last executing test programs: 7.100780776s ago: executing program 0 (id=251): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0xffffffff, 0x0, 0x3a5f, 0x8}) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x4000, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af", 0x32}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 7.056225057s ago: executing program 0 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) pread64(r1, &(0x7f0000000180)=""/118, 0x76, 0x6) 6.775797184s ago: executing program 0 (id=260): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000006, 0x11, 0xffffffffffffffff, 0x392fc000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) r0 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r0, 0x0, 0x0, 0x100004) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x0, 0x0}) r1 = msgget$private(0x0, 0x20) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000380)=""/45) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) write$dsp(r2, &(0x7f0000000040)='F', 0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x800, 0x0, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x6, 0x3, 0x0, 0x20001, 0x7, 0xffffffffffffffff}, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioprio_get$pid(0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x1ff) write(r3, &(0x7f0000001200)="05010906a101", 0x6) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') 5.879936616s ago: executing program 0 (id=272): syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x400) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x17c, &(0x7f0000000240)="$eJzsmM9K60AUxr9Jelvu5XK5W90oWLAuTJOpihsXXYhbwX8ILiw2lmpqpc3Cdif0EXwB38BH8AGkr6B1pYsuXUokybQdi1oXKojfb3HmO5OTycwJfIGAEPJjue083KQuOm0TwF+kkVLzd+agxtDq79uytTO28u8My9ePV05reD0BIAje//wEgMu8CV/lQfD87rQa12H09QYMzCi9BQFL6V0Y2FTahcC20gearob1lrVf9lxrr+oVQ2GHwQmDDENueH/dU4Gitj+hXa83mocFz3NrnyhG9a+bN7Ck7U9/X73e2Fr/HBhwlM5BYE3pRaR6vYlbop1/PDFY3/zi81NQUHw3MfCn4FxgWvOnhOYfWb9ynK03mrPlSqHkltwjKXML9pxtz8tsZERxfMP/fkf+9Edb/9crtUmRxEnB92tOHPu5jONLjpuM/M9AZirOhZrTib4H/8VkOGRMlRNCCCGEEEIIIYQQQsiHMwER/QUdgVyNqp8CAAD//3Dcd4A=") 4.326214074s ago: executing program 0 (id=302): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000006, 0x11, 0xffffffffffffffff, 0x392fc000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) r0 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r0, 0x0, 0x0, 0x100004) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x0, 0x0}) r1 = msgget$private(0x0, 0x20) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000380)=""/45) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) write$dsp(r2, &(0x7f0000000040)='F', 0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x800, 0x0, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x6, 0x3, 0x0, 0x20001, 0x7, 0xffffffffffffffff}, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x1ff) write(r3, &(0x7f0000001200)="05010906a101", 0x6) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') 3.123984393s ago: executing program 0 (id=329): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3.076493185s ago: executing program 32 (id=329): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2.836377961s ago: executing program 4 (id=337): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 2.720878413s ago: executing program 4 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0x6000000) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x5, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) 1.890264664s ago: executing program 1 (id=348): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.859524224s ago: executing program 4 (id=349): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, 0x0, 0x100688d, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000001780)="6133ba693b8d5f5f41f54e5d0fc492db464a29522e6a22d1ae0544e85cf1afa554d95d726db884d7fa56bc6ec11a379ff1f0882636226f526d682679d130c818ea7f16d8e8cb6d2c41cb8037f8a9146c850e41b2ab28a7c91076", 0x5a, 0x20000000, &(0x7f0000001800)={0xa, 0x4e22, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "038d08", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x4, {[@mss={0x2, 0x4, 0xec22}]}}}}}}}}, 0x0) syz_emit_ethernet(0x63, &(0x7f0000000040)={@local, @local, @val={@void, {0x8100, 0x4, 0x1}}, {@generic={0x8906, "07a3e8ca0040865e579dba99857acc4e51d2b51f778913f8db653c3cc072031f72480f6287c924afebb57f90dffba730f63d80d805de593c9e433304fa58fb531c7cf10aeaf693cd61906b5db3da3542c1"}}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/71, 0x47}], 0x1}, 0x4}], 0x1, 0x40000043, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000340)=0xffffffffffffffff) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000380)=@multiplanar_fd={0x78, 0x2, 0x4, 0x100000, 0x1, {}, {0x2, 0xc, 0x8, 0x4e, 0x2, 0x2, "c8305813"}, 0x10000, 0x4, {&(0x7f0000000200)=[{0x3, 0x38, {}, 0x2}, {0x8, 0xe, {}, 0x2}]}, 0x5, 0x0, r2}) 1.812602115s ago: executing program 2 (id=351): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) 1.761975187s ago: executing program 1 (id=352): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[], 0x30}}, 0x0) 1.761517917s ago: executing program 2 (id=353): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0xffffffff, 0x0, 0x3a5f, 0x8}) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x4000, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 1.755742347s ago: executing program 4 (id=354): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 1.741982178s ago: executing program 1 (id=355): r0 = fsopen(&(0x7f0000000240)='pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.715347348s ago: executing program 2 (id=356): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000006, 0x11, 0xffffffffffffffff, 0x392fc000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) r0 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r0, 0x0, 0x0, 0x100004) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x0, 0x0}) r1 = msgget$private(0x0, 0x20) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000380)=""/45) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) write$dsp(r2, &(0x7f0000000040)='F', 0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x800, 0x0, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x6, 0x3, 0x0, 0x20001, 0x7, 0xffffffffffffffff}, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x1ff) write(r3, &(0x7f0000001200)="05010906a101", 0x6) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') 1.647971599s ago: executing program 4 (id=357): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.64778963s ago: executing program 1 (id=358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0x6000000) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x5, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) 943.556357ms ago: executing program 4 (id=363): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) 929.170997ms ago: executing program 33 (id=363): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) 719.925233ms ago: executing program 1 (id=367): r0 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0xd5}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 719.775043ms ago: executing program 1 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x3, 0x12) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f00000002c0)=0x401, 0x4) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000e) syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000300)={0x0, 0xd074, 0x1000, 0x0, 0x71, 0x0, r4}, 0x0, 0x4, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xb87, 0x4, 0x4000010, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="80010000100001000000000000000000e000000200"/32, @ANYRES32=0x0, @ANYRES32=0x0], 0x180}}, 0x0) 605.365335ms ago: executing program 3 (id=369): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='7:', 0x2) 305.674443ms ago: executing program 3 (id=370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0x44810) 285.134683ms ago: executing program 2 (id=372): syz_emit_ethernet(0x88, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff5c1b82de082486dd613fe50000522f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c"], 0x0) 237.621874ms ago: executing program 3 (id=373): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x20000031}, 0xfffffffe, 0x7}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40044}, 0x0) 183.987216ms ago: executing program 2 (id=374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000140)=0x1, 0x4) sendmmsg(r0, &(0x7f0000007fc0)=[{{&(0x7f0000000180)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}], 0x1, 0xc414) 165.202026ms ago: executing program 3 (id=375): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, 0x0, 0x100688d, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000001780)="6133ba693b8d5f5f41f54e5d0fc492db464a29522e6a22d1ae0544e85cf1afa554d95d726db884d7fa56bc6ec11a379ff1f0882636226f526d682679d130c818ea7f16d8e8cb6d2c41cb8037f8a9146c850e41b2ab28a7c910768d0823f8daf77d446867ff827b1693", 