last executing test programs: 28.146285294s ago: executing program 4 (id=788): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellinkprop={0x4c, 0x6c, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20, 0x2800}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dvmrp0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x2, 0x1, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x400004, r2, 0x80000}) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r4, 0x0) umount2(0x0, 0x1) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x200, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 27.635563374s ago: executing program 4 (id=790): unshare(0x22020600) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x6}, 0x18) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r1, &(0x7f0000001f80)=""/4082, 0xff2) 27.634694984s ago: executing program 4 (id=792): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) write$UHID_INPUT2(r0, &(0x7f0000003200)={0xc, {0xffb, "6c2450060f84cfce0059f92be3fbc44cce81cf6db39945ebd08f18764adae66029e17e29738c85b051ced2b488f35ca681091dd3c8976415c191cb459856d4f44c95eee27664361e1e7cb726c60b07771e33d8d861946edf3c02e56f4622bd1eef3ec8d76667bb3eeacf1df11e3f912a62e47754f3e5f33f261501be67cc5388e0816ed128d69e9832110dec826f33e982f7398469e5ec2af5fea0edf172ffd2a2efa4821b50c66112ceb28eed43431b4706268e86fcb42d1774f0244b05c3a2f23ec06136d3f5afd4c893c70b73c6a7295c263752ecbc2310c0f9d63018c13771c21a3e4682b6717dff9d936359fb7b994abfc9b781633884074d367da59a7873dcc769e65283267e02578c43b25073476fd8aa28957b6c18409f5fddef1f7bb7a2fac25e6aa5b35ee2c36086559296318b3c6834dc0f59a055514faf0228ad1e955f8ece3f1914dc41e87b8cb4c87e89def224d043d93c491612a227c517d3a5ccdb9907981a3694f58848a0b80b860a0fa2668b23257238f6a39725712e97ca85726cc6fa4b201caa13c3d9d744b85347003b72bbd2312774ab810a4af368c59b3da94eb210f8d9123b7083570dd7b66f184e069d3d83567acd75a2e0759f706b6d821f16f6e10b067dcddb523ed01e8b62a1b6e4696ef09458a55517cf2c6582da5b919702cfaa9cb760f38ac6a73fe50fabb43bf09e401643fb9407f0b2f76ec8d6b9c4c9d54dff40aaac78eec68c219b7d19a6ddabccbd55947e98762203d9f352057c0d206ae0361ef040e518c2893990639268ee8a6a8a544b0e3729022a3410f30e009f20c796a5ad6dd1424676fd6bd492ad9dbb616578d6e66c34a3dae501a9a011da954242f69deb11e65474398f334c83eac6ad6bd22287193568883915f311d477400bab2b8b8117b0a1e8583b032b0f0cb1e8f0ab1aadc6904e4229779fa8d9f1addf9a728c12c1129b9d749f3dbc924cfabf8182924075fd167e467eb6c2dc2852736cecb4330ad884e8bf616812561df60cc5e5992fda1e518d5d8b77547c9c7ffe81db14890152249e0743407dc2f7ce4a89a8d3f35d6996e4682bfb7a9c026df3a4313ed72238b91dfc4ed36df2e1493d248caf6f1be0044d82d1510e56b2745f84610845409f7e2911453ec19f1de063b76737b10e56daddc77f121a03e6ee27fdeeae4789d073c1f3ec92574784a66dfe134b47e5451e0ee0e4bd58b92ba013eea92b2659b4a47b840e97250c2a1a34a21fe5bd67c9884f3797f9d8ffe2cd890ef128b51e4ac1a5f16df2036a75cd915a5a2eb32e36450077277b1d3fec4e99637c60e22c506f4067faba79e42307bf81c137a4e667df76367b3757f327418307223b9ec77f0cb8e5d2a2dc34141ef60b915de3cad45df654865cb33272c80ad09ebddee72e6552c8d0474a85a4102b808c2508f1c6ed614755f650759c0a09bb0dffe0cb13d8ae336ec939fdf37c3b684611b47793a327a01b65c94ffde7c70b00deed3f3a6c67ee38b5ba7c4746cd05d978d871a5225885a2dc409149ba98c4abf1fe58b73cea887bba02b843fc322291f59ef9803f3c97acb05b2c9484e717aa8c390d7166b98bf98a9a0485e9f6a76d42a1485d8d97cd8a8aa445770b5053925fcbd52a52c1df9b2962c7894c58dd5aff5fde2074f5b5e47cf2a28b3c633707c7fff675ac426b4cb928bbfb4eb4123a62cc17cf2a5442109acc537a6549b51fad488a3bdb180569c8bb42b9d4ad552aa954d3300846ced9e37653751fca21961375936bbdb63258b16cc0e45bb8b6ea4c836e35708ec96878213b3383aa9d0d9ee61a8c6361008512889d705b8b8b4e4e74dde2921f2de930a5625066e9271d791b8cfb7b6288082ebce7460aadaca42fb90b91c7c9f3668d3257fc45c8a81962792b9544299cc51f9e385f944440979f4e67ef9ca41584f657052636a163616918d6b29e3b8b6a1aa33c76d2a973c71aa71912bee98bdd08e04d78e56d57b0b28241c7869fdd0c4b2ac226dac3b88b43d721b0071a41f1b52d48b5b149478ca1893051e168e2473bc37749f83a77824fad4515838d2728a472545b0e3c5d3e61bc80bb4baf63d935a7f76dae08699add1512128a13b0ff42c89e1042e39f7ddfc79e94d5f9b3c0dc4eeb20077a25504a42abd86b34dead75f0580e7dbe3416cc79d3de76d78984e15d4443f2056cd5b1844ef9039add38dd05b0def362aec6ec15f4ea9a77f2cfc665ba8147727a840044f0eaf2d0e9e4bb602faf50da4b698216e771e390993ab113d66727c554cd21534018f78c7e9216953a42694f513f786b62409dcf13debdf44a82619fe77515e1ab7ad93e57f1346982071d4a3b0bdc3aa0243ddda952b45ae18679ad22419784279445ea47cf892427631f0c41b94cdc737cbe9f6ea9899c8f5d9a8f96fcf46e7145e8d4db3c2b9b096f8e791593a36858fc3010e404bc5d1eabcf0f86b1c3a8f83d51b6aaa0dfa9190e531939ed7e7b1e03be029ac865b23f64d469aeda620951ea69203d9fddbde8128a8add2fb37ed928843e82ed5040b7581bd78098d630eca6c290f897e3e448fe33b8e8235134d7a98da825191e3bc02a120804a6f41fbe848c498c581bc045fc306851d54619dad94b69098dfa94afada125289a507c458a6806c597edf14c5800acf8125bed465912c5d2f3b43ce0a47af811901bb30595cef59e9fb4554df45fcbb944831f45b16b88bd6191a2dc27dd624685ad1cafabd1e982d80bc0eba9506d14ef73ee816d5cee03a949b4ba6c8cbbd16158853c08c1fe360ef8f18b2b01b0138c53f994a8e64b364455014da8aa19e42f36dfde2aa5a3d7ffacd66fdd955aec8f921021ddaba8665c222171a0ae3025851840a1f9c6768dde9f8763467f155b6407abbe0334b0addf280d0fca7a6dd219f32ac7d262fcc1d19a95563ae54200250b2b8cfae320ce5954649f94ae96921ecb49a286b2f643022e304e4a3dc308466e923001682bc66b1fb9551af6e4292d24323ae15470b954cfa66d1be27fd29d8ba88ac2499d1c9210c0d0c2308931da709f30385f7e9a84780336e33e5830ee96cb92f8f87cbc8bb5a940e86c519a7fa93ea08c24e50dbea6818ccff7c64602e6ddcbff861d5305eef331ce3aeaa7c5c24a56a833b0bc25fd89cdb2f80b4ee8f693c8a658123eae795b3128fb158ed0819e7cf647cec04b25007c27e6020a1998d7041b084ef58c598e5ce98bb79b8413baa466c7f278f0814a8590acf0ea71628bbd60983520167a2fe5fed5151150d278f0a7d80fedd87a317c9d448f0075814b27f8e247007e2fb941254a6cf4c3cd0369deb08dc1ae036d73f3ade7841199e94c60884dbfa9b56d9523b4ec9d6a50c07d9922a6caa42908cce0a5d414dcacfd5abf20d65d099487fe88f26217a9ce774e4d524234007659bf037b18ac820f4849bee18498b8bf382d48ec43fe250e54501f4184d4d74bfba67051bd27e1998417ecf52e730852562f2df42061977e2b6734064bb440f73a4b317b33fc03b208a4686e05a47062de2e48aa099c699bfc28969cf6b2f304c64f90f4b55912f0c750e77f052f51ee022859892d87b8354882d5058a26014d4437ac569f660f7395280154cb9cc2a43cb6124c7e5142f79f947e5ece431808055ae7aee8a2654a6721d6f20e5442dac8da27b728bf36545f76cc9cba46ad549e96d67f36fb87d4eee0158717eae3cf740e2124d26d9c513be213d6162c5e3018b414390f50a5150fc3b14acf85f3b139d2464d77ed070774cfbcbbe2a8f79febc1e4cbf28822d55a72316e209c886416ed6d990d3677cbb1cefcb42486c7e80e826a0bf48a6cb73f56b84a08f0f491a1169c557aeb4b13d3656c5caf8243aebf7112adc7beed4009edb1d122dec501c7fd7cbbac0d6da3e34103e7088a1c7398c16ca0dbf832352ef421135981679c44afbce28f350250915374cd8dc3d5d37ad22020d0306d95014809f3598f15f47e137296fe65295ac93d5bb210f19a4b71eeaf1d9a6648d5bf45ec919d7dbd74392e56fc3cb92304c65e68a4b35a794356f0c029c242580d597b7e1b9146a03bb087228d1bba0f427955a707ff076b2e5505bb110e44cf280f9b7b49f62da68e161689294b60221e06b69cc137a800252ed716d64dec6f532e6cb203bc60d7b0e0100c51c0b655253f3822bf2fcfa0f6d70a9b551e1ed0611811574973cd3b357e323657a95fda2d34d8795e15ac1afd5d81bb70695797486d928642bab917caad486475c4c0ca7894672e1cb5eda123877fc14a54a1e1adb09f000787854d36a6e830cd6342b500790a70ce86687d49a24095152b03a8c6408168ae98fd354e55a799875040b08ea593011832fe32ab61568153787ab998b8b9040245fe56e1e243918183c3ca230b554faaea54addd6dd405487c6baf79eeb17a77a0902f8109429393e4735ddec2f42b2da46a7baa73a4c1aba7e567523963513b6ebc8dfa4a8d0f35ace8fdc471ccb1aa8a3fdca8aa157a82c9ff568e3f968441cfc9fb086c4a6ab47547b690424d488b440654c039a9139f1405f82e6ec2ba700b442ce86d75d2fe54e9926b46a74e75e9f1e62349e4085e53cfa4cf335e715e0b182a4e68eab158028c911357fde746e7d7c1c5618f8e876b0c2e6485cbdffacd83e956470e47aa58d60beda23a0cb746dd3e983f96ddc26e79df0a7b645583a2ecd4daf8258343d49d15568efe6ea8b886ae0670336d9b4e4dbc6b3ab200a5728ec2e4c3dd7827ec3ae75a74b1eb39303920693b64ab2dc6337facb240589f3b3ec97a6a31aad9c34e8bcf4a1e1e1078e89922da98578712f8e5f4dc271d85f7e2c52dbb643e0d1d969484ec9fac27fbb4a81e97c74a836edb3ff9012bf0b570e8a8815c048fbdd8b9c0805081ee929b4a47169ab3eaa565fd6a44acfd5c8a059aae5cbf411541f41ac00a3db292e37fa7bf75df9b1c60146a72bcb6a6ca6d7b9f8da75af1e52e8c2ae67b1d20cdc48d77ca2e0bc8c162391298e2d40e520d861ffa80f5302f855e75a88482a49b4113dfdb33c915497c288a0d6296021439ec1f579dadebb1da1ff0354f74d2fb9ef135721794b13c4ef01d028a1aff8bd4370ec7a10c93888c5c18c650d369cfb5929c978a997535c696cde797f974b873bf7d70c6526b310e707c33f9b7220fde08b8876cbb0046d6dc6b15cc51b2cdb70dad36eeca7420a8c8c3868a87de3f4f84298e27833db8b787d62e4c3ef1a2f12651968b612949ce4738fe4a4f50d5db091ec51656614d0b298833ae31caf88e22cacc50582d47cf19c2db2c38d72a01f58044210081ecbc265b6cf96d8eee019f0da10902efd0c949122fe488675154ac584838bcd473ae2de2b82511a1629c8d88803678757d37aaf0a2da2f1c999713dadf342908cf448a57a316473d15a6853fc749289c139d66bbf6540ae577fe2ad342a081b64a04a9c3bf68ade53107b61c83db0146093eda82315a88014672abf8d428319a1af3988b7d4c1cb3649c397cf2de98e0208e9da2ba8ad1052cfe50fd16af5c2f2ea0884f86af5e0ca6b1cbdc937f913f431b74f2c1a3cbc05b853dbbb4a722370f6ef6842fc13d88833bc386424312f532a4f16e31a3fe2a2ad22b46bbd1f00d561001c7e5b18ba7f01019d3983047003b105ab4587d2767000000000000e9b0b55ac7ffb7b854555d21e4baadff863f8f0a53badf59991ab6e9b5482b39d14d733ea5880c3010781dc13c55daa43d4c924c68ed"}}, 0x1001) preadv2(r0, &(0x7f00000002c0)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000004240)=""/4106, 0x100a}], 0x2, 0x0, 0x0, 0x0) 27.608057417s ago: executing program 0 (id=794): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000e80)={[{@noblock_validity}, {}, {@sysvgroups}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 27.519529385s ago: executing program 4 (id=795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xbc}}, 0x0) 27.505623466s ago: executing program 0 (id=796): capset(&(0x7f0000001380)={0xbcebdc8b76bf6c03}, 0x0) 27.451804262s ago: executing program 0 (id=797): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x44}}, 0x20048010) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000079c0)={0x0, 0x989680}) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) readv(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x48) r6 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1900) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5d, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) 27.303842766s ago: executing program 4 (id=801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000140)="bad330", 0x3, 0x40, &(0x7f00000001c0)={0x11, 0x86dd, r3, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 26.887590137s ago: executing program 2 (id=802): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="8d53ecd8", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f00000008c0)="06", 0x1}], 0x1}}], 0x2, 0x608d850) 26.887351377s ago: executing program 2 (id=803): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socket$xdp(0x2c, 0x3, 0x0) write$cgroup_type(r0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) 26.147676869s ago: executing program 1 (id=818): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm], 0x4) 26.124017382s ago: executing program 1 (id=819): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0x2, {0x4, 0x3, 0x335, 0xea7}}) 26.063394767s ago: executing program 1 (id=820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xa) r1 = socket$netlink(0x10, 0x3, 0x1c) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20040805) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x0, 0x2e, 0x2e]}}, 0x0, 0x21}, 0x28) syz_genetlink_get_family_id$nl80211(0x0, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="24010000010a0108000000ffffff7f00000000070c0004400000000000000005d6000600f639f6babeecf75ceef12b6b7c5f90de8fc4ff4b8156125a72daba1cbe68319100521a78c452f543bd5272130d78dcaef3596ef017645b62dd9ad84266943da969abcba07e1cc49f28872c2ff83e87453f69967556ecb165faf39f463b79b8e3e89a7e63094d2af3ffb6b8e80d52c4e5970b56fd6e3a8852f1c8a93f56d14ce1dc05c6c3cbf7077080649d1fe1da7e99b87c7a4d1832db26b4a8aa08a4b517d16e25b078cba22f996f4b5be85f0eca15f4c859feec13a99853e6e1582ca3e56f0f47d8bc8a90d32c4ecdc93900deecdc1b08000008000240000000010900010073797a30000000000c00044000000000000000040900010073797a31"], 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x8000) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888a82f15", 0x0, 0x6, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x409}, 0x22) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$kcm(r4, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x5}, 0x80, 0x0}, 0x24004059) close(r4) 25.220936871s ago: executing program 3 (id=821): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000c5000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) socket$rxrpc(0x21, 0x2, 0xa) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) 25.170484665s ago: executing program 3 (id=822): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 24.272194573s ago: executing program 3 (id=823): syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') bind$packet(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200009, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x7, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x8001, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x9, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x10006, 0xa, 0xffffffff, 0x80000000, 0x5, 0x2, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xf8a4, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 24.271820203s ago: executing program 3 (id=824): syz_usb_connect(0x2, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012920000905", @ANYBLOB="da"], 0x0) 23.752244294s ago: executing program 3 (id=825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 16.247304479s ago: executing program 0 (id=826): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f0000000200)="bd", 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000140)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000380)={0x1, 0x5, 0x0, 0x1003, 0x0, 0x80000000, 0xffffffed, 0xd, 0xd00, 0x40000, 0x2, 0x1}) 16.163374197s ago: executing program 2 (id=827): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 16.094943184s ago: executing program 1 (id=828): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3ef, &(0x7f00000004c0)="$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") 16.058390198s ago: executing program 1 (id=829): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x48, 0xfd, @tick=0x8, {0x0, 0xff}, {}, @result}], 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) 16.058027038s ago: executing program 4 (id=830): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0xa) 15.982561555s ago: executing program 3 (id=831): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000ffff27bd70100000000000000000", @ANYRES32=0x0, @ANYBLOB="31020500a38e05005000128008000100736974004400028008000100", @ANYRES32=0x0, @ANYBLOB="080014000000000006000e008100000008000100", @ANYBLOB="0500"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 15.982176505s ago: executing program 1 (id=832): socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x90c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000280)=[{&(0x7f00000002c0)="13", 0x1}, {&(0x7f0000000180)="be8c66b6bcd97cc8dddc4349f7", 0xd}, {&(0x7f0000000400)="5d0f6838989b4f05d65cfb2a4dd10d967891def58f3c7a52bb0a1f810232af56336b166007bdf750a6e062aaadef9a8867d362092bee07e810729d68197ec0aa16d7a9da27c38c555c2e9f8d6dafe54fde69d9d3771f01389112d50610ba568e64279d75f45c592acc4dae95", 0x6c}], 0x3) close(r3) r4 = syz_pidfd_open(0x0, 0x0) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) pidfd_getfd(r4, r4, 0x0) 15.970849636s ago: executing program 2 (id=833): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 15.922059731s ago: executing program 2 (id=834): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000480)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x40004000) 15.799546633s ago: executing program 2 (id=835): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fff"], 0xfdef) 15.707388292s ago: executing program 0 (id=836): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) setpgid(0x0, r0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x4800, 0x100, 0x0) 15.604545772s ago: executing program 0 (id=837): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 203.62118ms ago: executing program 32 (id=837): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 169.852554ms ago: executing program 33 (id=832): socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x90c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000280)=[{&(0x7f00000002c0)="13", 0x1}, {&(0x7f0000000180)="be8c66b6bcd97cc8dddc4349f7", 0xd}, {&(0x7f0000000400)="5d0f6838989b4f05d65cfb2a4dd10d967891def58f3c7a52bb0a1f810232af56336b166007bdf750a6e062aaadef9a8867d362092bee07e810729d68197ec0aa16d7a9da27c38c555c2e9f8d6dafe54fde69d9d3771f01389112d50610ba568e64279d75f45c592acc4dae95", 0x6c}], 0x3) close(r3) r4 = syz_pidfd_open(0x0, 0x0) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) pidfd_getfd(r4, r4, 0x0) 111.83897ms ago: executing program 34 (id=835): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fff"], 0xfdef) 67.592523ms ago: executing program 35 (id=831): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000ffff27bd70100000000000000000", @ANYRES32=0x0, @ANYBLOB="31020500a38e05005000128008000100736974004400028008000100", @ANYRES32=0x0, @ANYBLOB="080014000000000006000e008100000008000100", @ANYBLOB="0500"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 0s ago: executing program 36 (id=830): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0xa) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. [ 24.243090][ T4308] cgroup: Unknown subsys name 'net' [ 24.503792][ T4308] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 24.809016][ T4308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 26.066665][ T4330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 26.068803][ T4330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 26.070011][ T4330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 26.072077][ T4330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 26.074635][ T4331] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 26.075048][ T4334] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 26.075973][ T4331] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 26.077409][ T4334] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 26.078150][ T4331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 26.079733][ T4334] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 26.080698][ T4331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 26.082000][ T4334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 26.083155][ T4331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 26.083990][ T4334] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 26.085102][ T4331] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 26.086594][ T4334] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 26.086875][ T4331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 26.087993][ T4334] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 26.089005][ T4331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 26.092802][ T4331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 26.093527][ T4321] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 26.096898][ T4334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 26.097348][ T4321] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 26.101609][ T4321] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 26.102905][ T4321] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 26.104622][ T4325] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 26.114018][ T4321] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 26.125227][ T4329] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 26.127118][ T4329] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 26.128332][ T4329] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 26.242020][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 26.254842][ T4324] chnl_net:caif_netlink_parms(): no params data found [ 26.283510][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.284715][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.286220][ T4319] device bridge_slave_0 entered promiscuous mode [ 26.289342][ T4323] chnl_net:caif_netlink_parms(): no params data found [ 26.303344][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.304516][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.306078][ T4319] device bridge_slave_1 entered promiscuous mode [ 26.325782][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.327343][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.328561][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.330088][ T4324] device bridge_slave_0 entered promiscuous mode [ 26.335965][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 26.343453][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.347359][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.348581][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.350047][ T4324] device bridge_slave_1 entered promiscuous mode [ 26.357145][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 26.367028][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.368218][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.369734][ T4323] device bridge_slave_0 entered promiscuous mode [ 26.381113][ T4319] team0: Port device team_slave_0 added [ 26.383168][ T4319] team0: Port device team_slave_1 added [ 26.386478][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.387643][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.389308][ T4323] device bridge_slave_1 entered promiscuous mode [ 26.406986][ T4324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.411041][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.412320][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.416370][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.419397][ T4324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.427946][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.428979][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.432765][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.441029][ T4323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.442926][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.444032][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.445539][ T4320] device bridge_slave_0 entered promiscuous mode [ 26.447407][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.448450][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.449881][ T4332] device bridge_slave_0 entered promiscuous mode [ 26.456932][ T4324] team0: Port device team_slave_0 added [ 26.458820][ T4323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.460321][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.461796][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.463362][ T4320] device bridge_slave_1 entered promiscuous mode [ 26.464770][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.465892][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.467495][ T4332] device bridge_slave_1 entered promiscuous mode [ 26.477724][ T4324] team0: Port device team_slave_1 added [ 26.480566][ T4323] team0: Port device team_slave_0 added [ 26.493916][ T4323] team0: Port device team_slave_1 added [ 26.500621][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.507117][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.508155][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.512035][ T4324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.517225][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.518383][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.522913][ T4323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.525674][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.527409][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.528564][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.533025][ T4323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.535750][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.572308][ T4319] device hsr_slave_0 entered promiscuous mode [ 26.611485][ T4319] device hsr_slave_1 entered promiscuous mode [ 26.661542][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.662528][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.666068][ T4324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.670323][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.682955][ T4332] team0: Port device team_slave_0 added [ 26.690401][ T4332] team0: Port device team_slave_1 added [ 26.698908][ T4320] team0: Port device team_slave_0 added [ 26.713094][ T4320] team0: Port device team_slave_1 added [ 26.772223][ T4324] device hsr_slave_0 entered promiscuous mode [ 26.811379][ T4324] device hsr_slave_1 entered promiscuous mode [ 26.861316][ T4324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.862522][ T4324] Cannot create hsr debugfs directory [ 26.902233][ T4323] device hsr_slave_0 entered promiscuous mode [ 26.951385][ T4323] device hsr_slave_1 entered promiscuous mode [ 26.991199][ T4323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.992302][ T4323] Cannot create hsr debugfs directory [ 26.995900][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.996999][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.000986][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.010110][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.011054][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.014662][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.019538][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.020665][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.025181][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.034982][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.036127][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.039768][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.102130][ T4332] device hsr_slave_0 entered promiscuous mode [ 27.161378][ T4332] device hsr_slave_1 entered promiscuous mode [ 27.201395][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.202559][ T4332] Cannot create hsr debugfs directory [ 27.285189][ T4320] device hsr_slave_0 entered promiscuous mode [ 27.331784][ T4320] device hsr_slave_1 entered promiscuous mode [ 27.371219][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.372493][ T4320] Cannot create hsr debugfs directory [ 27.437014][ T4319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.495879][ T4319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.527120][ T4319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.562361][ T4319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.624734][ T4323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.655533][ T4323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.682258][ T4323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.730919][ T4323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.777364][ T4324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.812490][ T4324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.874766][ T4324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.915110][ T4324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.953208][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.967363][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.972791][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.974683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.980300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.981822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.983627][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.984702][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.996860][ T4332] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.032901][ T4332] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.072012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.073790][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.075383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.076780][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.077958][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.081382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.086650][ T4332] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.137391][ T4332] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.161709][ T4330] Bluetooth: hci1: command 0x0409 tx timeout [ 28.161715][ T4329] Bluetooth: hci4: command 0x0409 tx timeout [ 28.161817][ T4329] Bluetooth: hci0: command 0x0409 tx timeout [ 28.162795][ T4330] Bluetooth: hci3: command 0x0409 tx timeout [ 28.163780][ T4329] Bluetooth: hci2: command 0x0409 tx timeout [ 28.182472][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.184072][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.185632][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.198929][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.205436][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.207094][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.208565][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.218231][ T4319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.219779][ T4319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.226518][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.233756][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.235501][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.236904][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.238206][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.240160][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.243522][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.244868][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.247108][ T4320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.306226][ T4320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.343664][ T4320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.403942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.405521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.406953][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.408088][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.416681][ T4320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.472862][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.474326][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.475752][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.477223][ T619] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.478369][ T619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.479803][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.496514][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.498303][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.500027][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.501778][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.503371][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.504842][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.506451][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.508033][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.509651][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.512043][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.514445][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.534243][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.544315][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.545657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.547143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.551028][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.565736][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.567331][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.568752][ T619] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.569820][ T619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.572217][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.573403][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.576869][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.583092][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.585622][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.587095][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.588499][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.590217][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.593733][ T619] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.594877][ T619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.597617][ T4323] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.604558][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.614992][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.616492][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.618259][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.624037][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.626009][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.627444][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.628906][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.630341][ T619] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.631416][ T619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.637938][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.639581][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.641114][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.643530][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.645028][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.646592][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.648125][ T619] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.649282][ T619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.654365][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.655923][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.662049][ T4319] device veth0_vlan entered promiscuous mode [ 28.664334][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.665824][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.667201][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.668726][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.670851][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.672506][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.678405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.680067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.683280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.684669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.687186][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.696295][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.697980][ T4319] device veth1_vlan entered promiscuous mode [ 28.699395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.700834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.703407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.705019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.709389][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.711105][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.721533][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.732010][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.733420][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.734766][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.738073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.739577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.747017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.748630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.752358][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.757041][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.759693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.761829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.764710][ T4319] device veth0_macvtap entered promiscuous mode [ 28.770737][ T4319] device veth1_macvtap entered promiscuous mode [ 28.779801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.781756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.783095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.784569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.787017][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.788183][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.799104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.801908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.803482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.806096][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.807264][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.811615][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.813330][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.824749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.837687][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.840364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.842862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.844071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.845269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.846800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.849117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.850661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.858305][ T4324] device veth0_vlan entered promiscuous mode [ 28.860416][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.862337][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.863971][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.865503][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.867019][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.871100][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.873429][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.877558][ T4324] device veth1_vlan entered promiscuous mode [ 28.882574][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.886083][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.888155][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.889682][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.890865][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.895463][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.896842][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.898375][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.899872][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.905178][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.910434][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.916917][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.918468][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.920025][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.922101][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.923572][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.926293][ T4319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.927600][ T4319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.928802][ T4319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.930286][ T4319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.938842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.940831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.948656][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.950158][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.959903][ T4323] device veth0_vlan entered promiscuous mode [ 28.963610][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.965208][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.966754][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.968244][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.970519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.972172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.973523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.974787][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.979537][ T4324] device veth0_macvtap entered promiscuous mode [ 28.982100][ T4324] device veth1_macvtap entered promiscuous mode [ 28.987154][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.988635][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.990630][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.995703][ T4332] device veth0_vlan entered promiscuous mode [ 29.004289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.005845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.007142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.008576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.018474][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.020075][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.022422][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.024362][ T4323] device veth1_vlan entered promiscuous mode [ 29.026015][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.027476][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.029060][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.031303][ T4332] device veth1_vlan entered promiscuous mode [ 29.042652][ T4324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.044142][ T4324] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.045514][ T4324] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.046767][ T4324] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.057639][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.059220][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.060632][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.063002][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.064166][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.088196][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.104049][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.105366][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.109303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.110909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.113659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.117311][ T4332] device veth0_macvtap entered promiscuous mode [ 29.122610][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.124160][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.125789][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.128322][ T4323] device veth0_macvtap entered promiscuous mode [ 29.131095][ T4332] device veth1_macvtap entered promiscuous mode [ 29.136464][ T4323] device veth1_macvtap entered promiscuous mode [ 29.154127][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.155344][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.155735][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.160412][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.165175][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.166763][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.169286][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.170658][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.172443][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.173352][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.173363][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.173371][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.178559][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.180220][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.182735][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.185165][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.186251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.187623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.189015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.190601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.194623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.197932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.199575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.201121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.203420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.215231][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.217316][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.218971][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.220753][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.223565][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.226430][ T619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.227724][ T619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.230005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.231670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.233225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.234749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.236270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.244001][ T4332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.245439][ T4332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.246767][ T4332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.248009][ T4332] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.250207][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.254445][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.255898][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.257543][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.258963][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.260482][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.263266][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.265959][ T4323] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.267442][ T4323] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.268715][ T4323] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.269986][ T4323] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.279999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.281893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.301452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.302991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.304674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.306021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.309586][ T4320] device veth0_vlan entered promiscuous mode [ 29.316994][ T4320] device veth1_vlan entered