridge_slave_1 entered promiscuous mode [ 163.134305][ T7086] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.135535][ T7086] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.149438][ T7086] device bridge_slave_1 entered promiscuous mode [ 163.157565][ T7086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.161542][ T7081] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.162693][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.166987][ T7081] device bridge_slave_0 entered promiscuous mode [ 163.365387][ T7079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.368030][ T7086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.381174][ T7086] team0: Port device team_slave_0 added [ 163.390938][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.392161][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.393796][ T7081] device bridge_slave_1 entered promiscuous mode [ 163.437143][ T4328] Bluetooth: hci0: command 0x0409 tx timeout [ 163.442717][ T7079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.444266][ T7075] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.445386][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.446981][ T7075] device bridge_slave_0 entered promiscuous mode [ 163.452442][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.453652][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.455098][ T7075] device bridge_slave_1 entered promiscuous mode [ 163.468265][ T7086] team0: Port device team_slave_1 added [ 163.538169][ T7075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.544726][ T7079] team0: Port device team_slave_0 added [ 163.551963][ T7081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.555134][ T7081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.558548][ T7075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.563982][ T7079] team0: Port device team_slave_1 added [ 163.597191][ T4342] Bluetooth: hci1: command 0x0409 tx timeout [ 163.601399][ T7086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.602502][ T7086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.606390][ T7086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.634852][ T7081] team0: Port device team_slave_0 added [ 163.637948][ T7075] team0: Port device team_slave_0 added [ 163.640919][ T7075] team0: Port device team_slave_1 added [ 163.642917][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.644060][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.652381][ T7079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.654764][ T7086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.655903][ T7086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.660613][ T7086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.677570][ T4342] Bluetooth: hci2: command 0x0409 tx timeout [ 163.691761][ T7081] team0: Port device team_slave_1 added [ 163.715693][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.716819][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.731780][ T7075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.737206][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.738261][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.742036][ T7079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.757148][ T4342] Bluetooth: hci3: command 0x0409 tx timeout [ 163.774644][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.775777][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.779980][ T7081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.932343][ T7079] device hsr_slave_0 entered promiscuous mode [ 163.977328][ T7079] device hsr_slave_1 entered promiscuous mode [ 164.017062][ T7079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.018299][ T7079] Cannot create hsr debugfs directory [ 164.019565][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.020697][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.024658][ T7075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.031523][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.032624][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.036346][ T7081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.108342][ T7086] device hsr_slave_0 entered promiscuous mode [ 164.151578][ T7086] device hsr_slave_1 entered promiscuous mode [ 164.178003][ T7086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.179259][ T7086] Cannot create hsr debugfs directory [ 164.368729][ T7075] device hsr_slave_0 entered promiscuous mode [ 164.387616][ T7075] device hsr_slave_1 entered promiscuous mode [ 164.427607][ T7075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.428880][ T7075] Cannot create hsr debugfs directory [ 164.472268][ T7081] device hsr_slave_0 entered promiscuous mode [ 164.508203][ T7081] device hsr_slave_1 entered promiscuous mode [ 164.557060][ T7081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.559009][ T7081] Cannot create hsr debugfs directory [ 164.761007][ T7079] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.918464][ T7079] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.230200][ T7079] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.348350][ T7079] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.517073][ T4342] Bluetooth: hci0: command 0x041b tx timeout [ 165.680454][ T4342] Bluetooth: hci1: command 0x041b tx timeout [ 165.696496][ T5005] device hsr_slave_0 left promiscuous mode [ 165.737404][ T5005] device hsr_slave_1 left promiscuous mode [ 165.757144][ T4328] Bluetooth: hci2: command 0x041b tx timeout [ 165.817742][ T5005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.819019][ T5005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.823305][ T5005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.824548][ T5005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.837059][ T4328] Bluetooth: hci3: command 0x041b tx timeout [ 165.841677][ T5005] device bridge_slave_1 left promiscuous mode [ 165.843460][ T5005] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.877733][ T5005] device bridge_slave_0 left promiscuous mode [ 165.879092][ T5005] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.017164][ T5005] device veth1_macvtap left promiscuous mode [ 166.018187][ T5005] device veth0_macvtap left promiscuous mode [ 166.019136][ T5005] device veth1_vlan left promiscuous mode [ 166.020012][ T5005] device veth0_vlan left promiscuous mode [ 166.291847][ T7231] Driver unsupported XDP return value 0 on prog (id 66) dev N/A, expect packet loss! [ 167.597036][ T4328] Bluetooth: hci0: command 0x040f tx timeout [ 167.757111][ T4328] Bluetooth: hci1: command 0x040f tx timeout [ 167.837047][ T4328] Bluetooth: hci2: command 0x040f tx timeout [ 167.917028][ T4342] Bluetooth: hci3: command 0x040f tx timeout [ 168.218903][ T5005] team0 (unregistering): Port device team_slave_1 removed [ 168.409065][ T5005] team0 (unregistering): Port device team_slave_0 removed [ 168.571465][ T5005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.768172][ T5005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.677047][ T4328] Bluetooth: hci0: command 0x0419 tx timeout [ 169.837109][ T4328] Bluetooth: hci1: command 0x0419 tx timeout [ 169.927082][ T4342] Bluetooth: hci2: command 0x0419 tx timeout [ 170.007166][ T4342] Bluetooth: hci3: command 0x0419 tx timeout [ 170.278533][ T5005] bond0 (unregistering): Released all slaves [ 170.619186][ T7086] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.624550][ T7237] netlink: 28 bytes leftover after parsing attributes in process `syz.5.605'. [ 170.739174][ T7086] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.819496][ T7086] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.902038][ T7086] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.158927][ T7075] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.269566][ T7075] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.408271][ T7075] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.779547][ T7075] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.820408][ T7079] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 183.919050][ T7079] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 184.005048][ T7079] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 184.094657][ T7370] netlink: 28 bytes leftover after parsing attributes in process `syz.5.616'. [ 184.108798][ T7086] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 184.138727][ T7079] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 184.182040][ T7075] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 184.248989][ T7086] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 184.288225][ T7086] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 184.617848][ T7075] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 184.649677][ T7075] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 184.690718][ T7086] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 184.754249][ T7075] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 184.800109][ T7081] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 185.110299][ T7075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.111535][ T7081] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 185.148210][ T7081] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 185.238163][ T5005] device hsr_slave_0 left promiscuous mode [ 185.281122][ T5005] device hsr_slave_1 left promiscuous mode [ 185.327256][ T5005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.328492][ T5005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.332336][ T5005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.333671][ T5005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.335169][ T5005] device bridge_slave_1 