last executing test programs: 34.031916249s ago: executing program 4 (id=41): kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x41000000}], 0x3e0000) iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128) r2 = syz_clone(0x2200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000080)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") getpgrp(r2) r3 = getpid() ioprio_get$pid(0x2, r3) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) 32.600849453s ago: executing program 4 (id=46): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) fsmount(r3, 0x0, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x14}}, 0x84) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0xf0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x33, 0x1, 0x70bd2b, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x5, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) sendmsg$nl_generic(r5, 0x0, 0x4002000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) 31.483039952s ago: executing program 4 (id=51): syz_open_dev$vim2m(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 30.961547333s ago: executing program 4 (id=54): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f", 0x19}], 0x1, 0x0, 0x0, 0x1f000801}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000041000900000000000008000005000000080002"], 0x1c}}, 0x0) 30.763578519s ago: executing program 4 (id=57): kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x41000000}], 0x3e0000) iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128) r2 = syz_clone(0x2200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000080)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") getpgrp(r2) getpid() connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) 28.547687966s ago: executing program 4 (id=67): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140e00000010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 13.336293988s ago: executing program 32 (id=67): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140e00000010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 9.431999298s ago: executing program 1 (id=127): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESOCT=r2]) chdir(&(0x7f0000000940)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x689c2, 0x0) 8.498369413s ago: executing program 1 (id=128): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f00000000c0)={@desc={0x1, 0x0, @desc4}}) 8.28500326s ago: executing program 0 (id=130): prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v2={0x2, @aes128, 0x8, '\x00', @d}) 7.427944198s ago: executing program 1 (id=135): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x400, &(0x7f0000004400)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,uid=forget,noadinicb,shortad,iocharset=ascii,lastblock=00000000000000000009,iocharset=cp950,fileset=00000000000000000001,undelete,anchor=00000000000000000006,partition=00000000000000000008,anchor=00000000000008421375,session=00000000000000000001,anchor=00000000000000000005,gid=', @ANYBLOB="75055fa0bb78709df59d7e7766b9a5c03e20840509c7c9ca82b9c6ce9c1d161d", @ANYBLOB="2c66fefb470f725c", @ANYRES8, @ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b66736465663d233f9d1abf59c53229ddd780b162f44a0e44f3436d598025e596d23078a3e733e07b480ad2f41c3ccd7956530c3be5c0d1833ad4954140d857bb924e0f613fe32a0c1461263f77581d8ed8b341959c53a341493644534a4b27223d1faac6bf7df530d100a57452b6a3abc826bb0f0b82809ca1e13376959935f589115abe267b25f42757304b4d6c7ffaec13f3079a4658933152fe693cc762ce82776b4003c4ac3d9d3478da3da1f79ad788d3b25f59422ba668e32c00"], 0x9, 0xc1e, &(0x7f0000001240)="$eJzs3U9sHNd9B/DfG5HiUmkrJnYUu42LTVukMmO5+hdTsQp3VdNsA8gyEYq5BeCKpNSFKZIgqUY20oLppYceAhRFDzkRaI0CKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAOQUsZvatuKRIixFFibI+H5v67s6+N/PevPWMLOjNCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg4vdfu3T6THrUrQAAHqYrY185fdb9HwCeKFf9/z8AAAAAAAAAAAAAABx2KYp4KlLMX1lPE9X7ttrlVu+t2+PDIztX609VzSNV+fKndubsufNffGnoQicvt2Y/ov6D9my8MXb1Uv3VuZvzC9OLi9NT9fHZ1uTc1PSe97Df+tsNViegfvPNW1PXry/Wz754bsvHtwc+7PvEiYGLQ8+feq5Tdnx4ZGRss0jtvo+9g91meByNIk5Fihe++5PUjIgi9n8uag937LfrrzoxWHVifHik6shMqzm7VH442jkRRUS9q1Kjc452Hovo6X2ofdhdI2K5bH7Z4MGye2PzzYXmtZnp+mhzYam11JqbHU3t1pb9qUcRF1LESkSs9d29u94ooidSfPv4eroWEUc65+EL1cTg3dtRHGAf96BsZ703YqV4DMbsEOuLIl6PFD9972RMlucs/8TnI14v8/sR75T5SkQqvxjnIz7Y4XvE46kniviLcvwvrqep6nrQua5c/mr9y7PX57rKdq4rv+D94a4rxSO6P/Rvy4fjkF+balFEs7rir6f7/80OAAAAAAAAAAAAAAAAAA9afxTxbKR47d//uJpXHNW89OMXh/5g4Je754w/c4/9lGVfjIjlYm9zco/miYGjaTSlRzyX+ElWiyL+JM//++ajbgwAAAAAAAAAAAAAAAAAAMATrYgfR4qX3z+ZVqJ7TfHW7I361ea1mfaqsJ21fztrpm9sbGzUUzsbOSdyLudcybmacy1nFLl+zkbOiZzLOVdyruZcyxlHcv2cjZwTOZdzruRczbmWM3py/ZyNnBM5l3Ou5FzNuZYzDsnavQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHydFFPHzSPGtr6+nSBHRiJiIdq72PerWAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAClvlTE9yJF/Q8bd7b1RESq/m07Wf5yPhpHy/xUNIbKfCUal3I2q+xpfPMRtJ/96U1F/ChS9NXevTPgefx72+/ufA3inW9svvvVnnYe6Xw48GHfJ04cvzg08uvP7PY67dSAwcut2Vu36+PDIyNjXZt78tE/1bVtIB+3eDBdJyIW33r7zebMzPTC/b8ovwL7qO6FF4f1RfQcimY8mr7zBCjv/x9Eit95/z86N/zO/f+X2u/u3OHjZ3+6ef9/efuO9nj/79le7x73/6e6tr2cfzfS2xNRW7o533siorb41tunWjebN6ZvTM+eP336S0NDXzp3uvdoRO16a2a669UDOV0AAAAAAAAAAAAAAAAAD08q4vciRfNH66keEber+VoDF4eeP/XckThSzbfaMm/7jbGrl+qvzt2cX5heXJyeqo/Ptibnpqb3erhaNd1rfHjkQDpzT/0H3P7+2qtz828ttG780dKOnx+rXbq2uLTQnNz54+iPIqLRvWWwavD48EjV6JlWc7aqOrrjZPpfXG8q4j8jxeT5evpc3pbn/22f4b9l/v/y9h0d0Pz/T3ZtK4+ZUhE/ixS//ZfPxOeqdh6Lu85ZLve3kWLwwmdzuThaluu0of1cgfbMwLLs/0aKf/z51rKd+ZBPbZY9s+cT+5gox/94pPjen38nfiNv2/r8h53H/9j2HR3Q+D/dte3YlucV7Lvr5PE/FSleeerd+M287aOe/9F59sbJXPjO8zkOaPw/3bVtIB/3tx5M1wEAAAAAAAAAAB5rvamIv4sUPxjpSS/lbXv5+39T23d0QH//6zNd26YezHpF93yx75MKAAAAAIdEbyrix5HixtK7d+ZQb53/3TX/83c3538Op22fVn/O9yvVcwMe5J//dRvIx53Yf7cBAAAAAAAAAAAAAAAAAADgUEmpiJfyeuoT1Xz+qV3XU1+NFK/99wu5XDpRluusAz9Q/Vq7Mjd76tLMzNxkc6l5bWa6PjbfnJwu6z4dKdb/5rO5blGtr95Zb769xvvmWuwLkWLk7ztl22uxd9Ymf3qz7Jmy7CcjxX/9w9aynXWsP71Z9mxZ9q8jxdf+eeeyJzbLnivLfidS/PBr9U7ZY2XZzvNRP7NZ9sXJueIARgUAAAAAAAAAAAAAAAAAAIAnTW8q4s8ixf/cXLkzlz+v/9/b9bbyzje61vvf5na1zv9Atf7/bq/vZ/3/6rkCy7sdFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPp5SFPF2pJi/sp5W+8r3bbXLrdlbt8eHR3au1p+qmkeq8uVP7czZc+e/+NLQhU5+dP0H7dl4Y+zqpfqrczfnF6YXF6en6uOzrcm5qek972G/9bcbrE5A/eabt6auX1+sn33x3JaPbw982PeJEwMXh54/9Vyn7PjwyMhYV5me3vs++l3SLtuPRhF/FSle+O5P0g/6IorY/7m4x3fnoPVXnRisOjE+PFJ1ZKbVnF0qPxztnIgiot5VqdE5Rw9hLPalEbFcNr9s8GDZvbH55kLz2sx0fbS5sNRaas3NjqZ2a8v+1KOICyliJSLW+u7eXW8U8Wak+Pbx9fQvfRFHOufhC1fGvnL67O7tKA6wj3tQtrPeG7FSPAZjdoj1RRH/FCl++t7J+Ne+iJ5o/8TnI14v8/sR70R7vFP5xTgf8cEO3yMeTz1RxP+V439xPb3XV14POteVy1+tf3n2+lxX2c515bG/PzxMh/zaVIsiflhd8dfTv/nvGgAAAAAAAAAAAAAAAOAQKeLXIsXL759M1fzgO3OKW7M36leb12ba0/o6c/86c6Y3NjY26qmdjZwTOZdzruRczbmWM4pcP2ejzNrGxkR+v5xzJedqzrWccSTXz9nIOZFzOedKztWcazmjJ9fP2cg5kXM550rO1ZxrOeOQzN0DAAAAAAAAAAAAAAAAAAA+XorqnxTf+vp62uhrry89Ee1ctR7ox97/BwAA///bhfta") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x44000, 0x8) fchown(r0, 0x0, 0xffffffffffffffff) 7.185384897s ago: executing program 0 (id=137): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESOCT=r2]) chdir(&(0x7f0000000940)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x689c2, 0x0) 6.005112811s ago: executing program 2 (id=140): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000240)={0x3, 0x2, 0x81, 0x3, 0x3}) 5.935746457s ago: executing program 1 (id=141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r2, 0xb, 0x0, @val=@netfilter={0x0, 