promiscuous mode [ 29.357670][ T4433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.359232][ T4433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.386075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.387783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.389261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.390724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.393090][ T4320] device veth0_macvtap entered promiscuous mode [ 29.398478][ T619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.399726][ T619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.402698][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.404234][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.406703][ T4320] device veth1_macvtap entered promiscuous mode [ 29.409392][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.411738][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.413267][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.414823][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.435846][ T619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.437292][ T619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.439231][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.446126][ T619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.447328][ T619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.449372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.451037][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.453916][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.455976][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.457636][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.459065][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.460602][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.462400][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.464049][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.466695][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.469110][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.470901][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.479096][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.480685][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.483550][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.485525][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.487150][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.488992][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.490487][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.493179][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.497150][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.499219][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.500802][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.505994][ T4320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.507552][ T4320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.509130][ T4320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.510775][ T4320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.666262][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.670416][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.702059][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.725833][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.727136][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.729063][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.801108][ T4446] loop0: detected capacity change from 0 to 2048 [ 29.820018][ T4446] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.874067][ T4446] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 30.291631][ T4329] Bluetooth: hci3: command 0x041b tx timeout [ 30.292974][ T4335] Bluetooth: hci4: command 0x041b tx timeout [ 30.293106][ T4321] Bluetooth: hci2: command 0x041b tx timeout [ 30.295079][ T4325] Bluetooth: hci1: command 0x041b tx timeout [ 30.295203][ T4330] Bluetooth: hci0: command 0x041b tx timeout [ 30.434032][ T4323] EXT4-fs (loop0): unmounting filesystem. [ 30.970757][ T4466] loop1: detected capacity change from 0 to 256 [ 30.975436][ T4466] exfat: Deprecated parameter 'namecase' [ 31.068570][ T4466] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 31.348214][ T4478] loop4: detected capacity change from 0 to 32768 [ 31.357891][ T4478] (syz.4.13,4478,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 31.369203][ T4478] (syz.4.13,4478,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 31.396711][ T4478] JBD2: Ignoring recovery information on journal [ 31.509298][ T4478] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 31.985559][ T4320] ocfs2: Unmounting device (7,4) on (node local) [ 32.321583][ T4329] Bluetooth: hci3: command 0x040f tx timeout [ 32.322091][ T4325] Bluetooth: hci1: command 0x040f tx timeout [ 32.322933][ T4335] Bluetooth: hci4: command 0x040f tx timeout [ 32.323518][ T4325] Bluetooth: hci0: command 0x040f tx timeout [ 32.324498][ T4330] Bluetooth: hci2: command 0x040f tx timeout [ 32.409535][ T4521] loop2: detected capacity change from 0 to 128 [ 32.413154][ T4521] ======================================================= [ 32.413154][ T4521] WARNING: The mand mount option has been deprecated and [ 32.413154][ T4521] and is ignored by this kernel. Remove the mand [ 32.413154][ T4521] option from the mount to silence this warning. [ 32.413154][ T4521] ======================================================= [ 33.587891][ T4542] loop3: detected capacity change from 0 to 256 [ 33.589656][ T4542] exfat: Deprecated parameter 'namecase' [ 33.740770][ T4542] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 34.419666][ T4330] Bluetooth: hci4: command 0x0419 tx timeout [ 34.420772][ T4335] Bluetooth: hci3: command 0x0419 tx timeout [ 34.421818][ T4321] Bluetooth: hci0: command 0x0419 tx timeout [ 34.422668][ T4321] Bluetooth: hci1: command 0x0419 tx timeout [ 34.423570][ T4329] Bluetooth: hci2: command 0x0419 tx timeout [ 34.457566][ T4563] loop3: detected capacity change from 0 to 128 [ 34.495194][ T4565] loop2: detected capacity change from 0 to 512 [ 34.542753][ T4373] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.361693][ T4373] usb 1-1: Using ep0 maxpacket: 16 [ 35.462275][ T4373] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 35.463811][ T4373] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 35.465159][ T4373] usb 1-1: config 166 has no interface number 0 [ 35.466080][ T4373] usb 1-1: config 166 has no interface number 1 [ 35.467682][ T4373] usb 1-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 35.469213][ T4373] usb 1-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 35.470802][ T4373] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 35.473298][ T4373] usb 1-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 35.475110][ T4373] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 35.476918][ T4373] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 35.478473][ T4373] usb 1-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 35.480397][ T4373] usb 1-1: config 166 interface 177 has no altsetting 0 [ 35.481442][ T4373] usb 1-1: config 166 interface 34 has no altsetting 0 [ 35.484994][ T4373] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 35.486484][ T4373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.487727][ T4373] usb 1-1: Product: syz [ 35.488416][ T4373] usb 1-1: Manufacturer: syz [ 35.489251][ T4373] usb 1-1: SerialNumber: syz [ 35.699660][ T4373] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 35.709485][ T4602] loop2: detected capacity change from 0 to 256 [ 35.710850][ T4602] exfat: Deprecated parameter 'namecase' [ 35.715670][ T4602] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 35.813386][ T4608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.55'. [ 36.124322][ T4373] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 36.158180][ T4619] netlink: 'syz.3.57': attribute type 3 has an invalid length. [ 36.176687][ T4373] usb 1-1: Found UVC 0.00 device syz (0bda:0138) [ 36.177931][ T4373] usb 1-1: No valid video chain found. [ 36.183751][ T4621] loop3: detected capacity change from 0 to 256 [ 36.185909][ T4373] usb 1-1: USB disconnect, device number 2 [ 37.071115][ T4643] loop1: detected capacity change from 0 to 512 [ 37.114221][ T4643] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #11: comm syz.1.68: ea_inode with extended attributes [ 37.120352][ T4643] EXT4-fs (loop1): Remounting filesystem read-only [ 37.126610][ T4643] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.68: error while reading EA inode 11 err=-117 [ 37.131528][ T4643] EXT4-fs (loop1): Remounting filesystem read-only [ 37.134125][ T4643] EXT4-fs (loop1): 1 orphan inode deleted [ 37.136155][ T4644] loop0: detected capacity change from 0 to 4096 [ 37.137660][ T4643] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 37.154807][ T4644] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 37.198646][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 37.433533][ T4658] loop0: detected capacity change from 0 to 256 [ 37.435132][ T4658] exfat: Deprecated parameter 'namecase' [ 37.470632][ T4659] overlayfs: missing 'workdir' [ 37.708824][ T4658] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 37.729466][ T4654] loop2: detected capacity change from 0 to 4096 [ 37.731984][ T4654] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 38.007152][ T4669] ntfs3: loop2: no free space to extend mft [ 38.013259][ T4669] ntfs3: loop2: no free space to extend mft [ 38.400459][ T4680] xt_connbytes: Forcing CT accounting to be enabled [ 38.401789][ T4680] Cannot find set identified by id 0 to match [ 38.688044][ T4678] loop2: detected capacity change from 0 to 32768 [ 38.699078][ T4678] (syz.2.79,4678,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 38.704033][ T4678] (syz.2.79,4678,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 38.721095][ T4678] JBD2: Ignoring recovery information on journal [ 38.764498][ T4678] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 38.822855][ T4324] ocfs2: Unmounting device (7,2) on (node local) [ 39.406975][ T4702] loop4: detected capacity change from 0 to 256 [ 39.408411][ T4702] exfat: Deprecated parameter 'namecase' [ 39.414428][ T4702] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 40.033497][ T4716] loop2: detected capacity change from 0 to 32768 [ 40.036737][ T4716] (syz.2.90,4716,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 40.039330][ T4716] (syz.2.90,4716,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 40.053734][ T4716] JBD2: Ignoring recovery information on journal [ 40.090248][ T4716] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 40.144588][ T4726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.147031][ T4726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.150168][ T4324] ocfs2: Unmounting device (7,2) on (node local) [ 40.640082][ T4741] netlink: 48 bytes leftover after parsing attributes in process `syz.1.98'. [ 41.186288][ T4752] loop2: detected capacity change from 0 to 256 [ 41.187670][ T4752] exfat: Deprecated parameter 'namecase' [ 41.194333][ T4752] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 41.256746][ T4749] loop3: detected capacity change from 0 to 4096 [ 41.258139][ T4749] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.310503][ T4749] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.313094][ T4749] EXT4-fs (loop3): Test dummy encryption mode enabled [ 41.316755][ T4749] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 41.852411][ T4757] loop0: detected capacity change from 0 to 32768 [ 41.868970][ T4757] (syz.0.103,4757,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 41.873967][ T4757] (syz.0.103,4757,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 41.906999][ T4757] JBD2: Ignoring recovery information on journal [ 42.024976][ T4757] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 42.103765][ T4792] xt_hashlimit: max too large, truncated to 1048576 [ 42.360915][ T4790] loop4: detected capacity change from 0 to 256 [ 42.362307][ T4790] exfat: Deprecated parameter 'namecase' [ 42.366756][ T4790] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 42.399856][ T4323] ocfs2: Unmounting device (7,0) on (node local) [ 42.900693][ T4814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.122'. [ 43.042404][ T4824] loop0: detected capacity change from 0 to 256 [ 43.043778][ T4824] exfat: Deprecated parameter 'namecase' [ 43.051030][ T4824] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 43.149325][ T4822] loop2: detected capacity change from 0 to 32768 [ 43.167657][ T4822] (syz.2.126,4822,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 43.180250][ T4822] (syz.2.126,4822,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 43.216811][ T4822] JBD2: Ignoring recovery information on journal [ 43.326048][ T4833] loop1: detected capacity change from 0 to 512 [ 43.330468][ T4834] loop3: detected capacity change from 0 to 256 [ 43.347392][ T4822] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 43.372940][ T4834] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x23ae2a4b, utbl_chksum : 0xe619d30d) [ 43.382722][ T4833] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 43.437764][ T4324] ocfs2: Unmounting device (7,2) on (node local) [ 43.551829][ T4839] loop2: detected capacity change from 0 to 4096 [ 43.575978][ T4839] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.892194][ T4335] Bluetooth: Wrong link type (-71) [ 44.065934][ T4856] loop0: detected capacity change from 0 to 256 [ 44.066141][ T4853] loop1: detected capacity change from 0 to 4096 [ 44.067324][ T4856] exfat: Deprecated parameter 'namecase' [ 44.072752][ T4856] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 44.091793][ T4853] NILFS (loop1): invalid segment: Checksum error in segment payload [ 44.096532][ T4853] NILFS (loop1): trying rollback from an earlier position [ 44.122738][ T4853] NILFS (loop1): recovery complete [ 44.131009][ T4857] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 44.161075][ T4859] loop0: detected capacity change from 0 to 1024 [ 44.169421][ T4859] hfsplus: session requires an argument [ 44.170712][ T4859] hfsplus: unable to parse mount options [ 44.643500][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 44.729524][ T4796] Set syz1 is full, maxelem 65536 reached [ 44.808745][ T4880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.810202][ T4880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.008234][ T4885] loop1: detected capacity change from 0 to 256 [ 45.009025][ T4875] loop2: detected capacity change from 0 to 32768 [ 45.009661][ T4885] exfat: Deprecated parameter 'namecase' [ 45.014119][ T4885] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 45.016780][ T4875] (syz.2.146,4875,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 45.018758][ T4875] (syz.2.146,4875,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 45.040860][ T4875] JBD2: Ignoring recovery information on journal [ 45.105326][ T4875] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 45.163709][ T4324] ocfs2: Unmounting device (7,2) on (node local) [ 45.219529][ T4895] input: syz0 as /devices/virtual/input/input2 [ 45.254590][ T4897] loop4: detected capacity change from 0 to 4096 [ 45.270496][ T4897] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 45.338599][ T4320] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 45.440164][ T4910] loop3: detected capacity change from 0 to 256 [ 45.448148][ T4910] exfat: Deprecated parameter 'namecase' [ 45.510819][ T4910] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 45.568992][ T4920] tap0: tun_chr_ioctl cmd 1074025677 [ 45.571558][ T4920] tap0: linktype set to 780 [ 45.646453][ T4926] loop1: detected capacity change from 0 to 1024 [ 45.724887][ T4930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.726388][ T4930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.796984][ T4913] loop2: detected capacity change from 0 to 32768 [ 45.819840][ T4913] (syz.2.163,4913,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 45.825216][ T4913] (syz.2.163,4913,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 45.864275][ T4913] JBD2: Ignoring recovery information on journal [ 45.934321][ T4939] loop4: detected capacity change from 0 to 256 [ 45.945208][ T4939] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.224177][ T4325] Bluetooth: Wrong link type (-22) [ 46.523232][ T4950] loop1: detected capacity change from 0 to 256 [ 46.967782][ T4950] exfat: Deprecated parameter 'namecase' [ 46.975652][ T4950] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 46.990492][ T4948] loop0: detected capacity change from 0 to 256 [ 46.994524][ T4913] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 46.995559][ T4948] exfat: Deprecated parameter 'namecase' [ 47.006229][ T4948] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 47.048233][ T4324] ocfs2: Unmounting device (7,2) on (node local) [ 47.197930][ T4960] loop0: detected capacity change from 0 to 1024 [ 47.199407][ T4960] EXT4-fs: Ignoring removed orlov option [ 47.245750][ T4960] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 47.288059][ T4323] EXT4-fs (loop0): unmounting filesystem. [ 47.398524][ T4978] loop1: detected capacity change from 0 to 256 [ 47.406165][ T4978] exfat: Unknown parameter 'zero_size_dir' [ 47.419963][ T4980] loop0: detected capacity change from 0 to 256 [ 47.422229][ T4980] exfat: Deprecated parameter 'namecase' [ 47.426073][ T4980] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 47.442820][ T4311] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 47.908761][ T4996] loop3: detected capacity change from 0 to 1024 [ 47.910360][ T4996] EXT4-fs: Ignoring removed nobh option [ 47.911560][ T4996] EXT4-fs: Ignoring removed bh option [ 47.913807][ T4996] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.928232][ T4996] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 47.956669][ T4996] EXT4-fs (loop3): shut down requested (2) [ 47.969160][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 48.539969][ T5009] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 48.544843][ T5009] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 48.548225][ T5009] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 48.671623][ T5016] loop2: detected capacity change from 0 to 256 [ 48.673135][ T5016] exfat: Deprecated parameter 'namecase' [ 48.676726][ T5016] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 48.945623][ T5029] loop4: detected capacity change from 0 to 1024 [ 49.024974][ T5029] hfsplus: xattr searching failed [ 49.040762][ T4456] hfsplus: b-tree write err: -5, ino 4 [ 49.411676][ T5040] loop4: detected capacity change from 0 to 512 [ 49.415952][ T5040] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.420706][ T5040] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.440585][ T5040] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.211: bad orphan inode 131083 [ 49.447655][ T5040] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 49.524287][ T5048] loop0: detected capacity change from 0 to 256 [ 49.537006][ T5048] exfat: Deprecated parameter 'namecase' [ 49.545049][ T5048] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 49.565172][ T4320] EXT4-fs (loop4): unmounting filesystem. [ 50.492775][ T5066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 53.022767][ T5129] loop4: detected capacity change from 0 to 4096 [ 53.025395][ T5129] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 53.216550][ T5140] loop2: detected capacity change from 0 to 4096 [ 53.314447][ T5141] ntfs3: loop4: no free space to extend mft [ 53.320623][ T5141] ntfs3: loop4: no free space to extend mft [ 53.591453][ T4530] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 54.029442][ T4530] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 54.031110][ T4530] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.034191][ T4530] usb 1-1: Product: syz [ 54.036021][ T4530] usb 1-1: Manufacturer: syz [ 54.036661][ T4530] usb 1-1: SerialNumber: syz [ 54.049569][ T4530] usb 1-1: config 0 descriptor?? [ 54.074839][ T5157] loop1: detected capacity change from 0 to 128 [ 54.091454][ T5157] syz.1.251: attempt to access beyond end of device [ 54.091454][ T5157] loop1: rw=2049, sector=145, nr_sectors = 95 limit=128 [ 54.100388][ T5157] syz.1.251: attempt to access beyond end of device [ 54.100388][ T5157] loop1: rw=524288, sector=145, nr_sectors = 95 limit=128 [ 54.108440][ T5157] syz.1.251: attempt to access beyond end of device [ 54.108440][ T5157] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 54.111649][ T5157] syz.1.251: attempt to access beyond end of device [ 54.111649][ T5157] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 54.113869][ T5157] syz.1.251: attempt to access beyond end of device [ 54.113869][ T5157] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 54.116578][ T5157] syz.1.251: attempt to access beyond end of device [ 54.116578][ T5157] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 54.118711][ T5157] syz.1.251: attempt to access beyond end of device [ 54.118711][ T5157] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 54.127473][ T5157] syz.1.251: attempt to access beyond end of device [ 54.127473][ T5157] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 54.129866][ T5157] syz.1.251: attempt to access beyond end of device [ 54.129866][ T5157] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 54.165507][ T5160] loop4: detected capacity change from 0 to 8192 [ 54.189292][ T5160] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.218064][ T5164] loop1: detected capacity change from 0 to 512 [ 54.255836][ T5164] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 54.258624][ T4530] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 54.294798][ T5164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.296774][ T5164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.816216][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 55.224019][ T5208] netlink: 11 bytes leftover after parsing attributes in process `syz.3.266'. [ 55.228460][ T5208] process 'syz.3.266' launched '/dev/fd/7' with NULL argv: empty string added [ 55.286567][ T5212] loop4: detected capacity change from 0 to 1024 [ 55.729189][ T5223] fuse: Bad value for 'group_id' [ 56.110707][ T5234] loop3: detected capacity change from 0 to 164 [ 56.302384][ T4530] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 56.304535][ T4530] usb 1-1: USB disconnect, device number 3 [ 56.312580][ T5241] loop2: detected capacity change from 0 to 32768 [ 56.356103][ T5241] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 56.419715][ T4324] ocfs2: Unmounting device (7,2) on (node local) [ 56.578192][ T5259] loop4: detected capacity change from 0 to 256 [ 56.947742][ T4325] Bluetooth: hci0: command 0x2016 tx timeout [ 56.959440][ T5259] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.407645][ T5282] netlink: 24 bytes leftover after parsing attributes in process `syz.4.292'. [ 58.902786][ T5286] loop3: detected capacity change from 0 to 4096 [ 58.966065][ T5286] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 58.970182][ T5290] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.977500][ T5286] NILFS (loop3): mounting fs with errors [ 59.129970][ T5294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.138003][ T5294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.248354][ T5292] loop3: detected capacity change from 0 to 512 [ 59.256724][ T5292] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.311034][ T5292] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.296: corrupted in-inode xattr [ 59.325417][ T5292] EXT4-fs (loop3): Remounting filesystem read-only [ 59.326573][ T5292] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 59.332467][ T5292] EXT4-fs (loop3): 1 truncate cleaned up [ 59.333433][ T5292] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 59.335122][ T5300] loop1: detected capacity change from 0 to 4096 [ 59.339808][ T5300] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 59.378828][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 59.419731][ T5308] tipc: Started in network mode [ 59.420634][ T5308] tipc: Node identity ac14140f, cluster identity 4711 [ 59.422420][ T5308] tipc: New replicast peer: 255.255.255.255 [ 59.424190][ T5308] tipc: Enabled bearer , priority 10 [ 59.449553][ T5310] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 60.004575][ T5314] ntfs3: loop1: no free space to extend mft [ 60.030388][ T5313] ntfs3: loop1: no free space to extend mft [ 60.066155][ T4570] Bluetooth: (null): Invalid header checksum [ 60.084352][ T4570] Bluetooth: (null): Invalid header checksum [ 60.172267][ T619] Bluetooth: (null): Invalid header checksum [ 60.255534][ T5319] netlink: 40 bytes leftover after parsing attributes in process `syz.1.306'. [ 60.257431][ T5319] netlink: 'syz.1.306': attribute type 4 has an invalid length. [ 60.258745][ T5319] netlink: 1 bytes leftover after parsing attributes in process `syz.1.306'. [ 60.417416][ T5331] loop4: detected capacity change from 0 to 164 [ 60.557899][ T22] tipc: Node number set to 2886997007 [ 61.065036][ T5351] loop3: detected capacity change from 0 to 8 [ 61.126279][ T5351] SQUASHFS error: xz decompression failed, data probably corrupt [ 61.127956][ T5351] SQUASHFS error: Failed to read block 0x108: -5 [ 61.129005][ T5351] SQUASHFS error: Unable to read metadata cache entry [106] [ 61.130093][ T5351] SQUASHFS error: Unable to read inode 0x11f [ 61.885824][ T5365] loop0: detected capacity change from 0 to 512 [ 61.887148][ T5366] netlink: 11 bytes leftover after parsing attributes in process `syz.2.321'. [ 61.960681][ T5365] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 61.993267][ T4323] EXT4-fs (loop0): unmounting filesystem. [ 63.595227][ T5407] loop1: detected capacity change from 0 to 4096 [ 63.622649][ T5407] ntfs3: Unknown parameter 'windows_names' [ 63.678319][ T5413] loop3: detected capacity change from 0 to 128 [ 63.703259][ T5413] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 63.705741][ T5413] hpfs: filesystem error: improperly stopped [ 63.706627][ T5413] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 63.707810][ T5413] hpfs: You really don't want any checks? You are crazy... [ 63.709359][ T5413] hpfs: hpfs_map_sector(): read error [ 63.710151][ T5413] hpfs: code page support is disabled [ 63.742224][ T5413] hpfs: hpfs_map_4sectors(): unaligned read [ 63.743315][ T5413] hpfs: hpfs_map_4sectors(): unaligned read [ 63.744200][ T5413] hpfs: filesystem error: unable to find root dir [ 63.867216][ T4387] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 64.508467][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.564386][ T4387] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.568821][ T4387] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 64.578244][ T4387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.603504][ T112] cfg80211: failed to load regulatory.db [ 64.642085][ T4387] usb 1-1: config 0 descriptor?? [ 64.654337][ T4387] pwc: Askey VC010 type 2 USB webcam detected. [ 65.268114][ T5448] netlink: 11 bytes leftover after parsing attributes in process `syz.4.349'. [ 65.321448][ T5432] loop1: detected capacity change from 0 to 131072 [ 65.327170][ T5432] F2FS-fs (loop1): invalid crc value [ 65.328667][ T4387] pwc: recv_control_msg error -32 req 02 val 2b00 [ 65.336774][ T4387] pwc: recv_control_msg error -32 req 02 val 2700 [ 65.338405][ T4387] pwc: recv_control_msg error -32 req 02 val 2c00 [ 65.340263][ T4387] pwc: recv_control_msg error -32 req 04 val 1000 [ 65.343248][ T4387] pwc: recv_control_msg error -32 req 04 val 1300 [ 65.344748][ T4387] pwc: recv_control_msg error -32 req 04 val 1400 [ 65.351207][ T4387] pwc: recv_control_msg error -32 req 02 val 2000 [ 65.352698][ T4387] pwc: recv_control_msg error -32 req 02 val 2100 [ 65.354149][ T4387] pwc: recv_control_msg error -32 req 04 val 1500 [ 65.358830][ T4387] pwc: recv_control_msg error -32 req 02 val 2500 [ 65.360600][ T4387] pwc: recv_control_msg error -32 req 02 val 2400 [ 65.371194][ T4387] pwc: recv_control_msg error -32 req 02 val 2600 [ 65.379619][ T5432] F2FS-fs (loop1): Found nat_bits in checkpoint [ 65.455142][ T5432] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 66.427693][ T5460] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 66.612757][ T4387] pwc: recv_control_msg error -71 req 02 val 2800 [ 66.621242][ T4387] pwc: recv_control_msg error -71 req 04 val 1100 [ 66.622429][ T4387] pwc: recv_control_msg error -71 req 04 val 1200 [ 66.625358][ T4387] pwc: Registered as video11. [ 66.626886][ T4387] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input3 [ 66.634056][ T4387] usb 1-1: USB disconnect, device number 4 [ 66.793050][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 66.805578][ T5472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 66.995935][ T5469] loop2: detected capacity change from 0 to 32768 [ 67.004053][ T5469] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.354 (5469) [ 67.025543][ T5469] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 67.027397][ T5469] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 67.029111][ T5469] BTRFS info (device loop2): using free space tree [ 67.244116][ T5469] BTRFS info (device loop2): enabling ssd optimizations [ 67.607976][ T4324] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 67.663603][ T5516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.665261][ T5516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.843382][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 68.249608][ T5537] loop3: detected capacity change from 0 to 4096 [ 68.258969][ T5537] ext4: Unknown parameter 'nouser_xattr' [ 69.345283][ T5560] loop3: detected capacity change from 0 to 1024 [ 69.350329][ T5560] EXT4-fs: Ignoring removed orlov option [ 69.369008][ T5560] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 69.388353][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 69.528628][ T5575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.533089][ T5575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.820553][ T5582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 70.309101][ T5593] loop1: detected capacity change from 0 to 512 [ 70.340634][ T5593] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 70.356165][ T5593] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz.1.391: invalid size [ 70.359672][ T5593] EXT4-fs (loop1): Remounting filesystem read-only [ 70.398763][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 70.508253][ T5605] loop4: detected capacity change from 0 to 512 [ 70.509700][ T5605] EXT4-fs: Ignoring removed oldalloc option [ 70.544279][ T5605] EXT4-fs (loop4): 1 truncate cleaned up [ 70.545272][ T5605] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 70.572103][ T5606] loop0: detected capacity change from 0 to 2048 [ 70.597652][ T5606] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.611580][ T4335] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 70.613238][ T4335] CPU: 0 PID: 4335 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 70.614405][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 70.616063][ T4335] Workqueue: hci0 hci_rx_work [ 70.616789][ T4335] Call trace: [ 70.617259][ T4335] dump_backtrace+0x1c8/0x1f4 [ 70.617928][ T4335] show_stack+0x2c/0x3c [ 70.618564][ T4335] __dump_stack+0x30/0x40 [ 70.619229][ T4335] dump_stack_lvl+0xf8/0x160 [ 70.619947][ T4335] dump_stack+0x1c/0x5c [ 70.620519][ T4335] sysfs_create_dir_ns+0x22c/0x24c [ 70.621287][ T4335] kobject_add_internal+0x5a8/0xb30 [ 70.622051][ T4335] kobject_add+0x134/0x1f8 [ 70.622769][ T4335] device_add+0x3f0/0xf94 [ 70.623487][ T4335] hci_conn_add_sysfs+0xbc/0x1cc [ 70.624224][ T4335] le_conn_complete_evt+0xcb0/0x1220 [ 70.625105][ T4335] hci_le_conn_complete_evt+0x114/0x3f8 [ 70.625923][ T4335] hci_le_meta_evt+0x2c0/0x4a4 [ 70.626625][ T4335] hci_event_packet+0x6ac/0xf08 [ 70.627381][ T4335] hci_rx_work+0x324/0xaa0 [ 70.628049][ T4335] process_one_work+0x7f4/0x13a8 [ 70.628796][ T4335] worker_thread+0x8c8/0xfbc [ 70.629542][ T4335] kthread+0x250/0x2d8 [ 70.630195][ T4335] ret_from_fork+0x10/0x20 [ 70.632972][ T4335] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 70.635027][ T4335] Bluetooth: hci0: failed to register connection device [ 71.506448][ T5620] loop3: detected capacity change from 0 to 4096 [ 71.520322][ T4320] EXT4-fs (loop4): unmounting filesystem. [ 71.564842][ T5628] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.619797][ T5632] loop0: detected capacity change from 0 to 1024 [ 71.621706][ T5632] EXT4-fs: Ignoring removed bh option [ 71.650009][ T5620] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=3, rec_len=16, name_len=1 [ 71.674237][ T5632] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 71.740216][ T5636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.742335][ T5636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.809754][ T5620] Remounting filesystem read-only [ 72.098671][ T4323] EXT4-fs (loop0): unmounting filesystem. [ 72.316490][ T5655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.318288][ T5655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.641354][ T4325] Bluetooth: hci0: command 0x2016 tx timeout [ 73.119424][ T27] audit: type=1326 audit(73.100:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5666 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555b3a8 code=0x7ffc0000 [ 73.122667][ T27] audit: type=1326 audit(73.100:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5666 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff9555b3a8 code=0x7ffc0000 [ 73.126539][ T27] audit: type=1326 audit(73.100:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5666 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555b3a8 code=0x7ffc0000 [ 73.129600][ T27] audit: type=1326 audit(73.100:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5666 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=110 compat=0 ip=0xffff9555b3a8 code=0x7ffc0000 [ 73.133257][ T27] audit: type=1326 audit(73.100:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5666 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555b3a8 code=0x7ffc0000 [ 73.136618][ T27] audit: type=1326 audit(73.100:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5666 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffff9555b3a8 code=0x7ffc0000 [ 73.140030][ T27] audit: type=1326 audit(73.100:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5666 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555b3a8 code=0x7ffc0000 [ 73.144821][ T27] audit: type=1326 audit(73.100:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5666 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffff9555b3a8 code=0x7ffc0000 [ 73.148199][ T27] audit: type=1326 audit(73.100:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5666 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555b3a8 code=0x7ffc0000 [ 73.155398][ T27] audit: type=1326 audit(73.100:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5666 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=77 compat=0 ip=0xffff9555b3a8 code=0x7ffc0000 [ 73.170792][ T5669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.174241][ T5669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.536906][ T5682] loop0: detected capacity change from 0 to 1024 [ 73.575996][ T4584] hfsplus: bad catalog file entry [ 73.577578][ T4584] hfsplus: b-tree write err: -5, ino 3 [ 73.908297][ T4380] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 74.241303][ T4335] Bluetooth: hci3: command 0x2016 tx timeout [ 74.271188][ T4380] usb 1-1: Using ep0 maxpacket: 32 [ 74.273409][ T4380] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 74.274673][ T4380] usb 1-1: config 0 has no interface number 0 [ 74.275554][ T4380] usb 1-1: too many endpoints for config 0 interface 230 altsetting 2: 210, using maximum allowed: 30 [ 74.277442][ T4380] usb 1-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 74.279266][ T4380] usb 1-1: config 0 interface 230 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 74.280994][ T4380] usb 1-1: config 0 interface 230 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 210 [ 74.283558][ T4380] usb 1-1: config 0 interface 230 has no altsetting 0 [ 74.288429][ T4380] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 74.289968][ T4380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.291601][ T4380] usb 1-1: Product: syz [ 74.292223][ T4380] usb 1-1: Manufacturer: syz [ 74.293039][ T4380] usb 1-1: SerialNumber: syz [ 74.298913][ T4380] usb 1-1: config 0 descriptor?? [ 74.306160][ T4380] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 74.308115][ T4380] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 74.415543][ T5699] loop1: detected capacity change from 0 to 32768 [ 74.418093][ T5699] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.428 (5699) [ 74.423147][ T5699] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 74.424844][ T5699] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 74.426322][ T5699] BTRFS info (device loop1): setting nodatacow, compression disabled [ 74.427534][ T5699] BTRFS info (device loop1): enabling auto defrag [ 74.428471][ T5699] BTRFS info (device loop1): max_inline at 0 [ 74.429389][ T5699] BTRFS info (device loop1): using free space tree [ 74.910913][ T5727] loop4: detected capacity change from 0 to 256 [ 74.948096][ T5727] FAT-fs (loop4): Directory bread(block 64) failed [ 74.949240][ T5727] FAT-fs (loop4): Directory bread(block 65) failed [ 74.950271][ T5727] FAT-fs (loop4): Directory bread(block 66) failed [ 74.955924][ T5727] FAT-fs (loop4): Directory bread(block 67) failed [ 74.957037][ T5727] FAT-fs (loop4): Directory bread(block 68) failed [ 74.958087][ T5727] FAT-fs (loop4): Directory bread(block 69) failed [ 74.959290][ T5727] FAT-fs (loop4): Directory bread(block 70) failed [ 74.960494][ T5727] FAT-fs (loop4): Directory bread(block 71) failed [ 74.983264][ T5727] FAT-fs (loop4): Directory bread(block 72) failed [ 74.984392][ T5727] FAT-fs (loop4): Directory bread(block 73) failed [ 75.077093][ T4319] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.265789][ T5744] Zero length message leads to an empty skb [ 76.462725][ T5767] netlink: 64 bytes leftover after parsing attributes in process `syz.2.444'. [ 76.645133][ T5769] loop1: detected capacity change from 0 to 32768 [ 76.697048][ T4380] ums-usbat: probe of 1-1:0.230 failed with error -5 [ 76.699847][ T4380] usb 1-1: USB disconnect, device number 5 [ 76.713940][ T5774] loop0: detected capacity change from 0 to 16 [ 76.718950][ T5769] I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.720683][ T5769] lbmIODone: I/O error in JFS log [ 76.723751][ T5774] erofs: (device loop0): mounted with root inode @ nid 36. [ 76.725133][ T5769] *** Log Format Error ! *** [ 76.726060][ T5769] lmLogInit: exit(-22) [ 76.726784][ T5769] lmLogOpen: exit(-22) [ 77.145760][ T5777] loop3: detected capacity change from 0 to 4096 [ 77.158103][ T5777] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 77.182933][ T5782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.184609][ T5782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.298422][ T5785] loop1: detected capacity change from 0 to 8192 [ 77.322639][ T5785] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 77.458341][ T5786] ntfs3: loop3: no free space to extend mft [ 77.462550][ T5786] ntfs3: loop3: no free space to extend mft [ 77.587357][ T5785] FAT-fs (loop1): Filesystem has been set read-only [ 77.596875][ T5788] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 77.607998][ T5787] ntfs3: loop3: no free space to extend mft [ 78.251434][ T5816] tmpfs: Unknown parameter 'quota' [ 78.750645][ T5824] loop2: detected capacity change from 0 to 8 [ 79.009890][ T5828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.466'. [ 79.080527][ T5814] loop1: detected capacity change from 0 to 40427 [ 80.791719][ T5814] F2FS-fs (loop1): Found nat_bits in checkpoint [ 80.797394][ T5814] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 80.851784][ T5814] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 80.856462][ T5814] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 80.977713][ T5857] loop3: detected capacity change from 0 to 40427 [ 80.989398][ T5851] loop0: detected capacity change from 0 to 32768 [ 81.003049][ T5857] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 81.004332][ T5857] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 81.006539][ T5857] F2FS-fs (loop3): invalid crc value [ 81.044581][ T5857] F2FS-fs (loop3): Found nat_bits in checkpoint [ 81.059250][ T5857] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 81.060378][ T5857] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 81.270551][ T5876] syz.3.478: attempt to access beyond end of device [ 81.270551][ T5876] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 81.559070][ T5851] XFS (loop0): Mounting V5 Filesystem [ 81.633376][ T5851] XFS (loop0): Ending clean mount [ 81.664721][ T5851] XFS (loop0): Quotacheck needed: Please wait. [ 82.052499][ T5851] XFS (loop0): Quotacheck: Done. [ 82.099445][ T5895] loop4: detected capacity change from 0 to 1024 [ 82.168618][ T4323] XFS (loop0): Unmounting Filesystem [ 82.172937][ T5895] loop4: detected capacity change from 0 to 2048 [ 82.184721][ T5901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.188716][ T5895] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 82.190400][ T5895] NILFS (loop4): unrecognized mount option "grpjquota=" [ 82.246762][ T5901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.789483][ T5940] loop4: detected capacity change from 0 to 8 [ 84.144468][ T5943] loop0: detected capacity change from 0 to 2048 [ 84.198401][ T4325] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 84.200023][ T4325] CPU: 1 PID: 4325 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 84.201349][ T4325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 84.203134][ T4325] Workqueue: hci0 hci_rx_work [ 84.203959][ T4325] Call trace: [ 84.204480][ T4325] dump_backtrace+0x1c8/0x1f4 [ 84.205223][ T4325] show_stack+0x2c/0x3c [ 84.205872][ T4325] __dump_stack+0x30/0x40 [ 84.206544][ T4325] dump_stack_lvl+0xf8/0x160 [ 84.207315][ T4325] dump_stack+0x1c/0x5c [ 84.208004][ T4325] sysfs_create_dir_ns+0x22c/0x24c [ 84.208789][ T4325] kobject_add_internal+0x5a8/0xb30 [ 84.209663][ T4325] kobject_add+0x134/0x1f8 [ 84.210359][ T4325] device_add+0x3f0/0xf94 [ 84.211053][ T4325] hci_conn_add_sysfs+0xbc/0x1cc [ 84.211878][ T4325] le_conn_complete_evt+0xcb0/0x1220 [ 84.212731][ T4325] hci_le_conn_complete_evt+0x114/0x3f8 [ 84.213683][ T4325] hci_le_meta_evt+0x2c0/0x4a4 [ 84.214450][ T4325] hci_event_packet+0x6ac/0xf08 [ 84.215201][ T4325] hci_rx_work+0x324/0xaa0 [ 84.215943][ T4325] process_one_work+0x7f4/0x13a8 [ 84.216615][ T4325] worker_thread+0x8c8/0xfbc [ 84.217293][ T4325] kthread+0x250/0x2d8 [ 84.217889][ T4325] ret_from_fork+0x10/0x20 [ 84.219773][ T4325] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 84.222294][ T4325] Bluetooth: hci0: failed to register connection device [ 84.228834][ T5948] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.395721][ T5963] netlink: 56 bytes leftover after parsing attributes in process `syz.3.507'. [ 84.432685][ T5965] loop0: detected capacity change from 0 to 4096 [ 84.456166][ T5966] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.615977][ T5979] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 84.734383][ T5989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.737354][ T5989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.809474][ T5993] loop3: detected capacity change from 0 to 2048 [ 84.855581][ T5993] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 84.923279][ T6000] loop4: detected capacity change from 0 to 4096 [ 84.943226][ T6001] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.992032][ T5993] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.520: bg 0: block 234: padding at end of block bitmap is not set [ 85.002091][ T5993] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 85.005747][ T5993] EXT4-fs (loop3): This should not happen!! Data will be lost [ 85.005747][ T5993] [ 85.007467][ T5993] EXT4-fs (loop3): Total free blocks count 0 [ 85.008469][ T5993] EXT4-fs (loop3): Free/Dirty block details [ 85.012512][ T5993] EXT4-fs (loop3): free_blocks=0 [ 85.013292][ T5993] EXT4-fs (loop3): dirty_blocks=16 [ 85.014189][ T5993] EXT4-fs (loop3): Block reservation details [ 85.015172][ T5993] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 85.047595][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 85.067897][ T6005] syz.4.525 uses old SIOCAX25GETINFO [ 85.165245][ T6011] loop3: detected capacity change from 0 to 4096 [ 86.476764][ T4325] Bluetooth: hci0: command 0x2016 tx timeout [ 86.561326][ T4325] Bluetooth: hci1: command 0x2016 tx timeout [ 86.721670][ T6029] loop0: detected capacity change from 0 to 2048 [ 86.819548][ T6029] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 86.836394][ T6034] loop1: detected capacity change from 0 to 4096 [ 86.897896][ T6042] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.926454][ T4323] EXT4-fs (loop0): unmounting filesystem. [ 87.015831][ T6045] loop4: detected capacity change from 0 to 4096 [ 87.103995][ T6045] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 87.105378][ T6045] ntfs3: loop4: Failed to load $Extend. [ 87.121309][ T4335] Bluetooth: hci4: command 0x2016 tx timeout [ 87.472028][ T6058] netlink: 'syz.4.541': attribute type 4 has an invalid length. [ 87.500344][ T6058] netlink: 'syz.4.541': attribute type 4 has an invalid length. [ 87.786059][ T6063] tipc: Can't bind to reserved service type 0 [ 87.857816][ T4332] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 87.859014][ T4332] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 87.946814][ T6068] loop0: detected capacity change from 0 to 1024 [ 87.953578][ T6068] EXT4-fs: Ignoring removed bh option [ 88.010902][ T6066] loop3: detected capacity change from 0 to 32768 [ 88.079227][ T6068] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 88.404080][ T4323] EXT4-fs (loop0): unmounting filesystem. [ 89.051647][ T4325] Bluetooth: hci2: command 0x2016 tx timeout [ 89.257138][ T6094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.258875][ T6094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.411375][ T6096] loop2: detected capacity change from 0 to 40427 [ 89.414296][ T6096] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 89.415514][ T6096] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 89.418065][ T6096] F2FS-fs (loop2): invalid crc value [ 89.448016][ T6101] loop4: detected capacity change from 0 to 64 [ 89.466252][ T6096] F2FS-fs (loop2): Found nat_bits in checkpoint [ 89.479368][ T6096] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 89.480570][ T6096] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 89.505789][ T6101] Trying to free block not in datazone [ 89.581615][ T6112] loop4: detected capacity change from 0 to 4096 [ 89.586983][ T6112] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 89.941263][ T5524] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 90.062797][ T6119] ntfs3: loop4: no free space to extend mft [ 90.065730][ T6119] ntfs3: loop4: no free space to extend mft [ 90.366253][ T5524] usb 1-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 90.367614][ T5524] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.368927][ T5524] usb 1-1: Product: syz [ 90.369725][ T5524] usb 1-1: Manufacturer: syz [ 90.370248][ T5524] usb 1-1: SerialNumber: syz [ 90.373034][ T5524] usb 1-1: config 0 descriptor?? [ 90.376216][ T5524] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 90.579674][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'. [ 90.881609][ T5524] sonixb 1-1:0.0: Error reading register 00: -110 [ 90.901688][ T6139] loop2: detected capacity change from 0 to 32768 [ 91.449688][ T6156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.452452][ T6156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.516667][ T4373] usb 1-1: USB disconnect, device number 6 [ 92.692047][ T6185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.693861][ T6185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.812423][ T6186] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 92.814198][ T6186] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 93.536413][ T6201] loop0: detected capacity change from 0 to 128 [ 93.538628][ T6201] ufs: You didn't specify the type of your ufs filesystem [ 93.538628][ T6201] [ 93.538628][ T6201] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 93.538628][ T6201] [ 93.538628][ T6201] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 93.544710][ T6201] ufs: ufstype=old is supported read-only [ 93.548394][ T6201] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 93.608490][ T6203] loop0: detected capacity change from 0 to 256 [ 93.625863][ T6203] FAT-fs (loop0): Directory bread(block 64) failed [ 93.627101][ T6203] FAT-fs (loop0): Directory bread(block 65) failed [ 93.628372][ T6203] FAT-fs (loop0): Directory bread(block 66) failed [ 93.629519][ T6203] FAT-fs (loop0): Directory bread(block 67) failed [ 93.630817][ T6203] FAT-fs (loop0): Directory bread(block 68) failed [ 93.632398][ T6203] FAT-fs (loop0): Directory bread(block 69) failed [ 93.633994][ T6203] FAT-fs (loop0): Directory bread(block 70) failed [ 93.635247][ T6203] FAT-fs (loop0): Directory bread(block 71) failed [ 93.636508][ T6203] FAT-fs (loop0): Directory bread(block 72) failed [ 93.637688][ T6203] FAT-fs (loop0): Directory bread(block 73) failed [ 93.832727][ T6210] loop1: detected capacity change from 0 to 40427 [ 93.834470][ T6210] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 93.835724][ T6210] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 93.837642][ T6210] F2FS-fs (loop1): invalid crc value [ 93.840791][ T6210] F2FS-fs (loop1): Found nat_bits in checkpoint [ 94.165053][ T6210] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 94.166113][ T5521] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.167265][ T6210] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 94.180428][ T5521] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 95.158396][ T6234] loop3: detected capacity change from 0 to 32768 [ 95.165040][ T6237] loop2: detected capacity change from 0 to 64 [ 95.178210][ T6219] hid-generic 0000:0000:0000.0001: pid 6219 passed too large report [ 95.235922][ T6234] XFS (loop3): Mounting V5 Filesystem [ 95.360823][ T6234] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x248/0xe2c, inode 0x1802 dinode [ 95.362465][ T6234] XFS (loop3): Unmount and run xfs_repair [ 95.363266][ T6234] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 95.364488][ T6234] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 95.365895][ T6234] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 95.367399][ T6234] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 95.368833][ T6234] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 95.370234][ T6234] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 95.371690][ T6234] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 95.372993][ T6234] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 95.374476][ T6234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 95.377036][ T6234] XFS (loop3): failed to read RT inodes [ 95.479044][ T6256] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 95.480568][ T6256] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 96.057099][ T6259] loop1: detected capacity change from 0 to 32768 [ 96.142379][ T6108] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.145336][ T6269] loop0: detected capacity change from 0 to 16 [ 96.155817][ T6269] erofs: (device loop0): mounted with root inode @ nid 36. [ 97.004706][ T6273] loop2: detected capacity change from 0 to 32768 [ 97.064285][ T6291] loop0: detected capacity change from 0 to 64 [ 97.140153][ T6297] loop4: detected capacity change from 0 to 128 [ 97.145433][ T6297] ufs: You didn't specify the type of your ufs filesystem [ 97.145433][ T6297] [ 97.145433][ T6297] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 97.145433][ T6297] [ 97.145433][ T6297] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 97.175538][ T6297] ufs: ufstype=old is supported read-only [ 97.190408][ T6297] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 97.206967][ T6307] loop3: detected capacity change from 0 to 1024 [ 97.900113][ T6304] loop1: detected capacity change from 0 to 32768 [ 97.912109][ T6304] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.616 (6304) [ 97.926071][ T6304] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.929877][ T6304] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 97.933640][ T6304] BTRFS info (device loop1): turning off barriers [ 97.935953][ T6304] BTRFS info (device loop1): setting nodatasum [ 97.939192][ T6304] BTRFS info (device loop1): use zlib compression, level 3 [ 97.941605][ T6304] BTRFS info (device loop1): using free space tree [ 97.968756][ T6311] loop0: detected capacity change from 0 to 32768 [ 98.005729][ T6328] hub 1-0:1.0: USB hub found [ 98.007775][ T6328] hub 1-0:1.0: 1 port detected [ 98.060139][ T6311] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 98.492185][ T4323] ocfs2: Unmounting device (7,0) on (node local) [ 98.674104][ T6375] loop2: detected capacity change from 0 to 1024 [ 98.812318][ T6381] loop2: detected capacity change from 0 to 4096 [ 98.846658][ T6384] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.988294][ T4319] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.996586][ T6421] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 99.998050][ T6420] hub 1-0:1.0: USB hub found [ 99.998170][ T6421] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 100.001271][ T6420] hub 1-0:1.0: 1 port detected [ 100.719824][ T6436] xt_connbytes: Forcing CT accounting to be enabled [ 100.721204][ T6436] set match dimension is over the limit! [ 101.886900][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 102.092790][ T6472] 8021q: VLANs not supported on hsr0 [ 102.094994][ T6472] syz.4.670 uses obsolete (PF_INET,SOCK_PACKET) [ 103.167262][ T4325] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 103.181271][ T4325] Bluetooth: hci3: Injecting HCI hardware error event [ 103.185404][ T4335] Bluetooth: hci3: hardware error 0x00 [ 103.303814][ T6501] loop4: detected capacity change from 0 to 64 [ 104.161462][ T4325] Bluetooth: hci4: command 0x0405 tx timeout [ 104.342664][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.683'. [ 104.458683][ T6524] loop1: detected capacity change from 0 to 1024 [ 104.516928][ T6524] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 104.537837][ T4321] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 104.539475][ T4321] CPU: 1 PID: 4321 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 104.540525][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 104.542196][ T4321] Workqueue: hci1 hci_rx_work [ 104.542947][ T4321] Call trace: [ 104.543471][ T4321] dump_backtrace+0x1c8/0x1f4 [ 104.544219][ T4321] show_stack+0x2c/0x3c [ 104.544814][ T4321] __dump_stack+0x30/0x40 [ 104.545454][ T4321] dump_stack_lvl+0xf8/0x160 [ 104.546247][ T4321] dump_stack+0x1c/0x5c [ 104.546862][ T4321] sysfs_create_dir_ns+0x22c/0x24c [ 104.547675][ T4321] kobject_add_internal+0x5a8/0xb30 [ 104.548518][ T4321] kobject_add+0x134/0x1f8 [ 104.549173][ T4321] device_add+0x3f0/0xf94 [ 104.549862][ T4321] hci_conn_add_sysfs+0xbc/0x1cc [ 104.550598][ T4321] le_conn_complete_evt+0xcb0/0x1220 [ 104.551475][ T4321] hci_le_conn_complete_evt+0x114/0x3f8 [ 104.552305][ T4321] hci_le_meta_evt+0x2c0/0x4a4 [ 104.552991][ T4321] hci_event_packet+0x6ac/0xf08 [ 104.553706][ T4321] hci_rx_work+0x324/0xaa0 [ 104.554330][ T4321] process_one_work+0x7f4/0x13a8 [ 104.554993][ T4321] worker_thread+0x8c8/0xfbc [ 104.555678][ T4321] kthread+0x250/0x2d8 [ 104.556260][ T4321] ret_from_fork+0x10/0x20 [ 104.557665][ T4321] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 104.559552][ T4321] Bluetooth: hci1: failed to register connection device [ 104.856401][ T6524] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.686: bg 0: block 393: padding at end of block bitmap is not set [ 104.868655][ T6524] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 104.870830][ T6524] EXT4-fs (loop1): This should not happen!! Data will be lost [ 104.870830][ T6524] [ 104.881336][ T6524] EXT4-fs (loop1): Total free blocks count 0 [ 104.882291][ T6524] EXT4-fs (loop1): Free/Dirty block details [ 104.883292][ T6524] EXT4-fs (loop1): free_blocks=0 [ 104.884135][ T6524] EXT4-fs (loop1): dirty_blocks=16 [ 104.884957][ T6524] EXT4-fs (loop1): Block reservation details [ 104.886262][ T6524] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 104.899825][ T6537] loop4: detected capacity change from 0 to 64 [ 104.919657][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 104.961914][ T6543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.963571][ T6543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.063921][ T6553] syz.3.692 sent an empty control message without MSG_MORE. [ 105.441281][ T4335] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 105.537268][ T6562] device bridge1 entered promiscuous mode [ 105.862614][ T6568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.700'. [ 105.865593][ T6568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.700'. [ 105.883273][ T6568] device syz_tun entered promiscuous mode [ 105.932357][ T6568] device gretap0 entered promiscuous mode [ 105.963512][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 106.068995][ T6574] loop1: detected capacity change from 0 to 64 [ 106.186283][ T6581] loop1: detected capacity change from 0 to 1024 [ 106.188008][ T6581] EXT4-fs: Ignoring removed i_version option [ 106.188904][ T6581] EXT4-fs: Ignoring removed nobh option [ 106.201922][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.703'. [ 106.226152][ T6581] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.242902][ T6581] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 106.330017][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 106.364440][ T6590] serio: Serial port ptm0 [ 106.379849][ T6597] loop1: detected capacity change from 0 to 128 [ 106.380806][ T6596] loop4: detected capacity change from 0 to 256 [ 106.381618][ T6597] EXT4-fs: Ignoring removed nobh option [ 106.392814][ T6596] FAT-fs (loop4): Unrecognized mount option "noD [ 106.392814][ T6596] ^ dots" or missing value [ 106.395382][ T6597] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (22582!=39978) [ 106.405347][ T6597] EXT4-fs (loop1): group descriptors corrupted! [ 106.495270][ T6588] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.496851][ T6108] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.603933][ T6600] loop1: detected capacity change from 0 to 256 [ 106.671474][ T4335] Bluetooth: hci1: command 0x2016 tx timeout [ 106.864831][ T6606] loop0: detected capacity change from 0 to 64 [ 106.945385][ T6588] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.104102][ T6588] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.244105][ T6588] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.440657][ T6588] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.485070][ T6588] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.509173][ T6588] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.536058][ T6588] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.541375][ T6629] loop1: detected capacity change from 0 to 64 [ 108.739800][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.737'. [ 108.827386][ T6668] loop2: detected capacity change from 0 to 64 [ 108.885764][ T6672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.901410][ T6672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.014968][ T6676] loop0: detected capacity change from 0 to 8 [ 109.431317][ T6108] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 109.864295][ T6671] loop1: detected capacity change from 0 to 32768 [ 109.874243][ T6671] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.742 (6671) [ 109.879602][ T6671] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.887517][ T6671] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 109.888836][ T6671] BTRFS info (device loop1): using free space tree [ 110.052945][ T6671] BTRFS info (device loop1): enabling ssd optimizations [ 110.064526][ T6722] loop4: detected capacity change from 0 to 64 [ 110.080624][ T4319] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.518626][ T4313] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (4313) [ 111.200682][ T6742] device bridge1 entered promiscuous mode [ 111.618645][ T6754] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 112.136177][ T6779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.142518][ T6779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.789379][ T6809] loop2: detected capacity change from 0 to 1024 [ 112.914312][ T6813] device bridge2 entered promiscuous mode [ 113.258367][ T6827] loop0: detected capacity change from 0 to 512 [ 113.263849][ T6827] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.273618][ T6827] EXT4-fs (loop0): 1 truncate