0x69, 0x20000000, &(0x7f0000001800)={0xa, 0x4e22, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "038d08", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x4, {[@mss={0x2, 0x4, 0xec22}]}}}}}}}}, 0x0) syz_emit_ethernet(0x63, &(0x7f0000000040)={@local, @local, @val={@void, {0x8100, 0x4, 0x1}}, {@generic={0x8906, "07a3e8ca0040865e579dba99857acc4e51d2b51f778913f8db653c3cc072031f72480f6287c924afebb57f90dffba730f63d80d805de593c9e433304fa58fb531c7cf10aeaf693cd61906b5db3da3542c1"}}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/71, 0x47}], 0x1}, 0x4}], 0x1, 0x40000043, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000340)=0xffffffffffffffff) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000380)=@multiplanar_fd={0x78, 0x2, 0x4, 0x100000, 0x1, {}, {0x2, 0xc, 0x8, 0x4e, 0x2, 0x2, "c8305813"}, 0x10000, 0x4, {&(0x7f0000000200)=[{0x3, 0x38, {}, 0x2}, {0x8, 0xe, {}, 0x2}]}, 0x5, 0x0, r2}) 157.349296ms ago: executing program 2 (id=376): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000140)) 70.316858ms ago: executing program 3 (id=377): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf250a400000", @ANYRES32, @ANYBLOB="1400020000000000e10000000000ffff00000000080008000903"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 0s ago: executing program 3 (id=378): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x20, 0x1a6, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) read$FUSE(r0, &(0x7f0000006140)={0x2020}, 0xffffff4a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. [ 29.098898][ T4315] cgroup: Unknown subsys name 'net' [ 29.317369][ T4315] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.591058][ T4315] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.252204][ T4330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.255037][ T4330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.261633][ T4335] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.263205][ T4335] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.264638][ T4335] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.266418][ T4335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.272031][ T4339] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.274282][ T4339] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.276320][ T4340] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.277724][ T4340] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.280278][ T4339] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.281045][ T4340] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.281799][ T4339] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.283037][ T4340] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.284356][ T4339] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.286868][ T4340] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.288253][ T4340] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.289643][ T4340] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.295247][ T4335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.297951][ T4344] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.299461][ T4340] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.299589][ T4344] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.302095][ T4344] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.303648][ T4344] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.306624][ T4344] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.308060][ T4344] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.314571][ T4344] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.316138][ T4344] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.317578][ T4344] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.318957][ T4344] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.410040][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 30.449495][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 30.462964][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.464222][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.466183][ T4328] device bridge_slave_0 entered promiscuous mode [ 30.478597][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.479782][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.481258][ T4328] device bridge_slave_1 entered promiscuous mode [ 30.483713][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 30.500060][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.509403][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.513014][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.534422][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.535814][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.537390][ T4334] device bridge_slave_0 entered promiscuous mode [ 30.543622][ T4328] team0: Port device team_slave_0 added [ 30.548504][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.549770][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.551381][ T4334] device bridge_slave_1 entered promiscuous mode [ 30.552690][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 30.559764][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.560982][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.562636][ T4337] device bridge_slave_0 entered promiscuous mode [ 30.564741][ T4328] team0: Port device team_slave_1 added [ 30.571506][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.572703][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.574191][ T4337] device bridge_slave_1 entered promiscuous mode [ 30.582960][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.584100][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.585818][ T4329] device bridge_slave_0 entered promiscuous mode [ 30.588387][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.594837][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.598267][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.602748][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.605899][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.607417][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.608520][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.610009][ T4329] device bridge_slave_1 entered promiscuous mode [ 30.612251][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.614116][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.617719][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.621920][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.633244][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.638147][ T4334] team0: Port device team_slave_0 added [ 30.647315][ T4334] team0: Port device team_slave_1 added [ 30.649515][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.652245][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.666983][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.668339][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.670300][ T4333] device bridge_slave_0 entered promiscuous mode [ 30.672715][ T4337] team0: Port device team_slave_0 added [ 30.680878][ T4329] team0: Port device team_slave_0 added [ 30.682783][ T4329] team0: Port device team_slave_1 added [ 30.683942][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.685493][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.687087][ T4333] device bridge_slave_1 entered promiscuous mode [ 30.689042][ T4337] team0: Port device team_slave_1 added [ 30.706147][ T4328] device hsr_slave_0 entered promiscuous mode [ 30.745193][ T4328] device hsr_slave_1 entered promiscuous mode [ 30.785319][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.786573][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.790724][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.800975][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.802268][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.807316][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.818100][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.819385][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.823548][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.827058][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.828216][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.832474][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.836047][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.839626][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.840832][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.845283][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.849053][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.850202][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.854323][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.857084][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.883422][ T4333] team0: Port device team_slave_0 added [ 30.915838][ T4334] device hsr_slave_0 entered promiscuous mode [ 30.955198][ T4334] device hsr_slave_1 