last executing test programs: 15.066669154s ago: executing program 4 (id=45): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 14.500098459s ago: executing program 4 (id=54): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'macsec0\x00', 0x4000}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 14.499789049s ago: executing program 4 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3}}, 0x30) read$FUSE(r0, 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x4, 0x0, {0x0, 0xffffffffffffffff}}, 0x28) syz_clone(0x800080, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) write$FUSE_OPEN(r0, &(0x7f00000002c0)={0x20}, 0x20) 13.642407787s ago: executing program 4 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000340)=""/187, 0xbb}], 0x8}, 0x80000000}], 0x4, 0x20, 0x0) 12.790986756s ago: executing program 4 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x198) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') 12.771576387s ago: executing program 4 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000310001072abd70000000000003"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 2.227677962s ago: executing program 0 (id=261): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x80, 0x40005, 0x9}}) 2.208432834s ago: executing program 0 (id=263): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) 2.100612092s ago: executing program 3 (id=266): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x5b24, &(0x7f0000000040)) 2.018267319s ago: executing program 2 (id=267): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.544304937s ago: executing program 3 (id=268): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, 0x0, 0x4010) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 1.543227587s ago: executing program 3 (id=269): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) 1.448088564s ago: executing program 2 (id=270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @multicast1}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) 1.355182102s ago: executing program 2 (id=272): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0xa, 0x0, 0x8d}, @mpls={[], @ipv6=@tipc_packet={0x8, 0x6, "09c2b4", 0x28, 0x6, 0xff, @empty, @mcast2, {[], @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0x2, 0x2, 0x4886, 0x0, 0x3, 0x9, 0x0, 0x2, 0x8, 0x0, 0x0, 0x4e23, 0x4e20}, 0x1}, 0x4, 0x4}}}}}}}, 0x5e) 1.350739142s ago: executing program 0 (id=273): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f29, 0x80000002, 0x10000, 0x4, 0x0, 0x2, 0x8, 0x7, 0xa, 0x10000100, 0x2, 0x1, 0x1, 0x9, 0x8, 0x101, 0x0, 0x1a449, 0x18003, 0x40000003, 0x2, 0xcaa7, 0x0, 0x8, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) 1.276786558s ago: executing program 0 (id=274): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000140)) 1.267677269s ago: executing program 0 (id=275): ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e", 0x5}], 0x1}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 1.215545363s ago: executing program 2 (id=276): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000880)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x80800, 0x15b) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000c80)=""/4079, 0xfef) 1.186060536s ago: executing program 2 (id=277): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x8, 0x3, 0xd, 0xfffffffd, 0x10, "fe99010021ca0f00000004b1d000"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x8, 0xfffffff9, 0x7, 0x800, 0x5, "0b80144341778049f7c5ffffef00"}) 1.160279247s ago: executing program 2 (id=278): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) 972.054943ms ago: executing program 3 (id=279): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d0001000060000904008002030000000921080400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)="fe") 452.040914ms ago: executing program 3 (id=282): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x12901, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 451.781344ms ago: executing program 3 (id=283): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) 339.550743ms ago: executing program 1 (id=284): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000340)={0x0, 0x6}) 246.044001ms ago: executing program 1 (id=285): ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) socket$key(0xf, 0x3, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fda={0x66646185, 0x6, 0x0, 0x17}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 176.111676ms ago: executing program 1 (id=286): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040301, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r1, 0x40184150, &(0x7f0000000240)={0x0, 0x0}) 122.890661ms ago: executing program 1 (id=287): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000880)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x80800, 0x15b) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000c80)=""/4079, 0xfef) 121.89039ms ago: executing program 1 (id=288): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)="ccc3da01f6fb1af5", 0x8}], 0x2) 69.098385ms ago: executing program 0 (id=289): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000005c0)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x10) syz_usb_control_io(r0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x8010, 0x0) 0s ago: executing program 1 (id=290): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) close(0x3) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3, 0x91, 0xea, 0x40, 0x547, 0x2720, 0xde7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5a, 0x0, 0x0, 0x28, 0xfc, 0x89}}]}}]}}, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/188, 0xbc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts. [ 24.340597][ T4309] cgroup: Unknown subsys name 'net' [ 24.574933][ T4309] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 24.866686][ T4309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 26.135702][ T4320] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 26.137424][ T4320] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 26.138739][ T4320] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 26.140446][ T4320] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 26.141949][ T4320] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 26.143700][ T4320] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 26.162501][ T4328] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 26.164157][ T4328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 26.166501][ T4331] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 26.168186][ T4331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 26.169349][ T4331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 26.170775][ T4331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 26.172281][ T4331] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 26.174315][ T4331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 26.175674][ T4331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 26.177476][ T4331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 26.179199][ T4331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 26.181028][ T4331] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 26.182291][ T4331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 26.184070][ T4331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 26.185772][ T4331] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 26.187092][ T4331] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 26.188414][ T4331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 26.189765][ T4331] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 26.191097][ T4331] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 26.218900][ T4333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 26.220369][ T4333] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 26.221918][ T4333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 26.223904][ T4333] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 26.225162][ T4333] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 26.234166][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 26.285581][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.286782][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.288283][ T4319] device bridge_slave_0 entered promiscuous mode [ 26.291229][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.292327][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.294300][ T4319] device bridge_slave_1 entered promiscuous mode [ 26.309037][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.311933][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.331534][ T4319] team0: Port device team_slave_0 added [ 26.336754][ T4319] team0: Port device team_slave_1 added [ 26.344273][ T4323] chnl_net:caif_netlink_parms(): no