0x1, 0x5, 0x1}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 5.932302197s ago: executing program 0 (id=142): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000280)=""/244, 0xf4}, {&(0x7f0000000b00)=""/4107, 0x100b}, {&(0x7f00000007c0)=""/224, 0xe0}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000700)=""/162, 0xa2}, {&(0x7f0000000600)=""/79, 0x4f}], 0x7}, 0x1}], 0x1, 0x0, 0x0) 5.435758487s ago: executing program 2 (id=143): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0x216, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x14) 4.996303812s ago: executing program 0 (id=144): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x3000000, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0xd, 0x6f5, &(0x7f0000001f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) ftruncate(r0, 0x84) 4.968209123s ago: executing program 1 (id=146): openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) socket$netlink(0x10, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000004000000080000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x7e, '\x00', 0x0, @fallback=0x36}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f00)={'wlan0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x16, "000002000000372a7200"/22}}) openat(0xffffffffffffff9c, 0x0, 0x81c2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400003900120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de", 0x40}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x1, 0x1}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000004680)=ANY=[@ANYBLOB="6b04bf6a83d600000000000086dd6080983000080000000000000000000000fc0100"/45], 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file2\x00', 0x8c80, &(0x7f0000000440)={[{@fmask={'fmask', 0x3d, 0x1}}, {@umask={'umask', 0x3d, 0x80000002}}, {@utf8}, {@keep_last_dots}, {@umask={'umask', 0x3d, 0x7}}, {@errors_continue}, {@discard}, {}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}]}, 0x3, 0x1510, &(0x7f0000000540)="$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") 3.549025437s ago: executing program 2 (id=147): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) chdir(0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0xc8000, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000001c0)={@loopback, @rand_addr=0x64010102, @loopback}, 0xc) getdents(r4, 0x0, 0x0) open(0x0, 0x14927e, 0x0) 3.477987752s ago: executing program 0 (id=148): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$inet(0x2, 0x3, 0x3) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, 0x0) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x1, &(0x7f0000000200)=0x8, 0x4) sendto$inet6(r6, &(0x7f00000000c0), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000001) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x8, 0xfffffff7, 0x238d117e660ceb5b, 0x401, 0x6, 0xe12, 0x2c0, 0x0, 0x0, 0x0, 0x27}}, 0x50) close_range(r5, 0xffffffffffffffff, 0x0) 3.393910789s ago: executing program 1 (id=149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0x1, 0x676, &(0x7f0000001340)="$eJzs3c1vHGcdB/DvbDZ2Ni3BTZM2oEq1GgkQEYlf5IK5EBBCPkSoKgfOVuI0VjZpsV3kVog6vF576B9QDr4gTkjcIxUOXODWG/KxEhKXXjCnRTs7u16vX7JuG3vTfj7R7PM888zzzG9+szP7YkUb4Atr4UrqD1Nk4cqN9XZ7a3O2ubU5e69bTzKeZCOpJ6klKf7barU+SK4nRW+aYqDc473l+Vc//Hjro06rXi3l9rXDxg2ottsYWL3RXTeZ5FRVfgq75rv5qecrepFfT3K5KuHEnU7S2uVnf3+619Onsd/oM8cSI/B4FZ3XzT0mkrPVhd5+H9B95a0db3TDGx9yu8F3EAAAAPCkGeYz8Je3s5314twxhAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfCxs7v/9fVEutW59M0f39/7FqXar6aHnxaJs/fFxxAAAAAAAAAMAxenE721nPuW67VZR/83+pbFwoH5/Km1nNUlZyNetZzFrWspLpJBN9E42tL66trUwPMXKmf+TpJOXImUcEOl6Vjc/s0AEAAAAAAADg8+RXWdj5+z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyCIjnVKVI86Kwaa9cnUqsnOVO1s5H8s1t/kj086QAAAADgGIwn21nPuW67VeRCkufK7wDO5M3cz1qWs5ZmlnKr/F6g86m/trU529zanL3XXvbO+/3/HCmMcsZ0vnvYf8+Xyi0auZ3lcs3V3MzraeZWauXItktVPN1ZB+J60I6p+F5lyMhuVWX7yN+tyj3eOdLBHuSIX6ZMlBk53cvIVBVbOxvPdM/M/mfoiGdncE/TqfWCvTCwp7HdB/OJcn62KtvH87uDcn4iBjMx0/fse+7wnCdf/8uffjpV1UfnkIZzqipb5WNjbyZm+zLx/DCZuNO8f/fO7dUrT1om9pgqM3Gx117Ij/KTXMlkXslKlvPzLGYtS5nMD8vaYnXyi75L/oBMXd/VeuVRkYxVz9DOyTpaTC+VY89lOT/O67mVpbxc/pvJdL6ducxlvu8MXzz8DJdXfe2Aq771pX2Dv/yNqtJI8vuqHA3tvD7Tl9f+e+5E2de/ZidL54fI0hHvjfWvVpX2Pn5dlaNhMBPTfZl49vBM/KG8raw2799dubP4xnC7O/9uVWlfR79NJkfnRtJ+vpxvn6yytfvZ0e57dt++6bLvQq+vtqfvYq+vc6VuHHiljlXv4fbONFP2Pb9v32zZd6mvb7/3WwCMvLPfPDvW+HfjH433G79p3GncOPOD8e+MvzCW0389/d361Kmv1V4o/pz388udz/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAnt/rW23cXm82llYFKq9V6Z2fNjSR7tzm8Uq/2cLRRn0Ulk/96qr3nfbq6P2d2jPF85enk+I59VCv/a7Va1ZrigG3++LeRSVSrMhKpO6HKyd2TgONxbe3eG9dW33r7W8v3Fl9bem3p/vzc3PzU/NzLs9duLzeXpjqPJx0l8DjsvOifdCQAAAAAAAAAAADAsI7jvxOc9DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT7aFK6k/TJHpqatT7fbW5myzvXTrO1vWk9SSFL9Iig+S6+ksmeibrjhoP+8tz7/64cdbH+3MVe9uXzts3KGT9mxUSyaTnOqUDx45asj5blbloYrDoix6B9FO2OVu4uCk/T8AAP//lLMFHg==") creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r2, &(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mount(&(0x7f00000001c0)=@rnullb, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='binfmt_misc\x00', 0xa51061, &(0x7f0000000440)='hfsplus\x00') symlink(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./file6\x00') 3.311989156s ago: executing program 3 (id=150): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0xe}, 0x1c, &(0x7f0000002880)=[{&(0x7f0000001780)="9c435a7de4c0ff7c4563", 0xa}], 0x1}}], 0x1, 0x4001c00) 3.144372149s ago: executing program 3 (id=151): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESOCT=r2]) chdir(&(0x7f0000000940)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x689c2, 0x0) 3.065133176s ago: executing program 3 (id=152): ioperm(0x0, 0x2, 0x2) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES32, @ANYRESHEX, @ANYRES16, @ANYBLOB="77f70548a55bdd3bd8d3a236fa05308456714ac378c5541001648422b60d722f7664d44e4c1f68ca2d97f06448e733600b94f21fe39018f32e470771bd94eefb5c8c6fc001871ed145f00fd653fc86240659d4eaaba452e10d55888f0ef53c81cb61055a79440ef9388cbd9bbf3d53499421848f74bdb491d0dab14875f11075087d684cabcc753e124688f9fed8e56a", @ANYRES64], 0x1, 0x608, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x103, 0x1}, 0x20) 2.345507713s ago: executing program 0 (id=153): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000280), 0xff, 0x4a1, &(0x7f0000000b00)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x48913713, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x103500, 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000006880)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) 1.414564457s ago: executing program 3 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x48010, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 1.413733467s ago: executing program 2 (id=155): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000280)=""/244, 0xf4}, {&(0x7f0000000b00)=""/4107, 0x100b}, {&(0x7f00000007c0)=""/224, 0xe0}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000700)=""/162, 0xa2}, {&(0x7f0000000600)=""/79, 0x4f}], 0x7}, 0x1}], 0x1, 0x0, 0x0) 999.87533ms ago: executing program 2 (id=156): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000104", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0x216, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x14) 209.753243ms ago: executing program 3 (id=157): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x10) 87.563633ms ago: executing program 2 (id=158): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 0s ago: executing program 3 (id=159): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.95' (ED25519) to the list of known hosts. [ 60.280114][ T4172] cgroup: Unknown subsys name 'net' [ 60.424817][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.901003][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.662509][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 63.813073][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.820932][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.829671][ T4190] device bridge_slave_0 entered promiscuous mode [ 63.841294][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.848444][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.856364][ T4190] device bridge_slave_1 entered promiscuous mode [ 63.892296][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 63.953568][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.964708][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 64.000017][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.041174][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 64.076638][ T4190] team0: Port device team_slave_0 added [ 64.118444][ T4190] team0: Port device team_slave_1 added [ 64.152301][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 64.168810][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.175892][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.184563][ T4191] device bridge_slave_0 entered promiscuous mode [ 64.208786][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.215855][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.241867][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.254041][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.261332][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.269556][ T4185] device bridge_slave_0 entered promiscuous mode [ 64.277030][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.284436][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.293102][ T4191] device bridge_slave_1 entered promiscuous mode [ 64.307826][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.314788][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.341015][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.352501][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.359889][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.368138][ T4185] device bridge_slave_1 entered promiscuous mode [ 64.451757][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.461144][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.468380][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.476189][ T4183] device bridge_slave_0 entered promiscuous mode [ 64.494951][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.505942][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.515337][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.522781][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.530805][ T4183] device bridge_slave_1 entered promiscuous mode [ 64.548463][ T4190] device hsr_slave_0 entered promiscuous mode [ 64.555300][ T4190] device hsr_slave_1 entered promiscuous mode [ 64.564465][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.603913][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.611112][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.619440][ T4184] device bridge_slave_0 entered promiscuous mode [ 64.648595][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.660755][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.678955][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.686068][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.694106][ T4184] device bridge_slave_1 entered promiscuous mode [ 64.711948][ T4185] team0: Port device team_slave_0 added [ 64.720037][ T4191] team0: Port device team_slave_0 added [ 64.726905][ T4185] team0: Port device team_slave_1 added [ 64.772328][ T4191] team0: Port device team_slave_1 added [ 64.788023][ T4183] team0: Port device team_slave_0 added [ 64.831653][ T4183] team0: Port device team_slave_1 added [ 64.839734][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.850944][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.858051][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.884261][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.899075][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.906041][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.932790][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.944998][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.952664][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.978950][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.999405][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.023793][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.031111][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.057244][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.080585][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.087657][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.113670][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.126190][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.133394][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.159904][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.187134][ T4184] team0: Port device team_slave_0 added [ 65.196551][ T4184] team0: Port device team_slave_1 added [ 65.252255][ T4185] device hsr_slave_0 entered promiscuous mode [ 65.259208][ T4185] device hsr_slave_1 entered promiscuous mode [ 65.265748][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.273781][ T4185] Cannot create hsr debugfs directory [ 65.293533][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.300558][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.327477][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.359405][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.366383][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.393541][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 65.394656][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.424392][ T4191] device hsr_slave_0 entered promiscuous mode [ 65.431343][ T4191] device hsr_slave_1 entered promiscuous mode [ 65.438314][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.445898][ T4191] Cannot create hsr debugfs directory [ 65.454520][ T4183] device hsr_slave_0 entered promiscuous mode [ 65.461531][ T4183] device hsr_slave_1 entered promiscuous mode [ 65.467652][ T4174] Bluetooth: hci4: command 0x0409 tx timeout [ 65.467724][ T4174] Bluetooth: hci0: command 0x0409 tx timeout [ 65.480078][ T4197] Bluetooth: hci3: command 0x0409 tx timeout [ 65.486094][ T4197] Bluetooth: hci2: command 0x0409 tx timeout [ 65.493254][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.501061][ T4183] Cannot create hsr debugfs directory [ 65.587750][ T4184] device hsr_slave_0 entered promiscuous mode [ 65.594428][ T4184] device hsr_slave_1 entered promiscuous mode [ 65.601720][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.609409][ T4184] Cannot create hsr debugfs directory [ 