left promiscuous mode [ 185.336252][ T5005] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.378279][ T5005] device bridge_slave_0 left promiscuous mode [ 185.379324][ T5005] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.507901][ T5005] device veth1_macvtap left promiscuous mode [ 185.509024][ T5005] device veth0_macvtap left promiscuous mode [ 185.510010][ T5005] device veth1_vlan left promiscuous mode [ 185.510914][ T5005] device veth0_vlan left promiscuous mode [ 187.357801][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.358818][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.899756][ T5005] team0 (unregistering): Port device team_slave_1 removed [ 188.058484][ T5005] team0 (unregistering): Port device team_slave_0 removed [ 188.227507][ T5005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.428262][ T5005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.923903][ T5005] bond0 (unregistering): Released all slaves [ 190.239282][ T7081] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 190.329326][ T7079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.334976][ T7075] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.341487][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.343044][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.355348][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.357164][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.358518][ T5002] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.359685][ T5002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.361535][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.373975][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.375439][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.383794][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.385936][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.389406][ T5004] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.390592][ T5004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.393098][ T7079] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.405716][ T7086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.408222][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.424681][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.426267][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.429155][ T5002] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.430294][ T5002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.432409][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.434271][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.435684][ T5002] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.436796][ T5002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.442607][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.448887][ T7086] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.453719][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.455207][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.456621][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.469300][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.471487][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.474645][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.476224][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.501384][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.503036][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.504575][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.506082][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.508760][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.510187][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.512894][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.514537][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.515998][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.521636][ T5002] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.522759][ T5002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.526058][ T7075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.529963][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.534974][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.536484][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.541985][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.543581][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.552168][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.554006][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.555376][ T5002] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.556393][ T5002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.575165][ T7086] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.576864][ T7086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.591847][ T7079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.593485][ T7079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.611186][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.613076][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.614660][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.616537][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.625239][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.635746][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.642740][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.644360][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.645922][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.661357][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.662849][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.667874][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.669597][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.671106][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.676497][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.678325][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.681362][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.683542][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.685536][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.690763][ T7081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.695608][ T7081] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.723764][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.725317][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.726711][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.728614][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.737171][ T5002] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.738352][ T5002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.743309][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.744760][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.746298][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.749131][ T5002] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.750262][ T5002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.775100][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.776867][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.787909][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.790592][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.819195][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.820973][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.822686][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.824168][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.825510][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.843209][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.844978][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.855947][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.865475][ T7075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.889733][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.891113][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.892311][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.893484][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.914547][ T7079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.928327][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.929634][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.930831][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.932444][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.936978][ T7086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.979898][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.981627][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.985903][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.994336][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.996141][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 191.001782][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.022326][ T7075] device veth0_vlan entered promiscuous mode [ 191.024015][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.025486][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.028970][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.030640][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.032275][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.038256][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.042061][ T7075] device veth1_vlan entered promiscuous mode [ 191.053226][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.054935][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 191.056419][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.064518][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.066131][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.071742][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.073655][ T7079] device veth0_vlan entered promiscuous mode [ 191.075793][ T7086] device veth0_vlan entered promiscuous mode [ 191.101397][ T7081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.106574][ T7079] device veth1_vlan entered promiscuous mode [ 191.112733][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.114399][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.115638][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.122527][ T7086] device veth1_vlan entered promiscuous mode [ 191.141228][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.142844][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 191.144236][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 191.147684][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.151556][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.154375][ T7075] device veth0_macvtap entered promiscuous mode [ 191.157226][ T7075] device veth1_macvtap entered promiscuous mode [ 191.182839][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.184449][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.185759][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.188887][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.200465][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.205507][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.238475][ T7079] device veth0_macvtap entered promiscuous mode [ 191.241063][ T7079] device veth1_macvtap entered promiscuous mode [ 191.245464][ T7086] device veth0_macvtap entered promiscuous mode [ 191.253076][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.254739][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.256191][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.271895][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.273532][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.275225][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.291029][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.294221][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.295759][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.297985][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.299378][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.301726][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.312848][ T7086] device veth1_macvtap entered promiscuous mode [ 191.324429][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.326305][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.333000][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.334643][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.336172][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.338189][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.339703][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.341185][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.343813][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.346160][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.352349][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.354066][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.355755][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.358311][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.359905][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.362179][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.366727][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.369104][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.370629][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.376178][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.384346][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.386067][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.388340][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.390009][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.391587][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.393466][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.395009][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.396581][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.398546][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.400291][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.404326][ T7086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.408404][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.410205][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.411703][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.413243][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.415036][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.416722][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.419565][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.421225][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.423453][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.443212][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.445067][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.446587][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.449302][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.454808][ T7079] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.457361][ T7079] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.459230][ T7079] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.460741][ T7079] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.466421][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.468582][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.470178][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.471799][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.473624][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.475463][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.480202][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.481999][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.483547][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.485324][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.489791][ T7086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.492478][ T7075] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.493904][ T7075] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.495376][ T7075] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.496640][ T7075] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.528220][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.530117][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.539665][ T7086] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.542913][ T7086] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.544417][ T7086] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.546264][ T7086] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.563993][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 191.565757][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.589761][ T5003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.593582][ T5003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.601163][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 191.602950][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.604475][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.638677][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.640235][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.645094][ T7081] device veth0_vlan entered promiscuous mode [ 191.666915][ T7081] device veth1_vlan entered promiscuous mode [ 191.676066][ T5013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.680202][ T5013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.690651][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.692397][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 191.727914][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 191.729664][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.731153][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.734205][ T5013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.735502][ T5013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.736924][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.738322][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.742276][ T7081] device veth0_macvtap entered promiscuous mode [ 191.744339][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 191.745983][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 191.750073][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.755663][ T7081] device veth1_macvtap entered promiscuous mode [ 191.780032][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.781484][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.789528][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.791140][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 191.792798][ T5003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.793915][ T5003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.795194][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 