entered promiscuous mode [ 30.994988][ T4334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.996339][ T4334] Cannot create hsr debugfs directory [ 31.002956][ T4333] team0: Port device team_slave_1 added [ 31.036017][ T4337] device hsr_slave_0 entered promiscuous mode [ 31.075096][ T4337] device hsr_slave_1 entered promiscuous mode [ 31.114974][ T4337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.116358][ T4337] Cannot create hsr debugfs directory [ 31.165983][ T4329] device hsr_slave_0 entered promiscuous mode [ 31.205152][ T4329] device hsr_slave_1 entered promiscuous mode [ 31.264979][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.266326][ T4329] Cannot create hsr debugfs directory [ 31.275819][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.277048][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.281145][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.283534][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.284691][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.289397][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.375900][ T4333] device hsr_slave_0 entered promiscuous mode [ 31.415082][ T4333] device hsr_slave_1 entered promiscuous mode [ 31.454989][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.456236][ T4333] Cannot create hsr debugfs directory [ 31.509863][ T4328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.546073][ T4328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.596124][ T4328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.646038][ T4328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.715722][ T4334] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.769637][ T4334] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.807904][ T4334] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.856056][ T4334] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.913487][ T4337] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.948478][ T4337] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.986020][ T4337] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.028723][ T4337] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.085425][ T4333] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.125851][ T4333] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.168441][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.174580][ T4333] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.218549][ T4333] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.276405][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.278006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.279880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.284674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.288862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.290545][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.291746][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.293920][ T4329] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.325248][ T4330] Bluetooth: hci4: command 0x0409 tx timeout [ 32.326287][ T4330] Bluetooth: hci1: command 0x0409 tx timeout [ 32.327287][ T4330] Bluetooth: hci0: command 0x0409 tx timeout [ 32.328270][ T4330] Bluetooth: hci2: command 0x0409 tx timeout [ 32.329282][ T4330] Bluetooth: hci3: command 0x0409 tx timeout [ 32.337492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.339674][ T4329] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.376818][ T4329] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.409103][ T4329] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.445877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.447531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.449055][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.450250][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.458459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.463742][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.468718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.473353][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.475832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.477420][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.481992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.488767][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.490477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.492126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.493492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.500354][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.504079][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.508811][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.513525][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.515840][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.517275][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.518921][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.523362][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.526451][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.527867][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.529596][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.531191][ T1611] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.532346][ T1611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.533912][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.555741][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.557429][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.559034][ T541] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.560222][ T541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.561757][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.563534][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.566411][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.568108][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.569795][ T541] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.570944][ T541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.572346][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.574015][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.578386][ T541] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.579377][ T541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.580784][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.587159][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.588978][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.590535][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.593253][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.599973][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.602142][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.610902][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.612723][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.615621][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.617150][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.619108][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.624384][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.631341][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.632656][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.637022][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.639315][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.643534][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.645356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.648239][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.649888][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.652596][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.654186][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.663911][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.665598][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.667832][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.671630][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.678192][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.690477][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.691973][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.693407][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.695384][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.700069][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.702973][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.704381][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.708549][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.717830][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.719584][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.721271][ T1611] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.722446][ T1611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.724045][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.727552][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.729063][ T1611] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.730348][ T1611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.731839][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.733451][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.736050][ T1611] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.737311][ T1611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.738746][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.740288][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.751472][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.753219][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.755929][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.757761][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.759513][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.761159][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.762817][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.764437][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.768176][ T1611] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.769337][ T1611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.770687][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.772398][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.773765][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.777550][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.779061][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.780511][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.781971][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.783713][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.788412][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.791452][ T4328] device veth0_vlan entered promiscuous mode [ 32.793189][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.798614][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.800109][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.801769][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.803630][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.805728][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.810214][ T4328] device veth1_vlan entered promiscuous mode [ 32.819693][ T4333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.821452][ T4333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.828916][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.830487][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.831854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.833347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.838728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.840419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.842029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.843601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.846193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.847885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.849602][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.851290][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.852976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.855874][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.866345][ T4328] device veth0_macvtap entered promiscuous mode [ 32.875409][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.877716][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.879169][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.880755][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.882299][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.883643][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.896338][ T4328] device veth1_macvtap entered promiscuous mode [ 32.906037][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.907576][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.909246][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.910842][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.912611][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.914802][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.916874][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.919956][ T4334] device veth0_vlan entered promiscuous mode [ 32.923483][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.925410][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.927914][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.929431][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.931766][ T4337] device veth0_vlan entered promiscuous mode [ 32.949732][ T4334] device veth1_vlan entered promiscuous mode [ 32.955879][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.957157][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.958873][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.960503][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.962076][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.966050][ T4337] device veth1_vlan entered promiscuous mode [ 32.970187][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.971416][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.974311][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.976311][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.977928][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.988667][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.990025][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.991522][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.992970][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.994910][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.996317][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.997670][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.999654][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.003330][ T4337] device veth0_macvtap entered promiscuous mode [ 33.013189][ T4337] device veth1_macvtap entered promiscuous mode [ 33.016776][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.019667][ T4334] device veth0_macvtap entered promiscuous mode [ 33.037189][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.039036][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.041192][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.043074][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.044760][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.046871][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.048463][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.049968][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.051419][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.053579][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.054830][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.058505][ T4334] device veth1_macvtap entered promiscuous mode [ 33.062598][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.065273][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.067031][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.068810][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.071078][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.076917][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.078727][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.080978][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.082347][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.083822][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.086148][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.087747][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.089713][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.091405][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.100787][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.102077][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.109663][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.113223][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.117432][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.118754][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.120637][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.123267][ T4337] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.124760][ T4337] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.127360][ T4337] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.128846][ T4337] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.132055][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.133714][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.137179][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.138729][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.141146][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.143375][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.145571][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.164688][ T4334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.166568][ T4334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.168113][ T4334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.169692][ T4334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.173005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.174634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.177396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.178921][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.180641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.182090][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.197983][ T4333] device veth0_vlan entered promiscuous mode [ 33.203284][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.206961][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.216262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.220388][ T4333] device veth1_vlan entered promiscuous mode [ 33.246162][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.247541][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.252486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.254087][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.256265][ T4409] 9pnet_fd: Insufficient options for proto=fd [ 33.258050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.274616][ T4333] device veth0_macvtap entered promiscuous mode [ 33.278943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.280687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.282358][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.283895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.289999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.308813][ T4329] device veth0_vlan entered promiscuous mode [ 33.311203][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.312711][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.314360][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.316491][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.318206][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.319449][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.320124][ T4333] device veth1_macvtap entered promiscuous mode [ 33.323635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.325972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.347900][ T4329] device veth1_vlan entered promiscuous mode [ 33.351547][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.353337][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.361351][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.363194][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.365659][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.367670][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.372838][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.388814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.390428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.392002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.393814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.488809][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.491717][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.493469][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.498082][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.499671][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.501293][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.503627][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.513905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.518585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.524776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.526646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.612956][ T4422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9'. [ 33.830193][ T4421] loop1: detected capacity change from 0 to 1024 [ 33.835491][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.836977][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.847114][ T4329] device veth0_macvtap entered promiscuous mode [ 33.865945][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.867689][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.884472][ T4333] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.890762][ T4421] hfsplus: invalid length 1280 has been corrected to 255 [ 33.900266][ T4333] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.902207][ T4333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.903826][ T4333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.912705][ T4329] device veth1_macvtap entered promiscuous mode [ 33.921539][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.923890][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.927373][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.929452][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.931405][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.933284][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.941902][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.943793][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.947805][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.950486][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.952120][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.953959][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.040832][ T541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.042385][ T541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.043968][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.069152][ T541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.070732][ T541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.072157][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.216712][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.223255][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.230198][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.232885][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.234571][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.236719][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.240564][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.243759][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.254495][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.299480][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.301201][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.304131][ T4329] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.306479][ T4329] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.307925][ T4329] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.309540][ T4329] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.376233][ T4432] loop1: detected capacity change from 0 to 64 [ 34.405201][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 34.406211][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 34.407114][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 34.408167][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 34.409211][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 34.438633][ T4423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.440138][ T4423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.441409][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.471703][ T4432] hfs: bad catalog entry type 0 [ 34.482324][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.483743][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.488611][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.902033][ T4447] loop1: detected capacity change from 0 to 64 [ 35.543344][ T4464] loop1: detected capacity change from 0 to 64 [ 35.568405][ T4464] ======================================================= [ 35.568405][ T4464] WARNING: The mand mount option has been deprecated and [ 35.568405][ T4464] and is ignored by this kernel. Remove the mand [ 35.568405][ T4464] option from the mount to silence this warning. [ 35.568405][ T4464] ======================================================= [ 35.680450][ T4478] netdevsim0: mtu less than device minimum [ 35.731701][ T4484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'. [ 35.979601][ T4522] loop4: detected capacity change from 0 to 2048 [ 35.998791][ T4522] NILFS (loop4): invalid segment: Magic number mismatch [ 36.001211][ T4522] NILFS (loop4): trying rollback from an earlier position [ 36.017744][ T4522] NILFS (loop4): recovery complete [ 36.023840][ T4525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 36.029946][ T4526] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 36.054871][ T4522] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 36.068784][ T4532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'. [ 36.095946][ T4532] netlink: 92 bytes leftover after parsing attributes in process `syz.1.45'. [ 36.113327][ T4541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.46'. [ 36.264417][ T4562] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input2 [ 36.276803][ T4566] loop1: detected capacity change from 0 to 64 [ 