65.848358][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.875183][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.891174][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.906874][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.932821][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.969398][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.979317][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.988434][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.024439][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.039783][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.065647][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.091381][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.160325][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.177345][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.196322][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.205664][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.214886][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.236079][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.257280][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.276302][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.286146][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.318372][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.328592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.341257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.352540][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.359974][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.376533][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.386399][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.395785][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.411589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.422385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.431119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.439406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.448886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.457266][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.464380][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.492603][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.508813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.522056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.531426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.542079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.551367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.561030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.569863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.579278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.587734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.596520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.605445][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.612591][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.621043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.629879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.638836][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.645919][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.655067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.663285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.684660][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.695243][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.704842][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.728237][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.743960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.778248][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.787848][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.796328][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.806224][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.822158][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.842981][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.861462][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.886339][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.896046][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.911972][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.924035][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.933063][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.970063][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.993482][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.054036][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.065158][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.083090][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.091599][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.100781][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.109681][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.121514][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.131187][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.144095][ T3077] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.151256][ T3077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.164154][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.191647][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.205505][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.215784][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.230899][ T3077] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.238045][ T3077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.245942][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.255757][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.263640][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.271416][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.280478][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.303739][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.312248][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.321291][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.330731][ T3077] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.337848][ T3077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.345841][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.355271][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.364125][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.372694][ T3077] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.379898][ T3077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.388655][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.397764][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.406683][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.415131][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.428296][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.444981][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.457031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.467035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.475946][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 67.485187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.493228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.508700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.519444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.528217][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.535317][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.543452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.547776][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 