191.810583][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.813496][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.822601][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.824601][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.826362][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.831406][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.833040][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.834736][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.836339][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.843166][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.844844][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.846632][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.853684][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.858759][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.860639][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.863130][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.864863][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.866425][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.869451][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.871030][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.872666][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.874312][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.876163][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.878972][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.880866][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.882488][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.884302][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.886918][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.901849][ T7081] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.903314][ T7081] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.915442][ T7081] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.927884][ T7081] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.937956][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.939654][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.030250][ T5005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.031657][ T5005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.033088][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.059519][ T5005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.060774][ T5005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.062100][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 192.462983][ T7642] netlink: 64 bytes leftover after parsing attributes in process `syz.5.654'. [ 192.601258][ T7658] netlink: 'syz.0.660': attribute type 3 has an invalid length. [ 192.661124][ T7666] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.663'. [ 192.662653][ T7666] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.663'. [ 192.681418][ T7666] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.663'. [ 192.736618][ T7675] sock: sock_timestamping_bind_phc: sock not bind to device [ 193.175255][ T7717] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 193.176485][ T7717] syzkaller1: linktype set to 270 [ 193.221493][ T7721] netlink: 'syz.3.686': attribute type 1 has an invalid length. [ 193.222920][ T7721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.686'. [ 193.240815][ T7725] netlink: 'syz.1.687': attribute type 16 has an invalid length. [ 193.242380][ T7725] netlink: 'syz.1.687': attribute type 1 has an invalid length. [ 193.245092][ T7725] netlink: 'syz.1.687': attribute type 2 has an invalid length. [ 193.257964][ T7725] netlink: 52 bytes leftover after parsing attributes in process `syz.1.687'. [ 193.469173][ T7747] netlink: 'syz.5.699': attribute type 7 has an invalid length. [ 193.500648][ T7752] netlink: 'syz.4.701': attribute type 2 has an invalid length. [ 193.562268][ T7760] netlink: 'syz.5.705': attribute type 29 has an invalid length. [ 193.563751][ T7760] netlink: 'syz.5.705': attribute type 29 has an invalid length. [ 193.571617][ T7760] netlink: 'syz.5.705': attribute type 29 has an invalid length. [ 195.099461][ T7945] netlink: 76 bytes leftover after parsing attributes in process `syz.5.795'. [ 195.794500][ T8033] loop4: detected capacity change from 0 to 1764 [ 195.916923][ T8047] netlink: 64 bytes leftover after parsing attributes in process `syz.3.842'. [ 196.003221][ T8054] printk: syz.3.844 (8054): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 196.086553][ T8065] loop3: detected capacity change from 0 to 1764 [ 196.252795][ T7533] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 196.712919][ T8125] loop3: detected capacity change from 0 to 2048 [ 196.741099][ T8125] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 196.750589][ T8125] UDF-fs: error (device loop3): udf_read_inode: (ino 1312) failed !bh [ 196.753492][ T8125] UDF-fs: Scanning with blocksize 512 failed [ 196.755394][ T8129] loop4: detected capacity change from 0 to 8 [ 196.770714][ T8125] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 196.773581][ T8125] UDF-fs: Scanning with blocksize 1024 failed [ 196.785813][ T8129] input: syz0 as /devices/virtual/input/input7 [ 196.788699][ T8125] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 196.794722][ T8125] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 196.796181][ T8125] UDF-fs: Scanning with blocksize 2048 failed [ 196.802200][ T8125] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 196.804370][ T8125] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 196.806495][ T8125] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 196.808394][ T8125] UDF-fs: Scanning with blocksize 4096 failed [ 196.809441][ T8125] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 196.856857][ T8111] loop0: detected capacity change from 0 to 32768 [ 196.875012][ T8136] loop3: detected capacity change from 0 to 8 [ 196.895507][ T8136] SQUASHFS error: Failed to read block 0x4de: -5 [ 196.897972][ T8136] SQUASHFS error: Failed to read block 0x4de: -5 [ 196.899217][ T8136] SQUASHFS error: Failed to read block 0x4de: -5 [ 196.900438][ T8136] SQUASHFS error: Failed to read block 0x4de: -5 [ 196.921058][ T8111] loop0: p1 p3 < > [ 197.048039][ T8150] loop3: detected capacity change from 0 to 16 [ 197.065196][ T8150] erofs: (device loop3): mounted with root inode @ nid 36. [ 197.081112][ T8152] loop0: detected capacity change from 0 to 256 [ 197.092255][ T8152] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 197.094148][ T8152] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 197.192138][ T8083] udevd[8083]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 197.195811][ T7533] udevd[7533]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 197.665655][ T8176] loop1: detected capacity change from 0 to 512 [ 197.685952][ T8176] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 197.702058][ T8176] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 197.702559][ T8182] loop5: detected capacity change from 0 to 512 [ 197.703452][ T8176] System zones: 0-2, 18-18, 34-34 [ 197.706488][ T8182] EXT4-fs: Ignoring removed i_version option [ 197.708547][ T8182] EXT4-fs: Ignoring removed nobh option [ 197.714601][ T8176] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 197.720295][ T8176] EXT4-fs (loop1): Remounting filesystem read-only [ 197.723688][ T8176] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.889: corrupted inode contents [ 197.724559][ T8182] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 197.728139][ T8176] EXT4-fs (loop1): Remounting filesystem read-only [ 197.729242][ T8176] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #16: comm syz.1.889: mark_inode_dirty error [ 197.731694][ T8176] EXT4-fs (loop1): Remounting filesystem read-only [ 197.733440][ T8176] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.889: corrupted inode contents [ 197.735695][ T8176] EXT4-fs (loop1): Remounting filesystem read-only [ 197.736776][ T8176] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.889: mark_inode_dirty error [ 197.739462][ T8176] EXT4-fs (loop1): Remounting filesystem read-only [ 197.740760][ T8176] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.889: corrupted inode contents [ 197.740898][ T8182] EXT4-fs (loop5): orphan cleanup on readonly fs [ 197.744768][ T8176] EXT4-fs (loop1): Remounting filesystem read-only [ 197.745874][ T8176] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 197.747844][ T8176] EXT4-fs (loop1): Remounting filesystem read-only [ 197.747858][ T8182] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.890: corrupted in-inode xattr [ 197.748950][ T8176] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.889: corrupted inode contents [ 197.752120][ T8182] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.890: couldn't read orphan inode 15 (err -117) [ 197.754495][ T8176] EXT4-fs (loop1): Remounting filesystem read-only [ 197.754688][ T8182] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 197.755607][ T8176] EXT4-fs error (device loop1): ext4_truncate:4325: inode #16: comm syz.1.889: mark_inode_dirty error [ 197.759234][ T8176] EXT4-fs (loop1): Remounting filesystem read-only [ 197.760407][ T8176] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 197.764425][ T8176] EXT4-fs (loop1): Remounting filesystem read-only [ 197.767361][ T8176] EXT4-fs (loop1): 1 truncate cleaned up [ 197.768378][ T8176] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 197.790028][ T5013] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 197.794396][ T5013] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:27: Failed to release dquot type 1 [ 197.803387][ T5013] EXT4-fs (loop1): Remounting filesystem read-only [ 197.821194][ T7086] EXT4-fs (loop1): unmounting filesystem. [ 197.848624][ T5376] EXT4-fs (loop5): unmounting filesystem. [ 197.866553][ T8187] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.891: iget: bad i_size value: 38620345925642 [ 197.868981][ T8187] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.891: couldn't read orphan inode 15 (err -117) [ 197.871417][ T8187] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 197.911019][ T7086] EXT4-fs (loop1): unmounting filesystem. [ 198.313782][ T8196] EXT4-fs (loop1): Test dummy encryption mode enabled [ 198.329105][ T8196] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 198.330070][ T8194] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 198.392843][ T7075] EXT4-fs (loop0): unmounting filesystem. [ 198.396067][ T8201] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 198.399837][ T7086] EXT4-fs (loop1): unmounting filesystem. [ 198.463530][ T7079] EXT4-fs (loop3): unmounting filesystem. [ 198.485870][ T8209] overlayfs: missing 'lowerdir' [ 198.536354][ T8212] hfsplus: invalid file type 0113366 for inode 2 [ 198.539048][ T8212] hfsplus: failed to load root directory [ 198.941848][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.908'. [ 198.943694][ T8236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.074940][ T8240] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 199.083466][ T8240] fs-verity: sha512 using implementation "sha512-ce" [ 199.098543][ T8236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.111301][ T5376] EXT4-fs (loop5): unmounting filesystem. [ 199.382541][ T8260] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.920: iget: bad i_size value: 38620345925642 [ 199.385820][ T8260] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.920: couldn't read orphan inode 15 (err -117) [ 199.392004][ T8260] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 199.706434][ T8266] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.920: bg 0: block 5: invalid block bitmap [ 199.710583][ T8266] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1816 with error 28 [ 199.712517][ T8266] EXT4-fs (loop0): This should not happen!! Data will be lost [ 199.712517][ T8266] [ 199.713907][ T8266] EXT4-fs (loop0): Total free blocks count 0 [ 199.714753][ T8266] EXT4-fs (loop0): Free/Dirty block details [ 199.715662][ T8266] EXT4-fs (loop0): free_blocks=0 [ 199.716456][ T8266] EXT4-fs (loop0): dirty_blocks=1845 [ 199.718257][ T8266] EXT4-fs (loop0): Block reservation details [ 199.719226][ T8266] EXT4-fs (loop0): i_reserved_data_blocks=1845 [ 199.757363][ T5005] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 1816 with max blocks 28 with error 28 [ 199.827610][ T27] audit: type=1326 audit(199.804:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="syz.4.923" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a377fe8 code=0x7ffc0000 [ 199.832150][ T27] audit: type=1326 audit(199.814:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="syz.4.923" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a377fe8 code=0x7ffc0000 [ 199.837520][ T27] audit: type=1326 audit(199.814:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="syz.4.923" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a377fe8 code=0x7ffc0000 [ 199.845024][ T27] audit: type=1326 audit(199.814:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="syz.4.923" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff8a377fe8 code=0x7ffc0000 [ 199.854052][ T27] audit: type=1326 audit(199.814:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="syz.4.923" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a377fe8 code=0x7ffc0000 [ 199.870194][ T27] audit: type=1326 audit(199.814:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="syz.4.923" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a377fe8 code=0x7ffc0000 [ 199.880007][ T27] audit: type=1326 audit(199.814:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="syz.4.923" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a377fe8 code=0x7ffc0000 [ 199.885234][ T8278] erofs: (device loop3): mounted with root inode @ nid 36. [ 199.895271][ T27] audit: type=1326 audit(199.814:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="syz.4.923" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=49 compat=0 ip=0xffff8a377fe8 code=0x7ffc0000 [ 199.906670][ T27] audit: type=1326 audit(199.814:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="syz.4.923" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a377fe8 code=0x7ffc0000 [ 200.174101][ T8295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.181716][ T8295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.229654][ T8300] Bluetooth: MGMT ver 1.22 [ 200.238349][ T5249] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 200.243861][ T8300] Bluetooth: hci0: unsupported parameter 255 [ 200.244895][ T8300] Bluetooth: hci0: unsupported parameter 255 [ 200.308494][ T8311] fuse: Bad value for 'fd' [ 200.396199][ T8316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.398535][ T8316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.417076][ T5249] usb 1-1: Using ep0 maxpacket: 16 [ 200.419358][ T5249] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.421092][ T5249] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.422413][ T5249] usb 1-1: config 0 interface 0 has no altsetting 0 [ 200.423423][ T5249] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 200.424829][ T5249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.429122][ T5249] usb 1-1: config 0 descriptor?? [ 200.837951][ T5249] hid (null): bogus close delimiter [ 201.024830][ T8320] process 'syz.4.942' launched './file2' with NULL argv: empty string added [ 201.451727][ T8333] fuse: Bad value for 'fd' [ 201.614949][ T5245] usb 1-1: USB disconnect, device number 10 [ 201.678387][ T8341] set_capacity_and_notify: 10 callbacks suppressed [ 201.678397][ T8341] loop0: detected capacity change from 0 to 1024 [ 201.695406][ T8341] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 201.718573][ T8341] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 201.724319][ T8341] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 201.753253][ T7075] EXT4-fs (loop0): unmounting filesystem. [ 202.714629][ T8354] loop0: detected capacity change from 0 to 1024 [ 202.804193][ T8356] binder: Binderfs stats mode cannot be changed during a remount [ 211.170923][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.5.934'. [ 211.250203][ T8368] loop1: detected capacity change from 0 to 164 [ 211.256924][ T8369] binder: 8366:8369 unknown command 0 [ 211.260450][ T8369] binder: 8366:8369 ioctl c0306201 20000040 returned -22 [ 211.347588][ T8380] loop0: detected capacity change from 0 to 256 [ 211.375059][ T8380] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 211.413649][ T8384] loop1: detected capacity change from 0 to 128 [ 211.424333][ T8384] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 211.425254][ T8390] loop3: detected capacity change from 0 to 256 [ 211.464028][ T8390] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 211.466058][ T8390] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 211.606234][ T8396] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 212.322094][ T7086] EXT4-fs (loop1): unmounting filesystem. [ 212.337946][ T8406] loop0: detected capacity change from 0 to 256 [ 212.346758][ T8406] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 212.409503][ T8411] netlink: 23 bytes leftover after parsing attributes in process `syz.5.975'. [ 212.419683][ T8411] device bridge1 entered promiscuous mode [ 212.429142][ T8414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.488559][ T8407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.495692][ T4328] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 212.538441][ T8427] loop5: detected capacity change from 0 to 256 [ 212.542204][ T8414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.549899][ T8427] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x241b98d9, utbl_chksum : 0xe619d30d) [ 212.552372][ T4328] Bluetooth: hci3: link tx timeout [ 212.553509][ T4328] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 212.598786][ T8431] netlink: 60 bytes leftover after parsing attributes in process `syz.3.983'. [ 212.623570][ T8433] loop1: detected capacity change from 0 to 512 [ 212.631058][ T8435] loop5: detected capacity change from 0 to 512 [ 212.634627][ T8435] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.985: iget: bad i_size value: 38620345925642 [ 212.644401][ T8435] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.985: couldn't read orphan inode 15 (err -117) [ 212.646609][ T8435] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 212.675384][ T8435] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.985: bg 0: block 5: invalid block bitmap [ 212.675450][ T8433] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 212.682419][ T8435] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 64 with error 28 [ 212.685218][ T8435] EXT4-fs (loop5): This should not happen!! Data will be lost [ 212.685218][ T8435] [ 212.687970][ T8435] EXT4-fs (loop5): Total free blocks count 0 [ 212.688920][ T8435] EXT4-fs (loop5): Free/Dirty block details [ 212.691119][ T8435] EXT4-fs (loop5): free_blocks=0 [ 212.692307][ T8435] EXT4-fs (loop5): dirty_blocks=64 [ 212.693093][ T8435] EXT4-fs (loop5): Block reservation details [ 212.695337][ T8435] EXT4-fs (loop5): i_reserved_data_blocks=64 [ 212.718805][ T5376] EXT4-fs (loop5): unmounting filesystem. [ 212.780449][ T7086] EXT4-fs (loop1): unmounting filesystem. [ 212.820461][ T4328] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 212.824805][ T4328] CPU: 1 PID: 4328 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 212.825949][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 212.827563][ T4328] Workqueue: hci1 hci_rx_work [ 212.828343][ T4328] Call trace: [ 212.828861][ T4328] dump_backtrace+0x1c4/0x1f0 [ 212.829562][ T4328] show_stack+0x2c/0x3c [ 212.830257][ T4328] __dump_stack+0x30/0x40 [ 212.830979][ T4328] dump_stack_lvl+0xf4/0x15c [ 212.831711][ T4328] dump_stack+0x1c/0x5c [ 212.832415][ T4328] sysfs_create_dir_ns+0x244/0x264 [ 212.833238][ T4328] kobject_add_internal+0x5a8/0xb18 [ 212.834183][ T4328] kobject_add+0x144/0x20c [ 212.834862][ T4328] device_add+0x3dc/0xe4c [ 212.835558][ T4328] hci_conn_add_sysfs+0xb8/0x1bc [ 212.836351][ T4328] le_conn_complete_evt+0xcd4/0x127c [ 212.837195][ T4328] hci_le_enh_conn_complete_evt+0x114/0x3b8 [ 212.838061][ T4328] hci_le_meta_evt+0x2c0/0x4a8 [ 212.838810][ T4328] hci_event_packet+0x64c/0xe60 [ 212.839599][ T4328] hci_rx_work+0x320/0xa94 [ 212.840309][ T4328] process_one_work+0x7e4/0x13bc [ 212.841057][ T4328] worker_thread+0x8cc/0xfe8 [ 212.841796][ T4328] kthread+0x254/0x2e0 [ 212.842451][ T4328] ret_from_fork+0x10/0x20 [ 212.844930][ T4328] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 212.846871][ T4328] Bluetooth: hci1: failed to register connection device [ 212.859279][ T4328] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 213.005295][ T8461] loop1: detected capacity change from 0 to 256 [ 213.019538][ T8461] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 213.023664][ T8461] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 213.088406][ T8465] loop5: detected capacity change from 0 to 4096 [ 213.091687][ T8465] EXT4-fs (loop5): Test dummy encryption mode enabled [ 213.094285][ T8465] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 213.129792][ T5376] EXT4-fs (loop5): unmounting filesystem. [ 213.578895][ T8486] EXT4-fs: Ignoring removed bh option [ 213.625241][ T8486] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 213.705531][ T7075] EXT4-fs (loop0): unmounting filesystem. [ 213.804700][ T8507] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 213.812669][ T8507] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 214.263188][ T8517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.264984][ T8517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.270781][ T8517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.272530][ T8517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.559139][ T4328] Bluetooth: hci3: command 0x0406 tx timeout [ 214.622155][ T8534] fuse: Bad value for 'fd' [ 214.671192][ T5376] EXT4-fs (loop5): unmounting filesystem. [ 214.704598][ T8538] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 214.706604][ T8538] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 214.807654][ T8543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.815560][ T8543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.815564][ T8540] hfsplus: invalid length 32517 has been corrected to 255 [ 214.820960][ T4342] Bluetooth: hci4: unknown advertising packet type: 0x17 [ 214.821024][ T4342] Bluetooth: hci4: Dropping invalid advertising data [ 214.823340][ T4342] Bluetooth: hci4: Malformed LE Event: 0x02 [ 215.038416][ T4342] Bluetooth: hci1: command 0x2016 tx timeout [ 215.132935][ T5003] hfsplus: b-tree write err: -5, ino 20 [ 215.352848][ T8575] validate_nla: 6 callbacks suppressed [ 215.352859][ T8575] netlink: 'syz.3.1038': attribute type 8 has an invalid length. [ 215.884809][ T8591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1040'. [ 215.916916][ T8590] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 216.037180][ T7075] EXT4-fs (loop0): unmounting filesystem. [ 216.064685][ T8600] EXT4-fs (loop5): orphan cleanup on readonly fs [ 216.066256][ T8600] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1047: invalid indirect mapped block 28777 (level 2) [ 216.083448][ T8600] EXT4-fs (loop5): 1 truncate cleaned up [ 216.085653][ T8600] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 216.125126][ T8600] EXT4-fs: Ignoring removed bh option [ 216.133641][ T8600] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 216.143837][ T8600] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 216.184917][ T5376] EXT4-fs (loop5): unmounting filesystem. [ 216.411853][ T8618] set_capacity_and_notify: 6 callbacks suppressed [ 216.411863][ T8618] loop0: detected capacity change from 0 to 512 [ 216.421840][ T8618] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 216.425942][ T8618] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 216.454413][ T8618] EXT4-fs (loop0): 1 truncate cleaned up [ 216.461659][ T8618] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 216.860810][ T7075] EXT4-fs (loop0): unmounting filesystem. [ 216.927808][ T8633] fuse: Bad value for 'fd' [ 217.075621][ T8648] loop5: detected capacity change from 0 to 512 [ 217.084568][ T8648] ext4: Unknown parameter 'fsuuid' [ 217.117324][ T4328] Bluetooth: hci1: command 0x2016 tx timeout [ 217.253623][ T8659] loop0: detected capacity change from 0 to 256 [ 217.254024][ T8657] loop3: detected capacity change from 0 to 512 [ 217.270430][ T8657] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 217.273552][ T8657] EXT4-fs (loop3): Test dummy encryption mode enabled [ 217.282779][ T8657] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 217.285907][ T8657] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 217.288351][ T8657] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 217.348942][ T7079] EXT4-fs (loop3): unmounting filesystem. [ 217.379249][ T8666] loop3: detected capacity change from 0 to 1024 [ 217.457854][ T8666] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 217.485266][ T7079] EXT4-fs (loop3): unmounting filesystem. [ 218.835503][ T8702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.849870][ T8702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.854310][ T8704] loop0: detected capacity change from 0 to 512 [ 218.866544][ T8704] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 218.901851][ T8704] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 218.922788][ T8711] loop5: detected capacity change from 0 to 128 [ 218.996918][ T8711] FAT-fs (loop5): Directory bread(block 414) failed [ 218.998114][ T8711] FAT-fs (loop5): Directory bread(block 415) failed [ 218.999169][ T8711] FAT-fs (loop5): Directory bread(block 416) failed [ 219.000128][ T8711] FAT-fs (loop5): Directory bread(block 417) failed [ 219.001067][ T8711] FAT-fs (loop5): Directory bread(block 418) failed [ 219.002062][ T8711] FAT-fs (loop5): Directory bread(block 419) failed [ 219.003109][ T8711] FAT-fs (loop5): Directory bread(block 420) failed [ 219.004064][ T8711] FAT-fs (loop5): Directory bread(block 421) failed [ 219.022577][ T8711] FAT-fs (loop5): FAT read failed (blocknr 128) [ 219.367217][ T8715] loop5: detected capacity change from 0 to 8192 [ 219.468089][ T8721] loop3: detected capacity change from 0 to 1024 [ 219.481598][ T8721] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.482770][ T8721] EXT4-fs: inline encryption not supported [ 219.483626][ T8721] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.492973][ T8721] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 219.514642][ T8724] binder: 8722:8724 ioctl 541b 0 returned -22 [ 219.546096][ T8721] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 219.559038][ T8731] loop5: detected capacity change from 0 to 8192 [ 219.561971][ T8731] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.636967][ T7079] EXT4-fs (loop3): unmounting filesystem. [ 219.707829][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 219.707842][ T27] audit: type=1326 audit(475.677:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.5.1107" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3577fe8 code=0x7ffc0000 [ 219.719417][ T27] audit: type=1326 audit(475.677:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.5.1107" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb3577fe8 code=0x7ffc0000 [ 219.724230][ T27] audit: type=1326 audit(475.677:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.5.1107" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3577fe8 code=0x7ffc0000 [ 219.728165][ T7075] EXT4-fs (loop0): unmounting filesystem. [ 219.800512][ T27] audit: type=1326 audit(475.677:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.5.1107" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffffb3577fe8 code=0x7ffc0000 [ 219.804380][ T27] audit: type=1326 audit(475.677:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.5.1107" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3577fe8 code=0x7ffc0000 [ 220.273421][ T8765] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1104'. [ 220.281178][ T8764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1113'. [ 220.363649][ T5014] hfsplus: b-tree write err: -5, ino 25 [ 220.364890][ T5014] hfsplus: b-tree write err: -5, ino 4 [ 220.365901][ T5014] hfsplus: b-tree write err: -5, ino 2 [ 220.428001][ T5249] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 220.607075][ T5249] usb 1-1: Using ep0 maxpacket: 32 [ 220.611622][ T5249] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 220.612926][ T5249] usb 1-1: config 0 has no interface number 0 [ 220.613880][ T5249] usb 1-1: config 0 interface 184 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 220.615704][ T5249] usb 1-1: config 0 interface 184 has no altsetting 0 [ 220.636015][ T5249] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 220.639148][ T5249] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.640456][ T5249] usb 1-1: Product: syz [ 220.641066][ T5249] usb 1-1: Manufacturer: syz [ 220.641925][ T5249] usb 1-1: SerialNumber: syz [ 220.645493][ T5249] usb 1-1: config 0 descriptor?? [ 220.651334][ T5249] smsc75xx v1.0.0 [ 220.652011][ T5249] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 220.653563][ T5249] smsc75xx: probe of 1-1:0.184 failed with error -22 [ 220.781347][ T8792] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1127'. [ 220.856383][ T5249] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 220.858396][ T8696] usb 1-1: USB disconnect, device number 11 [ 220.867498][ T5249] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 220.909110][ T8797] EXT4-fs: Ignoring removed oldalloc option [ 220.923857][ T8797] EXT4-fs (loop1): Test dummy encryption mode enabled [ 220.939359][ T8797] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 220.962669][ T8798] fido_id[8798]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 220.965371][ T7086] EXT4-fs (loop1): unmounting filesystem. [ 221.141340][ T8817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.143778][ T8817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.432571][ T8841] set_capacity_and_notify: 2 callbacks suppressed [ 221.432582][ T8841] loop5: detected capacity change from 0 to 128 [ 221.583979][ T8851] loop0: detected capacity change from 0 to 4096 [ 221.591116][ T8851] EXT4-fs (loop0): Test dummy encryption mode enabled [ 221.653071][ T8851] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 221.969954][ T7075] EXT4-fs (loop0): unmounting filesystem. [ 222.051427][ T27] audit: type=1326 audit(478.037:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.0.1157" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9b77fe8 code=0x7ffc0000 [ 222.055291][ T27] audit: type=1326 audit(478.037:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.0.1157" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=132 compat=0 ip=0xffffb9b77fe8 code=0x7ffc0000 [ 222.067099][ T27] audit: type=1326 audit(478.037:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.0.1157" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9b77fe8 code=0x7ffc0000 [ 222.081858][ T27] audit: type=1326 audit(478.037:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.0.1157" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffb9b77fe8 code=0x7ffc0000 [ 222.085629][ T27] audit: type=1326 audit(478.037:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.0.1157" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9b77fe8 code=0x7ffc0000 [ 222.641892][ T8877] loop5: detected capacity change from 0 to 2048 [ 222.660780][ T8877] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 222.673798][ T8877] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.981252][ T8891] loop5: detected capacity change from 0 to 1024 [ 222.982904][ T8891] EXT4-fs: Ignoring removed bh option [ 222.987369][ T8891] EXT4-fs: Ignoring removed i_version option [ 223.026852][ T8891] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 223.029926][ T4342] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 223.057549][ T8902] loop3: detected capacity change from 0 to 512 [ 223.100154][ T8902] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 223.131382][ T8909] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1177'. [ 223.135106][ T5376] EXT4-fs (loop5): unmounting filesystem. [ 223.146130][ T8902] EXT4-fs error (device loop3): ext4_dx_csum_verify:502: inode #2: comm syz.3.1174: dir seems corrupt? Run e2fsck -D. [ 223.159559][ T8902] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.1174: Directory index failed checksum [ 223.277750][ T8913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1178'. [ 223.280759][ T7079] EXT4-fs (loop3): unmounting filesystem. [ 223.812403][ T8934] loop1: detected capacity change from 0 to 4096 [ 223.825229][ T8934] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.855420][ T8934] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 223.955237][ T7086] EXT4-fs (loop1): unmounting filesystem. [ 224.114617][ T8952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1194'. [ 224.204166][ T8956] loop3: detected capacity change from 0 to 512 [ 224.208220][ T8959] loop0: detected capacity change from 0 to 256 [ 224.239140][ T8956] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 224.293174][ T8956] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.1196: Allocating blocks 41-42 which overlap fs metadata [ 224.326381][ T8956] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.1196: Allocating blocks 41-42 which overlap fs metadata [ 224.342028][ T8956] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.1196: Failed to acquire dquot type 1 [ 224.344893][ T8965] loop1: detected capacity change from 0 to 2048 [ 224.358394][ T8956] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 224.368513][ T8956] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.1196: corrupted inode contents [ 224.382727][ T8956] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #12: comm syz.3.1196: mark_inode_dirty error [ 224.384980][ T8956] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.1196: corrupted inode contents [ 224.386919][ T8956] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.1196: mark_inode_dirty error [ 224.390278][ T8956] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.1196: corrupted inode contents [ 224.390708][ T8965] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 224.394310][ T8956] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 224.395799][ T8956] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.1196: corrupted inode contents [ 224.398065][ T8956] EXT4-fs error (device loop3): ext4_truncate:4325: inode #12: comm syz.3.1196: mark_inode_dirty error [ 224.400483][ T8956] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 224.402200][ T8956] EXT4-fs (loop3): 1 truncate cleaned up [ 224.403112][ T8956] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 224.438243][ T7086] EXT4-fs (loop1): unmounting filesystem. [ 224.445919][ T7079] EXT4-fs (loop3): unmounting filesystem. [ 224.854777][ T8981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1207'. [ 224.940533][ T8994] loop0: detected capacity change from 0 to 2048 [ 224.941972][ T8994] EXT4-fs: Ignoring removed oldalloc option [ 224.969299][ T8996] EXT4-fs: Ignoring removed bh option [ 224.980760][ T8996] EXT4-fs: Ignoring removed mblk_io_submit option [ 224.980860][ T8994] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 224.981843][ T8996] EXT4-fs: Ignoring removed bh option [ 225.029676][ T8996] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 225.035671][ T7075] EXT4-fs (loop0): unmounting filesystem. [ 225.075045][ T8996] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 225.135805][ T7079] EXT4-fs (loop3): unmounting filesystem. [ 225.568652][ T9026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1222'. [ 226.185596][ T9038] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 226.200818][ T9038] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 227.112191][ T9057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.113830][ T9057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.668953][ T9076] fuse: Bad value for 'fd' [ 227.810878][ T9084] set_capacity_and_notify: 2 callbacks suppressed [ 227.810887][ T9084] loop5: detected capacity change from 0 to 1024 [ 227.831780][ T9084] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 227.887195][ T4844] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 228.101338][ T9084] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52584!=20869) [ 228.104711][ T4844] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.106599][ T4844] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.109409][ T4844] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 228.113095][ T4844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.121386][ T9084] JBD2: no valid journal superblock found [ 228.122293][ T9084] EXT4-fs (loop5): error loading journal [ 228.126117][ T4844] hub 1-1:4.0: USB hub found [ 228.611416][ T4342] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 228.615255][ T9072] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1242'. [ 228.625649][ T4844] hub 1-1:4.0: 2 ports detected [ 228.626504][ T4844] usb 1-1: selecting invalid altsetting 1 [ 228.627510][ T4844] hub 1-1:4.0: Using single TT (err -22) [ 228.727983][ T9101] loop3: detected capacity change from 0 to 512 [ 228.739594][ T9101] EXT4-fs: Ignoring removed bh option [ 228.742814][ T9101] EXT4-fs: Ignoring removed mblk_io_submit option [ 228.745026][ T9101] EXT4-fs: Ignoring removed bh option [ 228.748762][ T9101] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 228.759523][ T9103] fuse: Bad value for 'fd' [ 228.789105][ T9101] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 228.839385][ T9101] EXT4-fs error (device loop3): ext4_validate_block_bitmap:420: comm syz.3.1254: bg 0: bad block bitmap checksum [ 228.841556][ T8394] udevd[8394]: incorrect jbd checksum on /dev/loop3 [ 229.005476][ T9117] loop5: detected capacity change from 0 to 512 [ 229.007666][ T9117] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 229.010990][ T9117] EXT4-fs error (device loop5): __ext4_iget:5102: inode #11: block 237305873: comm syz.5.1259: invalid block [ 229.013215][ T9117] EXT4-fs (loop5): Remounting filesystem read-only [ 229.014385][ T9117] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1259: couldn't read orphan inode 11 (err -117) [ 229.016674][ T9117] EXT4-fs (loop5): Remounting filesystem read-only [ 229.018366][ T9117] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 229.031950][ T9120] loop1: detected capacity change from 0 to 256 [ 229.038620][ T4844] usb 1-1: USB disconnect, device number 12 [ 229.044651][ T9120] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 229.046513][ T9120] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 229.051235][ T5376] EXT4-fs (loop5): unmounting filesystem. [ 229.490505][ T7079] EXT4-fs (loop3): unmounting filesystem. [ 229.550771][ T9134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.553540][ T9134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.610741][ T9140] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 230.173239][ T9157] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1275'. [ 230.184251][ T9158] loop1: detected capacity change from 0 to 128 [ 230.300114][ T9166] loop0: detected capacity change from 0 to 512 [ 230.312185][ T9166] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 230.364575][ T9166] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 230.455839][ T9175] loop3: detected capacity change from 0 to 256 [ 230.465913][ T9175] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 230.475600][ T9175] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 231.184537][ T7075] EXT4-fs (loop0): unmounting filesystem. [ 231.213976][ T9186] loop1: detected capacity change from 0 to 128 [ 231.242631][ T9186] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 231.342284][ T9196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.343932][ T9196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.419734][ T9199] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 232.079536][ T7086] EXT4-fs (loop1): unmounting filesystem. [ 233.004994][ T9232] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1299'. [ 233.030353][ T9233] loop0: detected capacity change from 0 to 128 [ 233.034449][ T9233] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 233.045973][ T9237] loop3: detected capacity change from 0 to 256 [ 233.063627][ T9237] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 233.206663][ T9241] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 233.475609][ T9246] loop1: detected capacity change from 0 to 512 [ 233.487289][ T9246] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.1315: inode has both inline data and extents flags [ 233.492973][ T9246] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.1315: couldn't read orphan inode 15 (err -117) [ 233.500970][ T9246] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 233.552633][ T7086] EXT4-fs (loop1): unmounting filesystem. [ 233.641007][ T9259] fuse: Bad value for 'fd' [ 234.028260][ T7075] EXT4-fs (loop0): unmounting filesystem. [ 234.091244][ T9272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.091844][ T9270] loop0: detected capacity change from 0 to 512 [ 234.095122][ T9272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.111215][ T9270] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 234.123634][ T9270] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 234.707201][ T9287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1320'. [ 235.041849][ T7075] EXT4-fs (loop0): unmounting filesystem. [ 235.062874][ T9291] loop5: detected capacity change from 0 to 2048 [ 235.108459][ T9291] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 235.214964][ T9291] [ 235.215398][ T9291] ====================================================== [ 235.216414][ T9291] WARNING: possible circular locking dependency detected [ 235.217478][ T9291] syzkaller #0 Not tainted [ 235.218181][ T9291] ------------------------------------------------------ [ 235.219278][ T9291] syz.5.1322/9291 is trying to acquire lock: [ 235.220196][ T9291] ffff0000fc93bcf8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x30/0x114 [ 235.221756][ T9291] [ 235.221756][ T9291] but task is already holding lock: [ 235.222879][ T9291] ffff0001072f0c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1b0/0x28fc [ 235.224482][ T9291] [ 235.224482][ T9291] which lock already depends on the new lock. [ 235.224482][ T9291] [ 235.226092][ T9291] [ 235.226092][ T9291] the existing dependency chain (in reverse order) is: [ 235.227420][ T9291] [ 235.227420][ T9291] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 235.228769][ T9291] percpu_down_read+0x70/0x2a8 [ 235.229586][ T9291] ext4_writepages+0x1b0/0x28fc [ 235.230395][ T9291] do_writepages+0x2c4/0x50c [ 235.231171][ T9291] __writeback_single_inode+0x164/0x157c [ 235.232159][ T9291] writeback_single_inode+0x1cc/0x73c [ 235.233065][ T9291] write_inode_now+0x150/0x1cc [ 235.233881][ T9291] iput+0x5b8/0x7e8 [ 235.234590][ T9291] ext4_xattr_block_set+0x1eb0/0x28b4 [ 235.235471][ T9291] ext4_expand_extra_isize_ea+0xea4/0x1818 [ 235.236376][ T9291] __ext4_expand_extra_isize+0x2a0/0x364 [ 235.237488][ T9291] __ext4_mark_inode_dirty+0x3d4/0x7b4 [ 235.238466][ T9291] ext4_evict_inode+0xb50/0x1264 [ 235.239303][ T9291] evict+0x3d8/0x824 [ 235.240005][ T9291] iput+0x728/0x7e8 [ 235.240715][ T9291] ext4_process_orphan+0x24c/0x2c0 [ 235.241595][ T9291] ext4_orphan_cleanup+0x964/0x1090 [ 235.242496][ T9291] ext4_fill_super+0x5af8/0x63bc [ 235.243351][ T9291] get_tree_bdev+0x35c/0x54c [ 235.244177][ T9291] ext4_get_tree+0x28/0x38 [ 235.244958][ T9291] vfs_get_tree+0x90/0x278 [ 235.245711][ T9291] do_new_mount+0x228/0x804 [ 235.246485][ T9291] path_mount+0x5ac/0xe6c [ 235.247219][ T9291] __arm64_sys_mount+0x4a0/0x5a0 [ 235.247986][ T9291] invoke_syscall+0x98/0x290 [ 235.248730][ T9291] el0_svc_common+0x13c/0x258 [ 235.249562][ T9291] do_el0_svc+0x5c/0x134 [ 235.250280][ T9291] el0_svc+0x58/0x128 [ 235.250969][ T9291] el0t_64_sync_handler+0x84/0xf0 [ 235.251881][ T9291] el0t_64_sync+0x18c/0x190 [ 235.252714][ T9291] [ 235.252714][ T9291] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 235.253806][ T9291] __lock_acquire+0x2808/0x6634 [ 235.254644][ T9291] lock_acquire+0x20c/0x638 [ 235.255437][ T9291] down_write+0x5c/0x88 [ 235.256162][ T9291] ext4_destroy_inline_data+0x30/0x114 [ 235.257116][ T9291] ext4_writepages+0x42c/0x28fc [ 235.257991][ T9291] do_writepages+0x2c4/0x50c [ 235.258778][ T9291] filemap_fdatawrite_wbc+0x124/0x174 [ 235.259707][ T9291] file_write_and_wait_range+0x11c/0x1f4 [ 235.260687][ T9291] ext4_sync_file+0x20c/0xc84 [ 235.261444][ T9291] vfs_fsync_range+0x168/0x188 [ 235.262351][ T9291] ext4_buffered_write_iter+0x474/0x520 [ 235.263317][ T9291] ext4_file_write_iter+0x188/0x1500 [ 235.264205][ T9291] do_iter_write+0x520/0x93c [ 235.265020][ T9291] vfs_iter_write+0x88/0xac [ 235.265883][ T9291] iter_file_splice_write+0x528/0xa38 [ 235.266808][ T9291] direct_splice_actor+0xe4/0x138 [ 235.267688][ T9291] splice_direct_to_actor+0x3ec/0x9e4 [ 235.268663][ T9291] do_splice_direct+0x168/0x25c [ 235.269616][ T9291] do_sendfile+0x460/0xc8c [ 235.270386][ T9291] __arm64_sys_sendfile64+0x138/0x374 [ 235.271345][ T9291] invoke_syscall+0x98/0x290 [ 235.272113][ T9291] el0_svc_common+0x13c/0x258 [ 235.272914][ T9291] do_el0_svc+0x5c/0x134 [ 235.273632][ T9291] el0_svc+0x58/0x128 [ 235.274356][ T9291] el0t_64_sync_handler+0x84/0xf0 [ 235.275184][ T9291] el0t_64_sync+0x18c/0x190 [ 235.275969][ T9291] [ 235.275969][ T9291] other info that might help us debug this: [ 235.275969][ T9291] [ 235.277562][ T9291] Possible unsafe locking scenario: [ 235.277562][ T9291] [ 235.278688][ T9291] CPU0 CPU1 [ 235.279539][ T9291] ---- ---- [ 235.280392][ T9291] lock(&sbi->s_writepages_rwsem); [ 235.281204][ T9291] lock(&ei->xattr_sem); [ 235.282219][ T9291] lock(&sbi->s_writepages_rwsem); [ 235.283448][ T9291] lock(&ei->xattr_sem); [ 235.284117][ T9291] [ 235.284117][ T9291] *** DEADLOCK *** [ 235.284117][ T9291] [ 235.285296][ T9291] 2 locks held by syz.5.1322/9291: [ 235.286042][ T9291] #0: ffff0001072f2460 (sb_writers#3){++++}-{0:0}, at: do_sendfile+0x444/0xc8c [ 235.287428][ T9291] #1: ffff0001072f0c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1b0/0x28fc [ 235.289129][ T9291] [ 235.289129][ T9291] stack backtrace: [ 235.290036][ T9291] CPU: 0 PID: 9291 Comm: syz.5.1322 Not tainted syzkaller #0 [ 235.291235][ T9291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 235.292849][ T9291] Call trace: [ 235.293492][ T9291] dump_backtrace+0x1c4/0x1f0 [ 235.294299][ T9291] show_stack+0x2c/0x3c [ 235.294904][ T9291] __dump_stack+0x30/0x40 [ 235.295531][ T9291] dump_stack_lvl+0xf4/0x15c [ 235.296244][ T9291] dump_stack+0x1c/0x5c [ 235.296864][ T9291] print_circular_bug+0x148/0x1b0 [ 235.297676][ T9291] check_noncircular+0x264/0x2f8 [ 235.298440][ T9291] __lock_acquire+0x2808/0x6634 [ 235.299157][ T9291] lock_acquire+0x20c/0x638 [ 235.299898][ T9291] down_write+0x5c/0x88 [ 235.300581][ T9291] ext4_destroy_inline_data+0x30/0x114 [ 235.301429][ T9291] ext4_writepages+0x42c/0x28fc [ 235.302197][ T9291] do_writepages+0x2c4/0x50c [ 235.302881][ T9291] filemap_fdatawrite_wbc+0x124/0x174 [ 235.303781][ T9291] file_write_and_wait_range+0x11c/0x1f4 [ 235.304713][ T9291] ext4_sync_file+0x20c/0xc84 [ 235.305452][ T9291] vfs_fsync_range+0x168/0x188 [ 235.306186][ T9291] ext4_buffered_write_iter+0x474/0x520 [ 235.307043][ T9291] ext4_file_write_iter+0x188/0x1500 [ 235.307883][ T9291] do_iter_write+0x520/0x93c [ 235.308580][ T9291] vfs_iter_write+0x88/0xac [ 235.309350][ T9291] iter_file_splice_write+0x528/0xa38 [ 235.310218][ T9291] direct_splice_actor+0xe4/0x138 [ 235.310952][ T9291] splice_direct_to_actor+0x3ec/0x9e4 [ 235.311731][ T9291] do_splice_direct+0x168/0x25c [ 235.312508][ T9291] do_sendfile+0x460/0xc8c [ 235.313193][ T9291] __arm64_sys_sendfile64+0x138/0x374 [ 235.313987][ T9291] invoke_syscall+0x98/0x290 [ 235.314696][ T9291] el0_svc_common+0x13c/0x258 [ 235.315407][ T9291] do_el0_svc+0x5c/0x134 [ 235.316090][ T9291] el0_svc+0x58/0x128 [ 235.316707][ T9291] el0t_64_sync_handler+0x84/0xf0 [ 235.317458][ T9291] el0t_64_sync+0x18c/0x190 [ 235.325271][ T9291] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1322: bg 0: block 234: padding at end of block bitmap is not set [ 235.328247][ T9291] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 235.330273][ T9291] EXT4-fs (loop5): This should not happen!! Data will be lost [ 235.330273][ T9291] [ 235.331690][ T9291] EXT4-fs (loop5): Total free blocks count 0 [ 235.332464][ T9291] EXT4-fs (loop5): Free/Dirty block details [ 235.333354][ T9291] EXT4-fs (loop5): free_blocks=0 [ 235.334034][ T9291] EXT4-fs (loop5): dirty_blocks=16 [ 235.334793][ T9291] EXT4-fs (loop5): Block reservation details [ 235.335700][ T9291] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 235.344471][ T5376] EXT4-fs (loop5): unmounting filesystem. [ 235.677342][ T4342] Bluetooth: hci3: command 0x0405 tx timeout