36.485459][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 36.485642][ T4330] Bluetooth: hci4: command 0x040f tx timeout [ 36.487909][ T4330] Bluetooth: hci0: command 0x040f tx timeout [ 36.489232][ T4330] Bluetooth: hci2: command 0x040f tx timeout [ 36.490527][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 36.723824][ T4587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 37.080184][ T4587] netlink: 92 bytes leftover after parsing attributes in process `syz.2.58'. [ 37.123152][ T4600] 9pnet_fd: Insufficient options for proto=fd [ 37.129944][ T4602] loop0: detected capacity change from 0 to 256 [ 37.160992][ T4602] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbecade97, utbl_chksum : 0xe619d30d) [ 37.369564][ T4627] loop4: detected capacity change from 0 to 512 [ 37.399671][ T4627] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.744983][ T4637] loop1: detected capacity change from 0 to 64 [ 37.749931][ T4627] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 37.752853][ T4627] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.70: bg 0: block 248: padding at end of block bitmap is not set [ 37.775609][ T4627] Quota error (device loop4): write_blk: dquota write failed [ 37.778814][ T4627] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 37.782752][ T4627] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.70: Failed to acquire dquot type 1 [ 37.794065][ T4627] EXT4-fs (loop4): 1 truncate cleaned up [ 37.798402][ T4627] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.865112][ T4627] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 37.871036][ T4627] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 37.875433][ T4627] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.70: Failed to acquire dquot type 1 [ 37.881750][ T4645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.73'. [ 37.903219][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 37.904692][ T11] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 37.907490][ T11] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 1 [ 37.916239][ T4645] netlink: 92 bytes leftover after parsing attributes in process `syz.1.73'. [ 38.055287][ T4654] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input3 [ 38.511113][ T4666] loop1: detected capacity change from 0 to 1024 [ 38.543113][ T4606] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (512, 24) [ 38.549103][ T4606] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 38.554037][ T4606] F2FS-fs (loop2): Test dummy encryption mode enabled [ 38.565288][ T4344] Bluetooth: hci3: command 0x0419 tx timeout [ 38.565877][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 38.566301][ T4344] Bluetooth: hci1: command 0x0419 tx timeout [ 38.567989][ T4330] Bluetooth: hci0: command 0x0419 tx timeout [ 38.568369][ T4344] Bluetooth: hci4: command 0x0419 tx timeout [ 38.573867][ T4606] F2FS-fs (loop2): invalid crc value [ 38.590723][ T4606] F2FS-fs (loop2): Found nat_bits in checkpoint [ 38.651607][ T4606] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 38.678684][ T4606] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 38.699874][ T4606] F2FS-fs (loop2): Start checkpoint disabled! [ 38.738123][ T4606] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 38.741777][ T4606] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 38.863034][ T4672] set_capacity_and_notify: 1 callbacks suppressed [ 38.863043][ T4672] loop3: detected capacity change from 0 to 8192 [ 38.889228][ T4679] loop4: detected capacity change from 0 to 64 [ 39.418238][ T4698] loop1: detected capacity change from 0 to 1024 [ 40.442683][ T4734] 9pnet_fd: Insufficient options for proto=fd [ 40.765509][ T4753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.103'. [ 40.768091][ T4747] loop4: detected capacity change from 0 to 8192 [ 40.769041][ T4756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 40.797043][ T4754] netlink: 92 bytes leftover after parsing attributes in process `syz.0.102'. [ 40.842484][ T4762] loop0: detected capacity change from 0 to 64 [ 40.849291][ T4764] 9pnet_fd: Insufficient options for proto=fd [ 40.903419][ T4767] 9pnet_fd: Insufficient options for proto=fd [ 40.935219][ T4769] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 41.048751][ T4775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.112'. [ 41.165939][ T4782] loop0: detected capacity change from 0 to 1024 [ 41.969172][ T4792] 9pnet_fd: Insufficient options for proto=fd [ 41.990020][ T4794] loop0: detected capacity change from 0 to 64 [ 42.409664][ T4803] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 42.443620][ T4810] loop0: detected capacity change from 0 to 1024 [ 42.449207][ T4808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.125'. [ 42.474675][ T4810] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 43.176715][ T4830] loop2: detected capacity change from 0 to 64 [ 43.270206][ T4821] loop4: detected capacity change from 0 to 32768 [ 43.304193][ T4821] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.131 (4821) [ 43.318613][ T4821] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 43.320478][ T4821] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 43.321938][ T4821] BTRFS info (device loop4): turning on sync discard [ 43.323003][ T4821] BTRFS info (device loop4): using free space tree [ 43.706098][ T4862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.139'. [ 43.728811][ T4866] 9pnet_fd: Insufficient options for proto=fd [ 43.730534][ T4821] BTRFS info (device loop4): enabling ssd optimizations [ 43.809632][ T4329] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 43.876246][ T4874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.883106][ T4874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.973728][ T4879] netlink: 36 bytes leftover after parsing attributes in process `syz.0.142'. [ 44.515819][ T4896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.517447][ T4896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.566762][ T4901] 9pnet_fd: Insufficient options for proto=fd [ 44.656202][ T4908] netlink: 32 bytes leftover after parsing attributes in process `syz.0.156'. [ 44.657999][ T4908] netlink: 32 bytes leftover after parsing attributes in process `syz.0.156'. [ 44.662619][ T4898] set_capacity_and_notify: 1 callbacks suppressed [ 44.662625][ T4898] loop2: detected capacity change from 0 to 8192 [ 44.739199][ T4914] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 45.120932][ T4950] syz.4.166 uses obsolete (PF_INET,SOCK_PACKET) [ 45.709153][ T4972] FAULT_INJECTION: forcing a failure. [ 45.709153][ T4972] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 45.714760][ T4972] CPU: 0 PID: 4972 Comm: syz.4.172 Not tainted syzkaller #0 [ 45.716043][ T4972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 45.717714][ T4972] Call trace: [ 45.718262][ T4972] dump_backtrace+0x1c4/0x1f0 [ 45.719037][ T4972] show_stack+0x2c/0x3c [ 45.719764][ T4972] __dump_stack+0x30/0x40 [ 45.720565][ T4972] dump_stack_lvl+0xf4/0x15c [ 45.721369][ T4972] dump_stack+0x1c/0x5c [ 45.722084][ T4972] should_fail_ex+0x3cc/0x524 [ 45.722880][ T4972] should_fail+0x14/0x24 [ 45.723604][ T4972] should_fail_usercopy+0x20/0x30 [ 45.724452][ T4972] copy_from_bpfptr+0x84/0x1d8 [ 45.725274][ T4972] __sys_bpf+0x1f8/0x660 [ 45.726028][ T4972] __arm64_sys_bpf+0x80/0x98 [ 45.726817][ T4972] invoke_syscall+0x98/0x290 [ 45.727586][ T4972] el0_svc_common+0x13c/0x258 [ 45.728391][ T4972] do_el0_svc+0x5c/0x134 [ 45.729125][ T4972] el0_svc+0x58/0x128 [ 45.729828][ T4972] el0t_64_sync_handler+0x84/0xf0 [ 45.730734][ T4972] el0t_64_sync+0x18c/0x190 [ 45.896309][ T4998] netlink: 92 bytes leftover after parsing attributes in process `syz.3.181'. [ 46.036307][ T5001] loop1: detected capacity change from 0 to 8192 [ 46.089671][ T5016] loop3: detected capacity change from 0 to 512 [ 46.144357][ T5016] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.170014][ T5016] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 46.191472][ T5016] Quota error (device loop3): write_blk: dquota write failed [ 46.198658][ T5016] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 46.208943][ T5016] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.186: Failed to acquire dquot type 0 [ 46.258429][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 46.396233][ T5041] netlink: 92 bytes leftover after parsing attributes in process `syz.0.193'. [ 46.450972][ T5053] netlink: 'syz.3.199': attribute type 29 has an invalid length. [ 46.452406][ T5053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.199'. [ 46.453964][ T5053] netlink: 'syz.3.199': attribute type 29 has an invalid length. [ 46.464012][ T5053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.199'. [ 46.467376][ T5053] netlink: 'syz.3.199': attribute type 29 has an invalid length. [ 46.468620][ T5053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.199'. [ 46.506949][ T5057] ip_tables: iptables: counters copy to user failed while replacing table [ 46.596809][ T5067] loop0: detected capacity change from 0 to 16 [ 46.608360][ T5067] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature c0, please upgrade kernel version [ 46.865659][ T5084] netlink: 92 bytes leftover after parsing attributes in process `syz.1.210'. [ 46.932401][ T5094] device gretap1 entered promiscuous mode [ 46.967101][ T5092] loop1: detected capacity change from 0 to 4096 [ 46.975130][ T5092] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 46.998208][ T5092] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 47.210626][ T5049] loop4: detected capacity change from 0 to 131072 [ 47.213122][ T5049] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (512, 24) [ 47.214434][ T5049] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 47.234253][ T5049] F2FS-fs (loop4): Test dummy encryption mode enabled [ 47.248167][ T5049] F2FS-fs (loop4): invalid crc value [ 47.263981][ T5049] F2FS-fs (loop4): Found nat_bits in checkpoint [ 47.284479][ T5049] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 47.290851][ T5049] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 47.293694][ T5049] F2FS-fs (loop4): Start checkpoint disabled! [ 47.300918][ T5049] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 47.302097][ T5049] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 47.381715][ T5126] capability: warning: `syz.3.224' uses deprecated v2 capabilities in a way that may be insecure [ 47.386882][ T5123] netlink: 92 bytes leftover after parsing attributes in process `syz.1.223'. [ 47.593731][ T5139] 9pnet_fd: Insufficient options for proto=fd [ 47.598842][ T5125] loop2: detected capacity change from 0 to 8192 [ 48.682275][ T5169] loop1: detected capacity change from 0 to 131072 [ 48.688697][ T5169] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24) [ 48.690229][ T5169] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 48.691875][ T5169] F2FS-fs (loop1): Test dummy encryption mode enabled [ 48.697741][ T5169] F2FS-fs (loop1): invalid crc value [ 48.722138][ T5169] F2FS-fs (loop1): Found nat_bits in checkpoint [ 48.729192][ T5169] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 48.752570][ T5169] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 48.758177][ T5169] F2FS-fs (loop1): Start checkpoint disabled! [ 48.763414][ T5169] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 48.764815][ T5169] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 48.833960][ T5217] loop4: detected capacity change from 0 to 8192 [ 50.198038][ T5316] loop3: detected capacity change from 0 to 64 [ 50.312958][ T5320] loop1: detected capacity change from 0 to 8192 [ 50.317503][ T5323] loop0: detected capacity change from 0 to 16 [ 50.337840][ T5323] erofs: (device loop0): mounted with root inode @ nid 36. [ 50.534556][ T5332] loop4: detected capacity change from 0 to 1024 [ 50.558177][ T5332] hfsplus: invalid length 1280 has been corrected to 255 [ 51.130845][ T5344] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 51.300403][ T5350] netlink: 28 bytes leftover after parsing attributes in process `syz.2.291'. [ 51.720201][ T5376] loop1: detected capacity change from 0 to 64 [ 51.742564][ T5372] loop3: detected capacity change from 0 to 8192 [ 51.769711][ T5372] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.831270][ T5382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.306'. [ 51.946970][ T5392] loop4: detected capacity change from 0 to 164 [ 52.012879][ T5398] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 52.541132][ T5412] loop2: detected capacity change from 0 to 64 [ 52.950544][ T4339] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.952899][ T4339] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.954566][ T4339] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.956682][ T4339] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.958374][ T4339] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 52.959794][ T4339] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.989124][ T5456] loop3: detected capacity change from 0 to 64 [ 53.040891][ T4423] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.119635][ T5468] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 53.176988][ T4423] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.258400][ T5449] chnl_net:caif_netlink_parms(): no params data found [ 53.283807][ T5449] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.287988][ T5449] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.898711][ T5449] device bridge_slave_0 entered promiscuous mode [ 53.948169][ T4423] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.956276][ T5449] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.957788][ T5449] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.959554][ T5449] device bridge_slave_1 entered promiscuous mode [ 53.973759][ T5498] loop1: detected capacity change from 0 to 64 [ 53.975832][ T5449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.983992][ T5449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.048217][ T4423] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.080986][ T5449] team0: Port device team_slave_0 added [ 54.086301][ T5449] team0: Port device team_slave_1 added [ 54.091627][ T5449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.128542][ T5449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.133535][ T5507] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 54.140782][ T5512] 9pnet: Could not find request transport: fd00000000000000000000004 [ 54.152151][ T5449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.159004][ T5449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.162526][ T5449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.172633][ T5449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.253583][ T5449] device hsr_slave_0 entered promiscuous mode [ 54.285632][ T5449] device hsr_slave_1 entered promiscuous mode [ 54.316272][ T5449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.317869][ T5449] Cannot create hsr debugfs directory [ 54.393689][ T5449] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 54.426137][ T5449] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 54.726651][ T5449] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 54.829344][ T5449] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 54.858389][ T5550] erofs: (device loop3): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 54.930193][ T5449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.940344][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 54.947501][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.949629][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.951850][ T5559] netlink: 'syz.3.361': attribute type 3 has an invalid length. [ 54.953620][ T5559] netlink: 'syz.3.361': attribute type 3 has an invalid length. [ 54.957603][ T5449] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.967407][ T4344] Bluetooth: hci2: command 0x0409 tx timeout [ 55.060972][ T5570] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 55.091748][ T4344] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.093380][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.093799][ T4344] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.099794][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.101706][ T1611] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.103066][ T1611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.104966][ T4344] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.108772][ T4344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.111161][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.112905][ T4344] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.113119][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.125554][ T4344] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.128242][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.151523][ T1611] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.152961][ T1611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.308454][ T5449] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.310289][ T5449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.316868][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.318601][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.320310][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.322413][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.330290][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.334287][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.339200][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.341234][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.342938][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.344607][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.347057][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.348709][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.783308][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.784823][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.818529][ T5449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.826761][ T5611] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 55.954473][ T5573] chnl_net:caif_netlink_parms(): no params data found [ 55.973067][ T5632] set_capacity_and_notify: 1 callbacks suppressed [ 55.973074][ T5632] loop3: detected capacity change from 0 to 16 [ 55.989893][ T5632] erofs: (device loop3): mounted with root inode @ nid 36. [ 56.004390][ T5632] syz.3.378: attempt to access beyond end of device [ 56.004390][ T5632] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 56.011175][ T5632] syz.3.378: attempt to access beyond end of device [ 56.011175][ T5632] loop3: rw=524288, sector=24, nr_sectors = 112 limit=16 [ 56.013444][ T5632] syz.3.378: attempt to access beyond end of device [ 56.013444][ T5632] loop3: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 56.019690][ T5632] ================================================================== [ 56.021068][ T5632] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x39c/0x494 [ 56.022588][ T5632] Read of size 4096 at addr ffff0000eafc6000 by task syz.3.378/5632 [ 56.023879][ T5632] [ 56.024247][ T5632] CPU: 1 PID: 5632 Comm: syz.3.378 Not tainted syzkaller #0 [ 56.025552][ T5632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 56.027408][ T5632] Call trace: [ 56.028012][ T5632] dump_backtrace+0x1c4/0x1f0 [ 56.028899][ T5632] show_stack+0x2c/0x3c [ 56.029685][ T5632] __dump_stack+0x30/0x40 [ 56.030497][ T5632] dump_stack_lvl+0xf4/0x15c [ 56.031334][ T5632] print_address_description+0x88/0x218 [ 56.032364][ T5632] print_report+0x50/0x68 [ 56.033121][ T5632] kasan_report+0xa8/0xfc [ 56.033884][ T5632] kasan_check_range+0x258/0x290 [ 56.034760][ T5632] memcpy+0x48/0x90 [ 56.035395][ T5632] z_erofs_transform_plain+0x39c/0x494 [ 56.036316][ T5632] z_erofs_decompress+0x9c/0xd4 [ 56.037144][ T5632] z_erofs_decompress_queue+0x103c/0x1bf4 [ 56.038166][ T5632] z_erofs_runqueue+0x1508/0x16a8 [ 56.039006][ T5632] z_erofs_read_folio+0x2dc/0x5cc [ 56.039893][ T5632] filemap_read_folio+0x134/0x384 [ 56.040764][ T5632] filemap_read+0x1290/0x20dc [ 56.041565][ T5632] generic_file_read_iter+0xf8/0x5ac [ 56.042429][ T5632] vfs_read+0x3cc/0x7b8 [ 56.043151][ T5632] ksys_read+0x12c/0x228 [ 56.043862][ T5632] __arm64_sys_read+0x7c/0x90 [ 56.044600][ T5632] invoke_syscall+0x98/0x290 [ 56.045379][ T5632] el0_svc_common+0x13c/0x258 [ 56.046181][ T5632] do_el0_svc+0x5c/0x134 [ 56.046940][ T5632] el0_svc+0x58/0x128 [ 56.047582][ T5632] el0t_64_sync_handler+0x84/0xf0 [ 56.048452][ T5632] el0t_64_sync+0x18c/0x190 [ 56.049226][ T5632] [ 56.049595][ T5632] Allocated by task 5632: [ 56.050306][ T5632] kasan_set_track+0x4c/0x80 [ 56.051026][ T5632] kasan_save_alloc_info+0x24/0x30 [ 56.051947][ T5632] __kasan_kmalloc+0xa0/0xb8 [ 56.052718][ T5632] __kmalloc+0xd8/0x180 [ 56.053450][ T5632] tomoyo_encode+0x260/0x484 [ 56.054235][ T5632] tomoyo_realpath_from_path+0x4b4/0x508 [ 56.055315][ T5632] tomoyo_check_open_permission+0x19c/0x35c [ 56.056395][ T5632] tomoyo_file_open+0x128/0x198 [ 56.057270][ T5632] security_file_open+0x6c/0xac [ 56.058046][ T5632] do_dentry_open+0x294/0xf8c [ 56.058868][ T5632] vfs_open+0x7c/0x90 [ 56.059520][ T5632] path_openat+0x1fc0/0x27a0 [ 56.060303][ T5632] do_filp_open+0x198/0x38c [ 56.061063][ T5632] do_sys_openat2+0x134/0x3fc [ 56.061866][ T5632] __arm64_sys_openat+0x11c/0x150 [ 56.062722][ T5632] invoke_syscall+0x98/0x290 [ 56.063525][ T5632] el0_svc_common+0x13c/0x258 [ 56.064338][ T5632] do_el0_svc+0x5c/0x134 [ 56.065051][ T5632] el0_svc+0x58/0x128 [ 56.065778][ T5632] el0t_64_sync_handler+0x84/0xf0 [ 56.066644][ T5632] el0t_64_sync+0x18c/0x190 [ 56.067433][ T5632] [ 56.067838][ T5632] Freed by task 5632: [ 56.068539][ T5632] kasan_set_track+0x4c/0x80 [ 56.069339][ T5632] kasan_save_free_info+0x38/0x5c [ 56.070273][ T5632] ____kasan_slab_free+0x148/0x1b0 [ 56.071138][ T5632] __kasan_slab_free+0x18/0x28 [ 56.071980][ T5632] slab_free_freelist_hook+0x16c/0x1e8 [ 56.072921][ T5632] __kmem_cache_free+0xbc/0x21c [ 56.073751][ T5632] kfree+0xd0/0x1a8 [ 56.074412][ T5632] tomoyo_check_open_permission+0x274/0x35c [ 56.075394][ T5632] tomoyo_file_open+0x128/0x198 [ 56.076240][ T5632] security_file_open+0x6c/0xac [ 56.077093][ T5632] do_dentry_open+0x294/0xf8c [ 56.077945][ T5632] vfs_open+0x7c/0x90 [ 56.078687][ T5632] path_openat+0x1fc0/0x27a0 [ 56.079496][ T5632] do_filp_open+0x198/0x38c [ 56.080308][ T5632] do_sys_openat2+0x134/0x3fc [ 56.081069][ T5632] __arm64_sys_openat+0x11c/0x150 [ 56.081920][ T5632] invoke_syscall+0x98/0x290 [ 56.082732][ T5632] el0_svc_common+0x13c/0x258 [ 56.083588][ T5632] do_el0_svc+0x5c/0x134 [ 56.084327][ T5632] el0_svc+0x58/0x128 [ 56.084997][ T5632] el0t_64_sync_handler+0x84/0xf0 [ 56.085830][ T5632] el0t_64_sync+0x18c/0x190 [ 56.086586][ T5632] [ 56.086962][ T5632] The buggy address belongs to the object at ffff0000eafc6000 [ 56.086962][ T5632] which belongs to the cache kmalloc-128 of size 128 [ 56.089411][ T5632] The buggy address is located 0 bytes inside of [ 56.089411][ T5632] 128-byte region [ffff0000eafc6000, ffff0000eafc6080) [ 56.091606][ T5632] [ 56.091995][ T5632] The buggy address belongs to the physical page: [ 56.093066][ T5632] page:000000005292cea4 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12afc6 [ 56.094738][ T5632] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 56.096035][ T5632] raw: 05ffc00000000200 0000000000000000 dead000000000122 ffff0000c0002300 [ 56.097492][ T5632] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 56.098919][ T5632] page dumped because: kasan: bad access detected [ 56.099973][ T5632] [ 56.100358][ T5632] Memory state around the buggy address: [ 56.101284][ T5632] ffff0000eafc5f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 56.102648][ T5632] ffff0000eafc5f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 56.103968][ T5632] >ffff0000eafc6000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.105314][ T5632] ^ [ 56.105980][ T5632] ffff0000eafc6080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 56.107323][ T5632] ffff0000eafc6100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.108681][ T5632] ================================================================== [ 56.114973][ T5632] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 56.127734][ T5573] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.129301][ T5573] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.130736][ T5573] device bridge_slave_0 entered promiscuous mode [ 57.453552][ T4423] device hsr_slave_0 left promiscuous mode [ 57.475034][ T4423] device hsr_slave_1 left promiscuous mode [ 57.564989][ T4423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.566314][ T4423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.567814][ T4423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.569095][ T4423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.570517][ T4423] device bridge_slave_1 left promiscuous mode [ 57.571647][ T4423] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.605245][ T4423] device bridge_slave_0 left promiscuous mode [ 57.606400][ T4423] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.765142][ T4423] device veth1_macvtap left promiscuous mode [ 57.766143][ T4423] device veth0_macvtap left promiscuous mode [ 57.767459][ T4423] device veth1_vlan left promiscuous mode [ 57.768520][ T4423] device veth0_vlan left promiscuous mode [ 59.905401][ T4423] team0 (unregistering): Port device team_slave_1 removed [ 60.065736][ T4423] team0 (unregistering): Port device team_slave_0 removed [ 60.235222][ T4423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.435544][ T4423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.025626][ T4423] bond0 (unregistering): Released all slaves [ 64.485678][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.486823][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.875723][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.986689][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.035834][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.115613][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.236100][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.307600][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.385862][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.455791][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.626659][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.697550][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.766360][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.826733][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.976374][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0