67.554945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.564542][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 67.566217][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.572139][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 67.578725][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.603965][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.612788][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 67.622193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.632644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.643963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.659867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.671046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.680356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.689869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.698595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.716124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.739648][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.754685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.765823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.780942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.794040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.805583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.814388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.823101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.831856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.840553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.853126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.865254][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.892151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.905007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.914901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.925629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.935369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.944875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.955395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.964513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.974639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.982866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.990844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.005505][ T4185] device veth0_vlan entered promiscuous mode [ 68.034812][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.048671][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.080421][ T4185] device veth1_vlan entered promiscuous mode [ 68.091749][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.116382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.125393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.148825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.181261][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.191386][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.219718][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.231470][ T4190] device veth0_vlan entered promiscuous mode [ 68.258719][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.271435][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.306394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.328634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.351435][ T4190] device veth1_vlan entered promiscuous mode [ 68.361452][ T4185] device veth0_macvtap entered promiscuous mode [ 68.376143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.385395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.394983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.402775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.431485][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.442799][ T4185] device veth1_macvtap entered promiscuous mode [ 68.456514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.466852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.475766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.486420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.507149][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.555643][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.569088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.576609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.584209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.594260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.603257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.612021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.621383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.630418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.661405][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.671937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.680390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.689245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.699584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.710015][ T4183] device veth0_vlan entered promiscuous mode [ 68.717620][ T4190] device veth0_macvtap entered promiscuous mode [ 68.732606][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.741654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.751909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.760715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.769616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.778389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.794988][ T4190] device veth1_macvtap entered promiscuous mode [ 68.805161][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.814989][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.824091][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.833294][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.847059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.859171][ T4183] device veth1_vlan entered promiscuous mode [ 68.877934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.886416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.900655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.909775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.925194][ T4191] device veth0_vlan entered promiscuous mode [ 68.935793][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.947085][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.958871][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.994789][ T4183] device veth0_macvtap entered promiscuous mode [ 69.004687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.014652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.024089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.033473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.042443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.051388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.062410][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.076019][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.087183][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.100195][ T4191] device veth1_vlan entered promiscuous mode [ 69.116112][ T4183] device veth1_macvtap entered promiscuous mode [ 