params data found [ 26.363232][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.364413][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.368658][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.382669][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.383838][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.387897][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.398542][ T4324] chnl_net:caif_netlink_parms(): no params data found [ 26.418369][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.419672][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.421262][ T4323] device bridge_slave_0 entered promiscuous mode [ 26.426995][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 26.430990][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 26.444065][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.445323][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.446712][ T4323] device bridge_slave_1 entered promiscuous mode [ 26.503460][ T4319] device hsr_slave_0 entered promiscuous mode [ 26.552686][ T4319] device hsr_slave_1 entered promiscuous mode [ 26.610438][ T4323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.611891][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.613204][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.614693][ T4324] device bridge_slave_0 entered promiscuous mode [ 26.616575][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.617732][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.619155][ T4324] device bridge_slave_1 entered promiscuous mode [ 26.629399][ T4323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.634388][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.635533][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.636995][ T4325] device bridge_slave_0 entered promiscuous mode [ 26.650380][ T4324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.651928][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.653240][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.654692][ T4325] device bridge_slave_1 entered promiscuous mode [ 26.661397][ T4324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.668308][ T4323] team0: Port device team_slave_0 added [ 26.676282][ T4324] team0: Port device team_slave_0 added [ 26.679892][ T4323] team0: Port device team_slave_1 added [ 26.681311][ T4324] team0: Port device team_slave_1 added [ 26.688963][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.693184][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.694351][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.695820][ T4326] device bridge_slave_0 entered promiscuous mode [ 26.705960][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.709576][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.710762][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.712301][ T4326] device bridge_slave_1 entered promiscuous mode [ 26.721490][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.722835][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.726967][ T4323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.731174][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.732323][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.736503][ T4324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.745610][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.746744][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.750963][ T4323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.756168][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.757297][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.761419][ T4324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.766740][ T4325] team0: Port device team_slave_0 added [ 26.772012][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.775273][ T4325] team0: Port device team_slave_1 added [ 26.783311][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.800694][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.801780][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.805873][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.810870][ T4326] team0: Port device team_slave_0 added [ 26.863484][ T4324] device hsr_slave_0 entered promiscuous mode [ 26.912711][ T4324] device hsr_slave_1 entered promiscuous mode [ 26.952519][ T4324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.953736][ T4324] Cannot create hsr debugfs directory [ 27.003414][ T4323] device hsr_slave_0 entered promiscuous mode [ 27.042694][ T4323] device hsr_slave_1 entered promiscuous mode [ 27.082525][ T4323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.083725][ T4323] Cannot create hsr debugfs directory [ 27.085158][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.086257][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.090441][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.096758][ T4326] team0: Port device team_slave_1 added [ 27.119016][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.120214][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.124427][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.135170][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.136326][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.140608][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.193618][ T4325] device hsr_slave_0 entered promiscuous mode [ 27.232739][ T4325] device hsr_slave_1 entered promiscuous mode [ 27.272613][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.273727][ T4325] Cannot create hsr debugfs directory [ 27.278069][ T4319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.326385][ T4319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.373658][ T4319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.411791][ T4319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.503392][ T4326] device hsr_slave_0 entered promiscuous mode [ 27.542750][ T4326] device hsr_slave_1 entered promiscuous mode [ 27.602510][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.603738][ T4326] Cannot create hsr debugfs directory [ 27.675814][ T4323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.729415][ T4323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.764565][ T4323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.806685][ T4323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.884040][ T4326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.914379][ T4324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.953562][ T4324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.004876][ T4324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.046068][ T4325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.084119][ T4326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.124097][ T4326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.165770][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.167168][ T4324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.172858][ T4328] Bluetooth: hci0: command 0x0409 tx timeout [ 28.213479][ T4325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.252615][ T4328] Bluetooth: hci4: command 0x0409 tx timeout [ 28.252625][ T4333] Bluetooth: hci3: command 0x0409 tx timeout [ 28.252728][ T4333] Bluetooth: hci2: command 0x0409 tx timeout [ 28.253785][ T4328] Bluetooth: hci1: command 0x0409 tx timeout [ 28.255735][ T4325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.293545][ T4325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.343319][ T4326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.386357][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.389809][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.393491][ T4323] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.398033][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.399840][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.401302][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.402933][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.404184][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.405827][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.407436][ T251] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.408548][ T251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.410510][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.417186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.418748][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.420241][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.421299][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.433624][ T4319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.435223][ T4319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.437650][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.439249][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.440583][ T251] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.441663][ T251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.443444][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.445125][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.446803][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.448409][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.449910][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.451735][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.454342][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.455856][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.457378][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.458873][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.460481][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.461925][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.463785][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.481361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.482920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.484374][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.485463][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.497043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.498782][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.500411][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.502242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.504934][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.506583][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.515567][ T4323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.517240][ T4323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.520641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.522067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.525314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.527279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.528927][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.530470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.544685][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.558590][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.577622][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.579154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.586948][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.588387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.590823][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.607227][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.611307][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.616238][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.618307][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.619787][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.626246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.627613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.628812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.630269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.631698][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.632823][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.634799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.636401][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.637853][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.639154][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.642160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.643835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.645341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.646593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.650670][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.653175][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.654670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.656191][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.657376][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.659013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.660639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.662213][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.663404][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.665648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.670535][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.672106][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.673687][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.674803][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.676105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.677617][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.679056][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.680210][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.683493][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.685098][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.688564][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.692137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.694058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.695653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.702428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.704888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.707009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.708559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.715298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.716930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.718378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.724310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.726155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.727744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.739184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.741213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.743500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.745050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.746611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.750586][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.752122][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.754589][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.756539][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.758069][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.759596][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.761932][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.764217][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.765623][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.767050][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.768522][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.775017][ T4325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.777312][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.779433][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.780863][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.782275][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.784220][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.786427][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.787892][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.789538][ T4319] device veth0_vlan entered promiscuous mode [ 28.792605][ T4323] device veth0_vlan entered promiscuous mode [ 28.796546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.798015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.799485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.800922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.810298][ T4323] device veth1_vlan entered promiscuous mode [ 28.811734][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.813391][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.814823][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.816248][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.817711][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.821826][ T4319] device veth1_vlan entered promiscuous mode [ 28.826583][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.829107][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.839864][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.841409][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.843944][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.845459][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.847465][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.864856][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.866517][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.868789][ T4319] device veth0_macvtap entered promiscuous mode [ 28.870291][ T4323] device veth0_macvtap entered promiscuous mode [ 28.874107][ T4319] device veth1_macvtap entered promiscuous mode [ 28.877079][ T4323] device veth1_macvtap entered promiscuous mode [ 28.888514][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.893721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.895332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.896716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.898154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.899567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.900812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.908975][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.911765][ T283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.914137][ T283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.916482][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.918166][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.928580][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.931140][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.932775][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.937809][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.939433][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.949290][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.951220][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.953344][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.954847][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.956312][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.957943][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.959246][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.961539][ T4319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.964778][ T4319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.966220][ T4319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.967772][ T4319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.970570][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.972282][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.975680][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.980938][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.985541][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.987204][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.988744][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.989930][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.992358][ T4325] device veth0_vlan entered promiscuous mode [ 28.998945][ T4323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.000385][ T4323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.001891][ T4323] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.004722][ T4323] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.010444][ T4325] device veth1_vlan entered promiscuous mode [ 29.018722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.020187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.021688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.026092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.028301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.029577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.041766][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.045830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.047370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.049005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.050341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.052013][ T4324] device veth0_vlan entered promiscuous mode [ 29.069967][ T4325] device veth0_macvtap entered promiscuous mode [ 29.075705][ T4325] device veth1_macvtap entered promiscuous mode [ 29.080424][ T4324] device veth1_vlan entered promiscuous mode [ 29.081728][ T283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.083210][ T283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.084789][ T283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.086611][ T283] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.105057][ T283] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.108225][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.109564][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.111293][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.122407][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.125677][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.127249][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.128760][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.130969][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.135783][ T4324] device veth0_macvtap entered promiscuous mode [ 29.140018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.141583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.144063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.145537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.146991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.155455][ T4381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.156670][ T4381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.158390][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.159913][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.161547][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.164234][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.166592][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.167896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.169489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.170836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.172296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.182354][ T4324] device veth1_macvtap entered promiscuous mode [ 29.186290][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.186867][ T4325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.187636][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.189000][ T4325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.191595][ T4325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.193958][ T4325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.196891][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.198474][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.212392][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.217178][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.218676][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.220232][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.221704][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.224205][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.226615][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.235814][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.237478][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.239013][ T251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.240374][ T251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.244860][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.246495][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.248110][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.249829][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.251479][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.254149][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.256414][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.257687][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.259110][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.260687][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.262160][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.264814][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.268063][ T4324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.269444][ T4324] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.270911][ T4324] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.272281][ T4324] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.283711][ T4326] device veth0_vlan entered promiscuous mode [ 29.317952][ T283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.319646][ T283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.322368][ T283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.326370][ T283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.329887][ T283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.331202][ T283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.332107][ T4326] device veth1_vlan entered promiscuous mode [ 29.339902][ T283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.348110][ T283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.357886][ T4429] loop0: detected capacity change from 0 to 4096 [ 29.386288][ T4433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.387754][ T4433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.390669][ T283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.392330][ T283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.396697][ T283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.425304][ T4326] device veth0_macvtap entered promiscuous mode [ 29.427901][ T4326] device veth1_macvtap entered promiscuous mode [ 29.431626][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.432970][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.438317][ T251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.439435][ T251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.448445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.450130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.464689][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.465909][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.467508][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.497391][ T4435] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 29.501633][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.505106][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.506767][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.508426][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.510054][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.511744][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.517909][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.519581][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.522210][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.575030][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.576683][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.586041][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.587673][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.589277][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.591039][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.602828][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.604553][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.606401][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.608024][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.623807][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.624991][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.630113][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.631080][ T4438] loop3: detected capacity change from 0 to 2048 [ 29.636980][ T4326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.638374][ T4326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.639851][ T4326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.641311][ T4326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.652378][ T4442] loop2: detected capacity change from 0 to 7 [ 29.658220][ T4442] Dev loop2: unable to read RDB block 7 [ 29.662183][ T4442] loop2: unable to read partition table [ 29.669678][ T4442] loop2: partition table beyond EOD, truncated [ 29.676931][ T4442] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 29.689011][ T4438] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 29.703560][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.704782][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.715794][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.746884][ T4381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.748106][ T4381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.750001][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.781849][ T4449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.787237][ T4449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.807366][ T4451] loop4: detected capacity change from 0 to 128 [ 29.837436][ T4440] loop2: detected capacity change from 0 to 32768 [ 29.839194][ T4451] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 29.849000][ T4440] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3 (4440) [ 29.861643][ T4440] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 29.862422][ T4451] syz.4.5 (pid 4451) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 29.865019][ T4440] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 29.865067][ T4440] BTRFS info (device loop2): force clearing of disk cache [ 29.868968][ T4440] BTRFS info (device loop2): metadata ratio 0 [ 29.870407][ T4440] BTRFS info (device loop2): enabling ssd optimizations [ 29.872161][ T4440] BTRFS info (device loop2): using spread ssd allocation scheme [ 29.874428][ T4440] BTRFS info (device loop2): using free space tree [ 29.928959][ T4440] BTRFS info (device loop2): rebuilding free space tree [ 29.961491][ T4451] fscrypt: Adiantum using implementation "adiantum(xchacha12-neon,aes-ce,nhpoly1305-generic)" [ 30.032023][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 30.041040][ T4381] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 30.077941][ T4484] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13'. [ 30.080058][ T4484] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13'. [ 30.100668][ T4324] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 30.158109][ T4492] loop1: detected capacity change from 0 to 4096 [ 30.244961][ T4500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.246693][ T4500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.260661][ T4322] Bluetooth: hci0: command 0x041b tx timeout [ 30.309448][ T4506] netlink: 'syz.1.20': attribute type 2 has an invalid length. [ 30.310727][ T4506] netlink: 164 bytes leftover after parsing attributes in process `syz.1.20'. [ 30.338871][ T4322] Bluetooth: hci2: command 0x041b tx timeout [ 30.338900][ T4328] Bluetooth: hci4: command 0x041b tx timeout [ 30.339871][ T4322] Bluetooth: hci3: command 0x041b tx timeout [ 30.341022][ T4328] Bluetooth: hci1: command 0x041b tx timeout [ 30.442349][ T4516] kernel profiling enabled (shift: 7) [ 30.447533][ T4516] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.25'. [ 30.477852][ T4518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.479316][ T4518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.481988][ T4518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.484576][ T4518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.499015][ T4381] Bluetooth: (null): Invalid header checksum [ 30.500192][ T39] Bluetooth: (null): Invalid header checksum [ 30.539800][ T4523] loop3: detected capacity change from 0 to 4096 [ 30.598789][ T4525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.600419][ T4525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.603553][ T4525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.609076][ T4525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.645056][ T4328] Bluetooth: hci3: unexpected cc 0x0c5b length: 5 > 1 [ 30.686683][ T4518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.688221][ T4518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.882650][ T4369] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.017950][ T4536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.019505][ T4536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.074529][ T4369] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 31.075986][ T4369] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.077507][ T4369] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 31.079032][ T4369] usb 1-1: config 1 has no interface number 0 [ 31.079970][ T4369] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 31.081612][ T4369] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 31.085958][ T4369] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.087481][ T4369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.088823][ T4369] usb 1-1: Product: syz [ 31.089517][ T4369] usb 1-1: Manufacturer: syz [ 31.090284][ T4369] usb 1-1: SerialNumber: syz [ 31.230454][ T4546] loop1: detected capacity change from 0 to 4096 [ 31.286240][ T4548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.287843][ T4548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.299154][ T4369] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 31.305451][ T4369] usb 1-1: USB disconnect, device number 2 [ 31.369603][ T4554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.371098][ T4554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.376230][ T4554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.377695][ T4554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.544993][ T4556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.547358][ T4556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.579750][ T4558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.581231][ T4558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.819095][ T4560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.821728][ T4560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.897200][ T4566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.898905][ T4566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.926719][ T4568] loop0: detected capacity change from 0 to 4096 [ 31.966341][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 32.068912][ T4572] netlink: 'syz.2.52': attribute type 1 has an invalid length. [ 32.070335][ T4572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 32.107563][ T4576] device veth1_macvtap left promiscuous mode [ 32.115457][ T4576] device veth1_macvtap entered promiscuous mode [ 32.167748][ T4582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.169964][ T4582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.343360][ T4333] Bluetooth: hci0: command 0x040f tx timeout [ 32.413171][ T4328] Bluetooth: hci1: command 0x040f tx timeout [ 32.422216][ T4378] hid-generic C98F:0003:0000.0001: unknown main item tag 0x0 [ 32.423533][ T4333] Bluetooth: hci4: command 0x040f tx timeout [ 32.423558][ T4333] Bluetooth: hci2: command 0x040f tx timeout [ 32.425936][ T4378] hid-generic C98F:0003:0000.0001: unknown main item tag 0x0 [ 32.428968][ T4378] hid-generic C98F:0003:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 32.456290][ T4593] fido_id[4593]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 32.486373][ T4595] loop3: detected capacity change from 0 to 4096 [ 32.570756][ T4328] Bluetooth: hci4: unknown advertising packet type: 0x70 [ 32.570794][ T4328] Bluetooth: hci4: Malformed LE Event: 0x02 [ 32.652727][ T4328] Bluetooth: hci3: command 0x0419 tx timeout [ 33.189623][ T4617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.192095][ T4617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.569954][ T4623] loop0: detected capacity change from 0 to 4096 [ 33.667797][ T4638] Zero length message leads to an empty skb [ 33.721352][ T4643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.725430][ T4643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.735508][ T4647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.737089][ T4647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.142559][ T4369] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.246547][ T4653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.248708][ T4653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.279150][ T4657] netlink: 'syz.3.85': attribute type 21 has an invalid length. [ 34.280374][ T4657] netlink: 'syz.3.85': attribute type 6 has an invalid length. [ 34.281548][ T4657] netlink: 128 bytes leftover after parsing attributes in process `syz.3.85'. [ 34.291934][ T4655] loop2: detected capacity change from 0 to 4096 [ 34.322761][ T4369] usb 1-1: Using ep0 maxpacket: 32 [ 34.325040][ T4369] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 34.326455][ T4369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.329102][ T4369] usb 1-1: config 0 descriptor?? [ 34.413597][ T4333] Bluetooth: hci0: command 0x0419 tx timeout [ 34.477110][ T4670] netlink: 'syz.2.92': attribute type 12 has an invalid length. [ 34.478429][ T4670] netlink: 132 bytes leftover after parsing attributes in process `syz.2.92'. [ 34.492835][ T4328] Bluetooth: hci2: command 0x0419 tx timeout [ 34.493778][ T4328] Bluetooth: hci4: command 0x0419 tx timeout [ 34.494703][ T4328] Bluetooth: hci1: command 0x0419 tx timeout [ 34.523356][ T4668] loop3: detected capacity change from 0 to 32768 [ 34.526417][ T4668] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.91 (4668) [ 34.534032][ T4369] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 34.537482][ T4369] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 34.538655][ T4668] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 34.540006][ T4369] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 34.540764][ T4668] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 34.543442][ T4369] usb 1-1: media controller created [ 34.544000][ T4668] BTRFS info (device loop3): force clearing of disk cache [ 34.545384][ T4668] BTRFS info (device loop3): metadata ratio 0 [ 34.546474][ T4668] BTRFS info (device loop3): enabling ssd optimizations [ 34.547106][ T4369] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 34.547518][ T4668] BTRFS info (device loop3): using spread ssd allocation scheme [ 34.550304][ T4668] BTRFS info (device loop3): using free space tree [ 34.561470][ T4668] BTRFS info (device loop3): rebuilding free space tree [ 34.582035][ T4325] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 34.775957][ T4707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.777713][ T4707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.930906][ T4732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.932413][ T4732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.975626][ T4733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 36.002350][ T4729] loop1: detected capacity change from 0 to 32768 [ 36.007841][ T4729] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.105 (4729) [ 36.012199][ T4729] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 36.014721][ T4729] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 36.016154][ T4729] BTRFS info (device loop1): force clearing of disk cache [ 36.017450][ T4729] BTRFS info (device loop1): metadata ratio 0 [ 36.018414][ T4729] BTRFS info (device loop1): enabling ssd optimizations [ 36.019649][ T4729] BTRFS info (device loop1): using spread ssd allocation scheme [ 36.021057][ T4729] BTRFS info (device loop1): using free space tree [ 36.030864][ T4729] BTRFS info (device loop1): rebuilding free space tree [ 36.056547][ T4323] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 36.140156][ T4755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.141639][ T4755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.520357][ T4759] loop2: detected capacity change from 0 to 4096 [ 36.572848][ T4369] az6027: usb out operation failed. (-110) [ 36.574811][ T4369] az6027: usb out operation failed. (-32) [ 36.575826][ T4369] stb0899_attach: Driver disabled by Kconfig [ 36.577696][ T4651] az6027: usb in operation failed. (-32) [ 36.579869][ T4369] az6027: no front-end attached [ 36.579869][ T4369] [ 36.581528][ T4369] az6027: usb out operation failed. (-71) [ 36.583224][ T4369] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 36.585867][ T4369] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input3 [ 36.589272][ T4369] dvb-usb: schedule remote query interval to 400 msecs. [ 36.590443][ T4369] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 36.600222][ T4369] usb 1-1: USB disconnect, device number 3 [ 36.671538][ T4369] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 36.726737][ T27] audit: type=1326 audit(36.710:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.3.114" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb415af28 code=0x0 [ 36.907814][ T4774] Bluetooth: MGMT ver 1.22 [ 37.031761][ T4778] loop2: detected capacity change from 0 to 32768 [ 37.034230][ T4778] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.117 (4778) [ 37.039629][ T4778] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 37.041442][ T4778] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 37.045012][ T4778] BTRFS info (device loop2): force clearing of disk cache [ 37.046159][ T4778] BTRFS info (device loop2): metadata ratio 0 [ 37.047107][ T4778] BTRFS info (device loop2): enabling ssd optimizations [ 37.048183][ T4778] BTRFS info (device loop2): using spread ssd allocation scheme [ 37.049444][ T4778] BTRFS info (device loop2): using free space tree [ 37.062252][ T4778] BTRFS info (device loop2): rebuilding free space tree [ 37.106093][ T4324] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 37.124508][ T4801] netlink: 108 bytes leftover after parsing attributes in process `syz.1.120'. [ 37.331516][ T4827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.337435][ T4827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.475259][ T4844] process 'syz.1.130' launched './file0' with NULL argv: empty string added [ 37.722548][ T4699] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 37.730726][ T4850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.733793][ T4850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.884558][ T4854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.887116][ T4854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.905991][ T4699] usb 1-1: unable to get BOS descriptor or descriptor too short [ 37.907716][ T4699] usb 1-1: not running at top speed; connect to a high speed hub [ 37.909881][ T4699] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 37.911740][ T4699] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 37.915533][ T4699] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.917028][ T4699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.918467][ T4699] usb 1-1: Product: syz [ 37.919142][ T4699] usb 1-1: Manufacturer: syz [ 37.919903][ T4699] usb 1-1: SerialNumber: syz [ 37.926169][ T4843] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 38.330344][ T4843] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 38.415884][ T4869] binder: 4868:4869 tried to acquire reference to desc 0, got 1 instead [ 38.417676][ T4869] binder: 4868:4869 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 38.462042][ T4875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.466948][ T4875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.010072][ T4889] binder: 4888:4889 ioctl c0306201 20000080 returned -14 [ 39.013581][ T4889] binder: 4888:4889 tried to acquire reference to desc 0, got 1 instead [ 39.015567][ T4889] binder: 4888:4889 got transaction with out-of-order buffer fixup [ 39.016892][ T4889] binder: 4889:4888 failed to fixup parent [ 39.017913][ T4889] binder: 4888:4889 transaction async to 4888:0 failed 9/29201/-22, size 120-24 line 3549 [ 39.019693][ T4752] binder: undelivered TRANSACTION_ERROR: 29201 [ 39.136968][ T4699] cdc_ncm 1-1:1.0: bind() failure [ 39.140265][ T4699] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 39.141375][ T4699] cdc_ncm 1-1:1.1: bind() failure [ 39.145396][ T4699] usb 1-1: USB disconnect, device number 4 [ 39.183554][ T4893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.185066][ T4893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.241140][ T4896] random: crng reseeded on system resumption [ 39.249219][ T4896] Restarting kernel threads ... done. [ 39.271426][ T4898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.157'. [ 39.780641][ T4918] device syzkaller1 entered promiscuous mode [ 39.823619][ T4914] loop3: detected capacity change from 0 to 32768 [ 39.832714][ T4914] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.163 (4914) [ 39.836880][ T4914] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 39.838423][ T4914] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 39.839705][ T4914] BTRFS info (device loop3): force clearing of disk cache [ 39.840783][ T4914] BTRFS info (device loop3): metadata ratio 0 [ 39.842323][ T4914] BTRFS info (device loop3): enabling ssd optimizations [ 39.843622][ T4914] BTRFS info (device loop3): using spread ssd allocation scheme [ 39.844987][ T4914] BTRFS info (device loop3): using free space tree [ 39.860386][ T4914] BTRFS info (device loop3): rebuilding free space tree [ 39.887695][ T4325] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 39.919182][ T4938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.925829][ T4938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.952578][ T4752] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 39.970593][ T4333] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 40.142530][ T4752] usb 1-1: Using ep0 maxpacket: 16 [ 40.145647][ T4752] usb 1-1: config 0 has no interfaces? [ 40.148052][ T4752] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 40.149500][ T4752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.150833][ T4752] usb 1-1: Product: syz [ 40.151595][ T4752] usb 1-1: Manufacturer: syz [ 40.152348][ T4752] usb 1-1: SerialNumber: syz [ 40.157642][ T4752] usb 1-1: config 0 descriptor?? [ 40.364456][ T4333] Bluetooth: hci0: Unknown advertising packet type: 0xb213 [ 40.364499][ T4333] Bluetooth: hci0: Malformed LE Event: 0x0d [ 40.366107][ T4939] usb 1-1: USB disconnect, device number 5 [ 40.484390][ T4952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.486257][ T4952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.499460][ T4954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.501098][ T4954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.120886][ T4963] loop0: detected capacity change from 0 to 32768 [ 41.132693][ T4963] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.177 (4963) [ 41.137958][ T4963] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 41.139614][ T4963] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 41.141054][ T4963] BTRFS info (device loop0): force clearing of disk cache [ 41.142268][ T4963] BTRFS info (device loop0): metadata ratio 0 [ 41.149277][ T4963] BTRFS info (device loop0): enabling ssd optimizations [ 41.150706][ T4963] BTRFS info (device loop0): using spread ssd allocation scheme [ 41.152140][ T4963] BTRFS info (device loop0): using free space tree [ 41.185611][ T4963] BTRFS info (device loop0): rebuilding free space tree [ 41.203642][ T4319] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 41.244060][ T4760] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop0 scanned by udevd (4760) [ 41.454568][ T4333] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 41.456124][ T4333] Bluetooth: hci0: Injecting HCI hardware error event [ 41.457768][ T4333] Bluetooth: hci0: hardware error 0x00 [ 41.767922][ T5027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.769821][ T5027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.800828][ T5023] loop2: detected capacity change from 0 to 32768 [ 41.808400][ T5023] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 41.885715][ T4313] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 42.140400][ T5055] binder: 5054:5055 ioctl c0306201 20000080 returned -14 [ 42.143267][ T5055] binder: 5054:5055 got transaction to invalid handle, 1 [ 42.144461][ T5055] binder: 5055:5054 cannot find target node [ 42.145485][ T5055] binder: 5054:5055 transaction async to 0:0 failed 12/29201/-22, size 120-24 line 3054 [ 42.147393][ T4700] binder: undelivered TRANSACTION_ERROR: 29201 [ 42.217977][ T5051] loop3: detected capacity change from 0 to 32768 [ 42.228039][ T5051] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 42.256474][ T5065] binder: 5062:5065 ioctl c0306201 20000080 returned -14 [ 42.261245][ T5065] binder: 5062:5065 tried to acquire reference to desc 0, got 1 instead [ 42.263574][ T5064] loop2: detected capacity change from 0 to 128 [ 42.267203][ T5065] binder: 5062:5065 got transaction with out-of-order buffer fixup [ 42.272875][ T5065] binder: 5062:5065 transaction async to 5062:0 failed 17/29201/-22, size 112-24 line 3461 [ 42.274997][ T4939] binder: undelivered TRANSACTION_ERROR: 29201 [ 42.291582][ T5064] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 42.296237][ T4760] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 42.297372][ T5069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.311684][ T5069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.316680][ T5068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.349209][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 42.436264][ T5079] binder: 5078:5079 ioctl c0306201 20000080 returned -14 [ 42.438617][ T5079] binder: 5078:5079 got transaction to invalid handle, 1 [ 42.439767][ T5079] binder: 5079:5078 cannot find target node [ 42.440893][ T5079] binder: 5078:5079 transaction async to 0:0 failed 21/29201/-22, size 120-24 line 3054 [ 42.477566][ T5083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.479895][ T5083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.492602][ T4328] Bluetooth: hci2: command 0x0409 tx timeout [ 42.572249][ T5088] netlink: 'syz.0.226': attribute type 21 has an invalid length. [ 42.573757][ T5088] netlink: 'syz.0.226': attribute type 15 has an invalid length. [ 42.575023][ T5088] netlink: 128 bytes leftover after parsing attributes in process `syz.0.226'. [ 42.630702][ T5094] loop3: detected capacity change from 0 to 128 [ 42.635044][ T5094] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 42.649758][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 42.771367][ T5103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.773202][ T5103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.839690][ T4322] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 42.841372][ T4322] CPU: 1 PID: 4322 Comm: kworker/u5:2 Not tainted 6.1.148-syzkaller #0 [ 42.842624][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 42.844362][ T4322] Workqueue: hci1 hci_rx_work [ 42.845196][ T4322] Call trace: [ 42.845768][ T4322] dump_backtrace+0x1c8/0x1f4 [ 42.846540][ T4322] show_stack+0x2c/0x3c [ 42.847272][ T4322] __dump_stack+0x30/0x40 [ 42.847992][ T4322] dump_stack_lvl+0xf8/0x160 [ 42.848715][ T4322] dump_stack+0x1c/0x5c [ 42.849361][ T4322] sysfs_create_dir_ns+0x22c/0x24c [ 42.850121][ T4322] kobject_add_internal+0x5a8/0xb30 [ 42.851007][ T4322] kobject_add+0x134/0x1f8 [ 42.851699][ T4322] device_add+0x3f0/0xf94 [ 42.852409][ T4322] hci_conn_add_sysfs+0xbc/0x1cc [ 42.853301][ T4322] le_conn_complete_evt+0xa24/0xf8c [ 42.854187][ T4322] hci_le_conn_complete_evt+0x114/0x3f8 [ 42.855007][ T4322] hci_le_meta_evt+0x2c0/0x4a4 [ 42.855763][ T4322] hci_event_packet+0x6ac/0xf08 [ 42.856556][ T4322] hci_rx_work+0x324/0xaa0 [ 42.857274][ T4322] process_one_work+0x7f4/0x13a8 [ 42.858110][ T4322] worker_thread+0x8c8/0xfbc [ 42.858857][ T4322] kthread+0x250/0x2d8 [ 42.859473][ T4322] ret_from_fork+0x10/0x20 [ 42.860367][ T4322] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 42.862315][ T4322] Bluetooth: hci1: failed to register connection device [ 42.999564][ T5112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.001068][ T5112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.297719][ T5114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.299244][ T5114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.559338][ T5128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.560841][ T5128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.612634][ T4333] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 43.821995][ T5134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.824434][ T5134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.828311][ T5134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.830442][ T5134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.832218][ T4333] Bluetooth: hci4: Unknown advertising packet type: 0x1800 [ 43.832240][ T4333] Bluetooth: hci4: Malformed LE Event: 0x0d [ 44.013411][ T4333] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 44.015286][ T4333] Bluetooth: hci4: Injecting HCI hardware error event [ 44.017858][ T4322] Bluetooth: hci4: hardware error 0x00 [ 44.095945][ T5138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.098629][ T5138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.134701][ T5141] serio: Serial port ptm0 [ 44.206149][ T5144] binder: 5143:5144 ioctl c0306201 20000080 returned -14 [ 44.207945][ T5144] binder: tried to use weak ref as strong ref [ 44.208831][ T5144] binder: 5143:5144 Acquire 1 refcount change on invalid ref 0 ret -22 [ 44.210319][ T5144] binder: 5143:5144 got transaction to invalid handle, 1 [ 44.211503][ T5144] binder_debug: 1 callbacks suppressed [ 44.211512][ T5144] binder: 5144:5143 cannot find target node [ 44.213491][ T5144] binder: 5143:5144 transaction async to 0:0 failed 24/29201/-22, size 112-24 line 3054 [ 44.215341][ T1964] binder: undelivered TRANSACTION_ERROR: 29201 [ 44.232963][ T5146] loop0: detected capacity change from 0 to 128 [ 44.240700][ T5146] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 44.269212][ T4319] EXT4-fs (loop0): unmounting filesystem. [ 44.377604][ T5163] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.258' sets config #-1 [ 44.401440][ T4328] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 44.488019][ T5177] netlink: 703 bytes leftover after parsing attributes in process `syz.3.264'. [ 44.509179][ T5183] loop3: detected capacity change from 0 to 128 [ 44.517346][ T5183] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 44.536272][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 44.549412][ T5186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.551571][ T5186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.557268][ T5186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.559506][ T5186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.628871][ T5188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.630489][ T5188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.102413][ T5192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.105671][ T5192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.157823][ T5194] device syzkaller1 entered promiscuous mode [ 45.432050][ T5206] loop2: detected capacity change from 0 to 128 [ 45.436029][ T5206] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.450207][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 45.497962][ T5211] Bluetooth: hci5: Frame reassembly failed (-84) [ 45.626396][ T5213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.627876][ T5213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.642527][ T4696] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 45.760604][ T5215] autofs4:pid:5215:autofs_fill_super: called with bogus options [ 45.763138][ T5215] autofs4:pid:5215:autofs_fill_super: called with bogus options [ 45.780779][ T5217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.782310][ T5217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.824599][ T4696] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.826030][ T4696] usb 1-1: config 0 has no interfaces? [ 45.826929][ T4696] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 45.828417][ T4696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.830713][ T4696] usb 1-1: config 0 descriptor?? [ 46.045916][ T4696] usb 1-1: USB disconnect, device number 6 [ 46.172623][ T4322] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 46.342532][ T4322] Bluetooth: hci1: command 0x0406 tx timeout [ 46.400899][ T5227] binder: 5226:5227 ioctl c0306201 20000080 returned -14 [ 46.405970][ T5227] binder: tried to use weak ref as strong ref [ 46.406954][ T5227] binder: 5226:5227 Acquire 1 refcount change on invalid ref 0 ret -22 [ 46.408343][ T5227] binder: 5226:5227 got transaction to invalid handle, 1 [ 46.409399][ T5227] binder: 5227:5226 cannot find target node [ 46.410300][ T5227] binder: 5226:5227 transaction async to 0:0 failed 27/29201/-22, size 112-24 line 3054 [ 46.412285][ T4696] binder: undelivered TRANSACTION_ERROR: 29201 [ 46.484244][ T5231] loop1: detected capacity change from 0 to 128 [ 46.491223][ T5231] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 46.514490][ T4323] EXT4-fs (loop1): unmounting filesystem. [ 46.601194][ T5240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.602977][ T5240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.852527][ T4752] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 46.973427][ T4333] ------------[ cut here ]------------ [ 46.974420][ T4333] WARNING: CPU: 0 PID: 4333 at net/bluetooth/hci_conn.c:667 hci_conn_timeout+0x1fc/0x424 [ 46.975923][ T4333] Modules linked in: [ 46.976555][ T4333] CPU: 0 PID: 4333 Comm: kworker/u5:5 Not tainted 6.1.148-syzkaller #0 [ 46.977915][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 46.979618][ T4333] Workqueue: hci1 hci_conn_timeout [ 46.980465][ T4333] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 46.981664][ T4333] pc : hci_conn_timeout+0x1fc/0x424 [ 46.982532][ T4333] lr : hci_conn_timeout+0x1fc/0x424 [ 46.983406][ T4333] sp : ffff800020dc7b30 [ 46.984095][ T4333] x29: ffff800020dc7b30 x28: ffff0000d6458400 x27: ffff0000d2e96330 [ 46.985460][ T4333] x26: ffff0000c0885a18 x25: 1fffe00018110b43 x24: dfff800000000000 [ 46.986772][ T4333] x23: ffff0000c4b16000 x22: dfff800000000000 x21: 00000000ffffffff [ 46.988027][ T4333] x20: ffff0000d2e96000 x19: ffff0000d2e96330 x18: ffff800011aabce0 [ 46.989261][ T4333] x17: ffff8000181e7000 x16: ffff800008042c60 x15: ffff800017cc7fc0 [ 46.990524][ T4333] x14: ffff0000d521ddd8 x13: 0000000000000000 x12: 0000000000ff0100 [ 46.991784][ T4333] x11: ff00800010b527e0 x10: 0000000000000000 x9 : ffff800010b527e0 [ 46.993165][ T4333] x8 : ffff0000d521d340 x7 : 0000000000000000 x6 : 0000000000000000 [ 46.994535][ T4333] x5 : ffff800018207b80 x4 : 0000000000000008 x3 : ffff800010b5261c [ 46.995907][ T4333] x2 : 0000000000000000 x1 : 00000000ffffffff x0 : 0000000000000000 [ 46.997167][ T4333] Call trace: [ 46.997720][ T4333] hci_conn_timeout+0x1fc/0x424 [ 46.998532][ T4333] process_one_work+0x7f4/0x13a8 [ 46.999308][ T4333] worker_thread+0x8c8/0xfbc [ 47.000033][ T4333] kthread+0x250/0x2d8 [ 47.000721][ T4333] ret_from_fork+0x10/0x20 [ 47.001463][ T4333] irq event stamp: 4498 [ 47.002122][ T4333] hardirqs last enabled at (4497): [] _raw_spin_unlock_irq+0x3c/0x90 [ 47.003758][ T4333] hardirqs last disabled at (4498): [] el1_dbg+0x24/0x80 [ 47.005207][ T4333] softirqs last enabled at (3704): [] handle_softirqs+0xaf8/0xc6c [ 47.006818][ T4333] softirqs last disabled at (3549): [] __do_softirq+0x14/0x20 [ 47.008247][ T4333] ---[ end trace 0000000000000000 ]--- [ 47.042528][ T4752] usb 1-1: Using ep0 maxpacket: 32 [ 47.048227][ T4752] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 47.049630][ T4752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.050849][ T4752] usb 1-1: Product: syz [ 47.051608][ T4752] usb 1-1: Manufacturer: syz [ 47.052364][ T4752] usb 1-1: SerialNumber: syz [ 47.057139][ T4752] usb 1-1: config 0 descriptor?? [ 47.532530][ T4328] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 47.532542][ T4333] Bluetooth: hci5: command 0x1003 tx timeout [ 47.663062][ T4752] peak_usb 1-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 47.664647][ T4752] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 47.665784][ T4752] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 47.712820][ T4752] peak_usb: probe of 1-1:0.0 failed with error -22 [ 47.868258][ T4752] usb 1-1: USB disconnect, device number 7