cleaned up [ 113.274667][ T6827] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 113.290111][ T4323] EXT4-fs (loop0): unmounting filesystem. [ 113.617043][ T6838] loop4: detected capacity change from 0 to 1024 [ 114.124549][ T6828] tipc: Started in network mode [ 114.125643][ T6828] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 114.127054][ T6828] tipc: Enabled bearer , priority 0 [ 114.184757][ T6852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.186968][ T6852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.233659][ T6855] loop4: detected capacity change from 0 to 512 [ 114.252863][ T6855] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 114.255100][ T6858] loop0: detected capacity change from 0 to 1024 [ 114.256550][ T6858] EXT4-fs: Ignoring removed orlov option [ 114.260435][ T6858] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.266464][ T6859] tipc: Started in network mode [ 114.267296][ T6859] tipc: Node identity 4a14aafda5ef, cluster identity 4711 [ 114.274133][ T6859] tipc: Enabled bearer , priority 0 [ 114.274890][ T4320] EXT4-fs (loop4): unmounting filesystem. [ 114.277934][ T6857] tipc: Disabling bearer [ 114.287321][ T6858] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 114.346010][ T4323] EXT4-fs (loop0): unmounting filesystem. [ 114.412740][ T6869] loop1: detected capacity change from 0 to 1024 [ 114.505735][ T6873] [U] [ 114.587683][ T6879] device syzkaller0 entered promiscuous mode [ 114.908984][ T6878] binder: 6877:6878 tried to acquire reference to desc 0, got 1 instead [ 114.928767][ T6878] binder: 6877:6878 got transaction with invalid handle, 2 [ 114.930417][ T6878] binder: 6878:6877 translate handle failed [ 114.936926][ T6878] binder: 6877:6878 transaction async to 6877:0 failed 5/29201/-22, size 72-24 line 3402 [ 114.938915][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 115.090095][ T6896] loop8: detected capacity change from 0 to 8 [ 115.096180][ T6896] Dev loop8: unable to read RDB block 8 [ 115.097450][ T6896] loop8: unable to read partition table [ 115.098505][ T6896] loop8: partition table beyond EOD, truncated [ 115.099569][ T6896] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 115.153858][ T6900] loop1: detected capacity change from 0 to 128 [ 115.157990][ T6900] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 115.160153][ T6900] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 115.193889][ T6900] EXT4-fs (loop1): shut down requested (2) [ 115.195368][ T6900] fscrypt (loop1, inode 12): Error -5 getting encryption context [ 115.207100][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 115.233461][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'. [ 115.252785][ T5742] tipc: Node number set to 11578026 [ 115.336222][ T6909] random: crng reseeded on system resumption [ 115.366878][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.813'. [ 115.423600][ T6913] loop1: detected capacity change from 0 to 2048 [ 115.431090][ T6913] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.528911][ T6917] loop1: detected capacity change from 0 to 128 [ 115.536254][ T6917] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 115.537834][ T6917] ext4 filesystem being mounted at /158/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.611519][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 116.627311][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.821'. [ 116.677319][ T6932] MPTCP: kernel_bind error, err=-98 [ 117.563635][ T6938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.568749][ T6938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.552406][ T6880] device bridge2 entered promiscuous mode [ 125.733032][ T6926] netlink: 'syz.1.820': attribute type 10 has an invalid length. [ 125.757016][ T6956] loop1: detected capacity change from 0 to 512 [ 125.766815][ T6956] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 125.779182][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 125.856941][ T6967] netlink: 32 bytes leftover after parsing attributes in process `syz.3.831'. [ 125.864961][ T4584] Bluetooth: hci5: Frame reassembly failed (-90) [ 126.033197][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'. [ 127.921246][ T4335] Bluetooth: hci5: command 0x1003 tx timeout [ 127.923355][ T4321] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 141.926966][ T4325] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 141.930173][ T4325] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 141.933348][ T4325] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 141.935404][ T4325] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 141.937308][ T4325] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 141.945423][ T4325] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 142.005017][ T4335] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 142.007835][ T4335] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 142.009428][ T4335] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 142.011671][ T4335] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 142.012938][ T4335] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 142.014150][ T4335] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 142.035745][ T4325] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 142.038596][ T4325] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 142.040628][ T4325] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 142.047261][ T4325] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 142.048640][ T4325] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 142.049907][ T4325] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 142.076758][ T4325] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 142.079463][ T4325] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 142.080991][ T4325] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 142.087003][ T4325] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 142.088273][ T4325] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 142.089578][ T4325] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 142.138181][ T4325] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 142.140653][ T4325] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 142.143130][ T4325] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 142.145179][ T4325] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 142.146449][ T4325] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 142.147595][ T4325] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 144.001328][ T4325] Bluetooth: hci6: command 0x0409 tx timeout [ 144.081285][ T4325] Bluetooth: hci7: command 0x0409 tx timeout [ 144.083157][ T4325] Bluetooth: hci8: command 0x0409 tx timeout [ 144.161236][ T4321] Bluetooth: hci10: command 0x0409 tx timeout [ 144.162957][ T4321] Bluetooth: hci9: command 0x0409 tx timeout [ 146.081382][ T4325] Bluetooth: hci6: command 0x041b tx timeout [ 146.161209][ T4321] Bluetooth: hci8: command 0x041b tx timeout [ 146.162154][ T4321] Bluetooth: hci7: command 0x041b tx timeout [ 146.241235][ T4325] Bluetooth: hci9: command 0x041b tx timeout [ 146.242199][ T4325] Bluetooth: hci10: command 0x041b tx timeout [ 148.121136][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [aoe_tx0:2062] [ 148.122412][ C1] Modules linked in: [ 148.123070][ C1] irq event stamp: 60437945 [ 148.123782][ C1] hardirqs last enabled at (60437944): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 148.125433][ C1] hardirqs last disabled at (60437945): [] el1_interrupt+0x24/0x54 [ 148.127009][ C1] softirqs last enabled at (1948): [] local_bh_enable+0x10/0x34 [ 148.128492][ C1] softirqs last disabled at (1952): [] local_bh_disable+0x10/0x34 [ 148.130041][ C1] CPU: 1 PID: 2062 Comm: aoe_tx0 Not tainted syzkaller #0 [ 148.131166][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 148.132780][ C1] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 148.133960][ C1] pc : _raw_spin_unlock_irqrestore+0x58/0xac [ 148.134907][ C1] lr : _raw_spin_unlock_irqrestore+0x48/0xac [ 148.135822][ C1] sp : ffff800026ba7840 [ 148.136461][ C1] x29: ffff800026ba7840 x28: ffff0000d02592f0 x27: ffff0000d55ae000 [ 148.137693][ C1] x26: ffff0000d0259280 x25: 1fffe0001b25f196 x24: 0000000000000000 [ 148.138912][ C1] x23: 0000000000000000 x22: dfff800000000000 x21: ffff0000cde10fd8 [ 148.140114][ C1] x20: ffff80001c661b30 x19: 0000000000000000 x18: ffff800011abbcc0 [ 148.141334][ C1] x17: ffff8000181f8000 x16: ffff8000082d22e0 x15: ffff800017cd8fc0 [ 148.142528][ C1] x14: ffff0000d1658a98 x13: 1ffff00002a180b1 x12: 0000000000ff0100 [ 148.143612][ C1] x11: ff0080000a893128 x10: 0000000000000003 x9 : 0000000000000080 [ 148.144725][ C1] x8 : 00000000000000c0 x7 : ffff80000b35ad1c x6 : 0000000000000000 [ 148.145837][ C1] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 148.146974][ C1] x2 : 0000000000000002 x1 : ffff800011abd7c0 x0 : ffff80018a6c8000 [ 148.148231][ C1] Call trace: [ 148.148731][ C1] _raw_spin_unlock_irqrestore+0x58/0xac [ 148.149562][ C1] uart_write_room+0x150/0x2d4 [ 148.150278][ C1] tty_write_room+0x6c/0x8c [ 148.150998][ C1] handle_tx+0x120/0x5f8 [ 148.151706][ C1] caif_xmit+0x108/0x150 [ 148.152416][ C1] dev_hard_start_xmit+0x244/0x8e0 [ 148.153231][ C1] __dev_queue_xmit+0x155c/0x309c [ 148.153976][ C1] tx+0x9c/0x1c8 [ 148.154509][ C1] kthread+0x160/0x330 [ 148.155096][ C1] kthread+0x250/0x2d8 [ 148.155672][ C1] ret_from_fork+0x10/0x20 [ 148.156297][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 148.157216][ C1] CPU: 1 PID: 2062 Comm: aoe_tx0 Tainted: G L syzkaller #0 [ 148.158393][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 148.159752][ C1] Call trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 148.160182][ C1] dump_backtrace+0x1c8/0x1f4 [ 148.160812][ C1] show_stack+0x2c/0x3c [ 148.161390][ C1] __dump_stack+0x30/0x40 [ 148.161997][ C1] dump_stack_lvl+0xf8/0x160 [ 148.162642][ C1] dump_stack+0x1c/0x5c [ 148.163212][ C1] panic+0x2e0/0x79c [ 148.163759][ C1] softlockup_fn+0x0/0x120 [ 148.164358][ C1] __hrtimer_run_queues+0x420/0xc64 [ 148.165231][ C1] hrtimer_interrupt+0x2bc/0xb5c [ 148.166006][ C1] arch_timer_handler_virt+0x74/0x88 [ 148.166856][ C1] handle_percpu_devid_irq+0x174/0x34c [ 148.167624][ C1] generic_handle_domain_irq+0xe0/0x140 [ 148.168392][ C1] gic_handle_irq+0x70/0x1e4 [ 148.169138][ C1] call_on_irq_stack+0x30/0x48 [ 148.169872][ C1] do_interrupt_handler+0xd4/0x138 [ 148.170729][ C1] el1_interrupt+0x34/0x54 [ 148.171374][ C1] el1h_64_irq_handler+0x18/0x24 [ 148.172199][ C1] el1h_64_irq+0x64/0x68 [ 148.172857][ C1] _raw_spin_unlock_irqrestore+0x58/0xac [ 148.173708][ C1] uart_write_room+0x150/0x2d4 [ 148.174493][ C1] tty_write_room+0x6c/0x8c [ 148.175233][ C1] handle_tx+0x120/0x5f8 [ 148.175946][ C1] caif_xmit+0x108/0x150 [ 148.176644][ C1] dev_hard_start_xmit+0x244/0x8e0 [ 148.177463][ C1] __dev_queue_xmit+0x155c/0x309c [ 148.178183][ C1] tx+0x9c/0x1c8 [ 148.178746][ C1] kthread+0x160/0x330 [ 148.179399][ C1] kthread+0x250/0x2d8 [ 148.180016][ C1] ret_from_fork+0x10/0x20 [ 148.180677][ C1] SMP: stopping secondary CPUs [ 148.181451][ C1] Kernel Offset: disabled [ 148.182187][ C1] CPU features: 0x080000,000f0097,a65bfea7 [ 148.183147][ C1] Memory Limit: none [ 148.193241][ C1] [ 148.193628][ C1] ================================ [ 148.194350][ C1] WARNING: inconsistent lock state [ 148.195084][ C1] syzkaller #0 Tainted: G L [ 148.195909][ C1] -------------------------------- [ 148.196627][ C1] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 148.197522][ C1] aoe_tx0/2062 [HC1[1]:SC0[2]:HE0:SE0] takes: [ 148.198343][ C1] ffff8000151013d8 (efi_rt_lock){?...}-{2:2}, at: virt_efi_set_variable_nonblocking+0x74/0x16c [ 148.199788][ C1] {HARDIRQ-ON-W} state was registered at: [ 148.200561][ C1] lock_acquire+0x20c/0x644 [ 148.201226][ C1] _raw_spin_lock+0x54/0x6c [ 148.201849][ C1] efi_call_rts+0x260/0x9f4 [ 148.202495][ C1] process_one_work+0x7f4/0x13a8 [ 148.203340][ C1] worker_thread+0x8c8/0xfbc [ 148.204036][ C1] kthread+0x250/0x2d8 [ 148.204670][ C1] ret_from_fork+0x10/0x20 [ 148.205357][ C1] irq event stamp: 60437945 [ 148.206088][ C1] hardirqs last enabled at (60437944): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 148.207623][ C1] hardirqs last disabled at (60437945): [] el1_interrupt+0x24/0x54 [ 148.208992][ C1] softirqs last enabled at (1948): [] local_bh_enable+0x10/0x34 [ 148.210380][ C1] softirqs last disabled at (1952): [] local_bh_disable+0x10/0x34 [ 148.211729][ C1] [ 148.211729][ C1] other info that might help us debug this: [ 148.212824][ C1] Possible unsafe locking scenario: [ 148.212824][ C1] [ 148.213860][ C1] CPU0 [ 148.214300][ C1] ---- [ 148.214750][ C1] lock(efi_rt_lock); [ 148.215297][ C1] [ 148.215760][ C1] lock(efi_rt_lock); [ 148.216345][ C1] [ 148.216345][ C1] *** DEADLOCK *** [ 148.216345][ C1] [ 148.217451][ C1] 4 locks held by aoe_tx0/2062: [ 148.218226][ C1] #0: ffff800015296e60 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 148.219837][ C1] #1: ffff0000f5def8d8 (_xmit_NONE#2){+...}-{2:2}, at: __dev_queue_xmit+0x1090/0x309c [ 148.221493][ C1] #2: ffff800015296e00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 148.223096][ C1] #3: ffff8000171632e8 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x180/0x728 [ 148.224686][ C1] [ 148.224686][ C1] stack backtrace: [ 148.225540][ C1] CPU: 1 PID: 2062 Comm: aoe_tx0 Tainted: G L syzkaller #0 [ 148.226842][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 148.228244][ C1] Call trace: [ 148.228686][ C1] dump_backtrace+0x1c8/0x1f4 [ 148.229351][ C1] show_stack+0x2c/0x3c [ 148.229937][ C1] __dump_stack+0x30/0x40 [ 148.230628][ C1] dump_stack_lvl+0xf8/0x160 [ 148.231325][ C1] dump_stack+0x1c/0x5c [ 148.232006][ C1] print_usage_bug+0x4c0/0x6d8 [ 148.232771][ C1] mark_lock_irq+0x788/0x9e4 [ 148.233533][ C1] mark_lock+0x224/0x320 [ 148.234255][ C1] __lock_acquire+0xd2c/0x6544 [ 148.235074][ C1] lock_acquire+0x20c/0x644 [ 148.235825][ C1] _raw_spin_lock+0x54/0x6c [ 148.236567][ C1] virt_efi_set_variable_nonblocking+0x74/0x16c [ 148.237625][ C1] efivar_set_variable_locked+0x1d0/0x204 [ 148.238601][ C1] efi_pstore_write+0x26c/0x358 [ 148.239378][ C1] pstore_dump+0x504/0x728 [ 148.239996][ C1] kmsg_dump+0x170/0x260 [ 148.240614][ C1] panic+0x36c/0x79c [ 148.241230][ C1] softlockup_fn+0x0/0x120 [ 148.241940][ C1] __hrtimer_run_queues+0x420/0xc64 [ 148.242701][ C1] hrtimer_interrupt+0x2bc/0xb5c [ 148.243385][ C1] arch_timer_handler_virt+0x74/0x88 [ 148.244227][ C1] handle_percpu_devid_irq+0x174/0x34c [ 148.245045][ C1] generic_handle_domain_irq+0xe0/0x140 [ 148.245897][ C1] gic_handle_irq+0x70/0x1e4 [ 148.246594][ C1] call_on_irq_stack+0x30/0x48 [ 148.247340][ C1] do_interrupt_handler+0xd4/0x138 [ 148.248057][ C1] el1_interrupt+0x34/0x54 [ 148.248688][ C1] el1h_64_irq_handler+0x18/0x24 [ 148.249452][ C1] el1h_64_irq+0x64/0x68 [ 148.250090][ C1] _raw_spin_unlock_irqrestore+0x58/0xac [ 148.250940][ C1] uart_write_room+0x150/0x2d4 [ 148.251634][ C1] tty_write_room+0x6c/0x8c [ 148.252260][ C1] handle_tx+0x120/0x5f8 [ 148.252949][ C1] caif_xmit+0x108/0x150 [ 148.253636][ C1] dev_hard_start_xmit+0x244/0x8e0 [ 148.254465][ C1] __dev_queue_xmit+0x155c/0x309c [ 148.255279][ C1] tx+0x9c/0x1c8 [ 148.255849][ C1] kthread+0x160/0x330 [ 148.256436][ C1] kthread+0x250/0x2d8 [ 148.257114][ C1] ret_from_fork+0x10/0x20 [ 148.497087][ C1] Rebooting in 86400 seconds..