69.132106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.141803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.150515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.159629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.170115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.213728][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.230070][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.240265][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.249611][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.273512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.282029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.290826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.300915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.309532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.320177][ T4184] device veth0_vlan entered promiscuous mode [ 69.351361][ T4191] device veth0_macvtap entered promiscuous mode [ 69.373954][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.385214][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.395809][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.406753][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.418408][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.426132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.435764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.444549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.453499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.471481][ T4191] device veth1_macvtap entered promiscuous mode [ 69.480528][ T4184] device veth1_vlan entered promiscuous mode [ 69.501267][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.512290][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.522614][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.533365][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.545207][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.553333][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 69.557088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.568269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.576336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.584515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.593298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.619404][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.631065][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 69.638152][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 69.644367][ T1108] Bluetooth: hci3: command 0x040f tx timeout [ 69.653561][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.653680][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 69.672532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.683546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.698082][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.710197][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.720541][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.731279][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.741169][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.751961][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.763515][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.780348][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.796049][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.804956][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.813931][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.835853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.844809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.855109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.864012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.875906][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.890438][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.900573][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.911318][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.921445][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.932771][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.944543][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.962971][ T4184] device veth0_macvtap entered promiscuous mode [ 69.988364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.996514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.006385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.020825][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.031680][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.041900][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.053564][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.080976][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.093467][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.094596][ T4184] device veth1_macvtap entered promiscuous mode [ 70.129043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.145360][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.157294][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.169378][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.180189][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.191753][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.203767][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.213928][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.224679][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.236126][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.290189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.299637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.318103][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.336578][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.347112][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.358872][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.370336][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.381636][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.391799][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.402570][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.414185][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.426467][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.441507][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.450593][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.460182][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.478219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.492918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.512189][ T3077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.534713][ T3077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.583279][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.623054][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.644017][ T3077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.659823][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.687708][ T3077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.704833][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.715403][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.732335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.746468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.756621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.799745][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.808197][ T4301] netlink: 'syz.0.6': attribute type 10 has an invalid length. [ 70.824941][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.828458][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.840444][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.919013][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.926441][ T4301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.934165][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.941307][ T4301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.975048][ T4301] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 71.016753][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 71.031531][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.071683][ T4303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 71.080583][ T4303] device bridge_slave_1 left promiscuous mode [ 71.086939][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.104001][ T4303] device bridge_slave_0 left promiscuous mode [ 71.110412][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.167691][ T4303] bond0: (slave bridge0): Releasing backup interface [ 71.249001][ T1487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.264032][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.265442][ T1487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.276376][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.293742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.309901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.321220][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.327973][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.355182][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.415428][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.438639][ T4308] tipc: Started in network mode [ 71.444452][ T4308] tipc: Node identity 72d15e751af, cluster identity 4711 [ 71.472892][ T4308] tipc: Enabled bearer , priority 0 [ 71.481539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.498358][ T4308] device syzkaller0 entered promiscuous mode [ 71.519032][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 71.541149][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.562256][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.573201][ T4310] device bridge_slave_0 left promiscuous mode [ 71.581382][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.592783][ T4310] device bridge_slave_1 left promiscuous mode [ 71.602202][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.615373][ T4310] bond0: (slave bond_slave_0): Releasing backup interface [ 71.632656][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 71.642527][ T4310] bond0: (slave bond_slave_1): Releasing backup interface [ 71.681952][ T4310] team0: Port device team_slave_0 removed [ 71.710649][ T4310] team0: Port device team_slave_1 removed [ 71.717241][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.725096][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 71.731396][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 71.737638][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 71.743843][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.751763][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 71.762074][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.769772][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.785578][ T4311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 71.895755][ T4314] tipc: Resetting bearer [ 71.934276][ T4307] tipc: Resetting bearer [ 71.981504][ T4307] tipc: Disabling bearer [ 72.014892][ T4321] QAT: Invalid ioctl 21531 [ 72.275913][ T4330] Zero length message leads to an empty skb [ 72.280381][ T4325] loop3: detected capacity change from 0 to 4096 [ 72.317810][ T4325] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 72.682147][ T4337] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14'. [ 72.768992][ T4341] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.969228][ T4348] loop2: detected capacity change from 0 to 1024 [ 73.098731][ T4348] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,norecovery,nolazytime,abort,jqfmt=vfsold,lazytime,noload,bsddf,noauto_da_alloc,,errors=continue. Quota mode: none. [ 73.133303][ T4348] EXT4-fs (loop2): shut down requested (0) [ 73.148332][ T4357] loop3: detected capacity change from 0 to 1024 [ 73.350663][ T4357] ======================================================= [ 73.350663][ T4357] WARNING: The mand mount option has been deprecated and [ 73.350663][ T4357] and is ignored by this kernel. Remove the mand [ 73.350663][ T4357] option from the mount to silence this warning. [ 73.350663][ T4357] ======================================================= [ 73.432314][ T4366] loop2: detected capacity change from 0 to 256 [ 73.514200][ T3077] hfsplus: b-tree write err: -5, ino 4 [ 73.578251][ T4366] FAT-fs (loop2): Directory bread(block 64) failed [ 73.597702][ T4366] FAT-fs (loop2): Directory bread(block 65) failed [ 73.626685][ T4366] FAT-fs (loop2): Directory bread(block 66) failed [ 73.648601][ T4366] FAT-fs (loop2): Directory bread(block 67) failed [ 73.655282][ T4366] FAT-fs (loop2): Directory bread(block 68) failed [ 73.676321][ T4366] FAT-fs (loop2): Directory bread(block 69) failed [ 73.695031][ T4366] FAT-fs (loop2): Directory bread(block 70) failed [ 73.715319][ T4366] FAT-fs (loop2): Directory bread(block 71) failed [ 73.734812][ T4366] FAT-fs (loop2): Directory bread(block 72) failed [ 73.764411][ T4366] FAT-fs (loop2): Directory bread(block 73) failed [ 74.175949][ T4385] loop1: detected capacity change from 0 to 1024 [ 74.304341][ T4387] netlink: 24 bytes leftover after parsing attributes in process `syz.4.32'. [ 74.315736][ T4385] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.437997][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 74.487617][ T4197] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.529995][ T4391] loop0: detected capacity change from 0 to 4096 [ 74.585413][ T4391] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 74.908010][ T4197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.964050][ T4197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.994526][ T4197] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.044269][ T4197] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.074878][ T4197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.117283][ T4197] usb 3-1: config 0 descriptor?? [ 75.367488][ T21] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 75.511486][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 75.511585][ T4201] CPU: 0 PID: 4201 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 75.511606][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.511620][ T4201] Workqueue: hci2 hci_rx_work [ 75.511664][ T4201] Call Trace: [ 75.511671][ T4201] [ 75.511680][ T4201] dump_stack_lvl+0x168/0x230 [ 75.511711][ T4201] ? show_regs_print_info+0x20/0x20 [ 75.511736][ T4201] ? load_image+0x3b0/0x3b0 [ 75.511774][ T4201] sysfs_create_dir_ns+0x252/0x280 [ 75.511800][ T4201] ? __lock_acquire+0x7c60/0x7c60 [ 75.511825][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 75.511847][ T4201] ? le_conn_complete_evt+0xcbc/0x1590 [ 75.511870][ T4201] ? hci_event_packet+0xe05/0x12f0 [ 75.511892][ T4201] ? process_one_work+0x863/0x1000 [ 75.511917][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 75.511943][ T4201] kobject_add_internal+0x662/0xd00 [ 75.511975][ T4201] kobject_add+0x152/0x210 [ 75.512002][ T4201] ? kobject_init+0x1d0/0x1d0 [ 75.512037][ T4201] ? klist_children_get+0x50/0x50 [ 75.512058][ T4201] ? get_device_parent+0x121/0x3f0 [ 75.512086][ T4201] device_add+0x483/0xfb0 [ 75.512122][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 75.512149][ T4201] le_conn_complete_evt+0xcbc/0x1590 [ 75.512184][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 75.512213][ T4201] ? __mutex_trylock_common+0x14f/0x250 [ 75.512244][ T4201] hci_le_meta_evt+0x289/0x3b80 [ 75.512272][ T4201] ? hci_event_packet+0x36d/0x12f0 [ 75.512296][ T4201] ? hci_event_packet+0x2e2/0x12f0 [ 75.512321][ T4201] ? __lock_acquire+0x7c60/0x7c60 [ 75.512355][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 75.512383][ T4201] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 75.512408][ T4201] ? mark_lock+0x94/0x320 [ 75.512431][ T4201] ? mutex_unlock+0x10/0x10 [ 75.512454][ T4201] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 75.512483][ T4201] ? lock_chain_count+0x20/0x20 [ 75.512507][ T4201] ? __rwlock_init+0x140/0x140 [ 75.512532][ T4201] hci_event_packet+0xe05/0x12f0 [ 75.512556][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 75.512585][ T4201] ? rcu_lock_release+0x20/0x20 [ 75.512616][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 75.512640][ T4201] hci_rx_work+0x255/0xa10 [ 75.512676][ T4201] process_one_work+0x863/0x1000 [ 75.512727][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 75.512748][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 75.512774][ T4201] ? _raw_spin_lock_irq+0xab/0xe0 [ 75.512798][ T4201] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 75.512825][ T4201] ? wq_worker_running+0x97/0x170 [ 75.512847][ T4201] worker_thread+0xaa8/0x12a0 [ 75.512868][ T4201] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 75.512893][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 75.512924][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 75.512947][ T4201] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 75.512984][ T4201] kthread+0x436/0x520 [ 75.513001][ T4201] ? rcu_lock_release+0x20/0x20 [ 75.513027][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 75.513048][ T4201] ret_from_fork+0x1f/0x30 [ 75.513086][ T4201] [ 75.513137][ T4201] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 75.513162][ T4201] Bluetooth: hci2: failed to register connection device [ 75.612396][ T4197] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 75.651398][ T4197] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 75.687500][ T4257] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.738977][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 75.835428][ T4412] loop4: detected capacity change from 0 to 512 [ 75.938802][ T21] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 76.118217][ T4257] usb 1-1: Using ep0 maxpacket: 32 [ 76.261755][ T4257] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.297651][ T4257] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.313815][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.330178][ T21] usb 2-1: Product: syz [ 76.334591][ T21] usb 2-1: Manufacturer: syz [ 76.357426][ T21] usb 2-1: SerialNumber: syz [ 76.369986][ T21] usb 2-1: config 0 descriptor?? [ 76.426711][ T4412] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 76.445355][ T4257] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 76.480350][ T4257] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 76.513586][ T4257] usb 1-1: Product: syz [ 76.543560][ T4257] usb 1-1: Manufacturer: syz [ 76.596294][ T21] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 76.627866][ T4412] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.629287][ T4257] hub 1-1:4.0: USB hub found [ 76.696219][ T4202] udevd[4202]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.806093][ T21] usb 2-1: USB disconnect, device number 2 [ 76.861830][ T4257] hub 1-1:4.0: 2 ports detected [ 77.737697][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.898428][ T4197] usb 3-1: USB disconnect, device number 2 [ 78.037695][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 78.243826][ T4257] usb 1-1: USB disconnect, device number 2 [ 78.306700][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 78.316554][ T4201] CPU: 0 PID: 4201 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 78.318538][ T21] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 78.324114][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 78.324156][ T4201] Workqueue: hci0 hci_rx_work [ 78.347298][ T4201] Call Trace: [ 78.350605][ T4201] [ 78.353555][ T4201] dump_stack_lvl+0x168/0x230 [ 78.358274][ T4201] ? show_regs_print_info+0x20/0x20 [ 78.363502][ T4201] ? load_image+0x3b0/0x3b0 [ 78.368161][ T4201] sysfs_create_dir_ns+0x252/0x280 [ 78.373311][ T4201] ? __lock_acquire+0x7c60/0x7c60 [ 78.378448][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 78.383255][ T4201] ? le_conn_complete_evt+0xcbc/0x1590 [ 78.388732][ T4201] ? hci_event_packet+0xe05/0x12f0 [ 78.393856][ T4201] ? process_one_work+0x863/0x1000 [ 78.398989][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 78.404236][ T4201] kobject_add_internal+0x662/0xd00 [ 78.409449][ T4201] kobject_add+0x152/0x210 [ 78.413878][ T4201] ? kobject_init+0x1d0/0x1d0 [ 78.418569][ T4201] ? klist_children_get+0x50/0x50 [ 78.423601][ T4201] ? get_device_parent+0x121/0x3f0 [ 78.428733][ T4201] device_add+0x483/0xfb0 [ 78.433079][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 78.438045][ T4201] le_conn_complete_evt+0xcbc/0x1590 [ 78.443353][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 78.448500][ T4201] ? __mutex_trylock_common+0x14f/0x250 [ 78.454059][ T4201] hci_le_meta_evt+0x289/0x3b80 [ 78.458937][ T4201] ? hci_event_packet+0x36d/0x12f0 [ 78.464055][ T4201] ? hci_event_packet+0x2e2/0x12f0 [ 78.469178][ T4201] ? __lock_acquire+0x7c60/0x7c60 [ 78.474529][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 78.480714][ T4201] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 78.486674][ T4201] ? mark_lock+0x94/0x320 [ 78.491038][ T4201] ? mutex_unlock+0x10/0x10 [ 78.495569][ T4201] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 78.501584][ T4201] ? lock_chain_count+0x20/0x20 [ 78.506446][ T4201] ? __rwlock_init+0x140/0x140 [ 78.511408][ T4201] hci_event_packet+0xe05/0x12f0 [ 78.516371][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 78.521609][ T4201] ? rcu_lock_release+0x20/0x20 [ 78.526476][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 78.531681][ T4201] hci_rx_work+0x255/0xa10 [ 78.536112][ T4201] process_one_work+0x863/0x1000 [ 78.541067][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 78.546706][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 78.551998][ T4201] ? _raw_spin_lock_irq+0xab/0xe0 [ 78.557032][ T4201] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 78.562938][ T4201] ? wq_worker_running+0x97/0x170 [ 78.567974][ T4201] worker_thread+0xaa8/0x12a0 [ 78.572657][ T4201] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 78.578773][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 78.584143][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 78.589533][ T4201] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 78.595469][ T4201] kthread+0x436/0x520 [ 78.599561][ T4201] ? rcu_lock_release+0x20/0x20 [ 78.604426][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 78.609039][ T4201] ret_from_fork+0x1f/0x30 [ 78.613497][ T4201] [ 78.623564][ T4201] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 78.637003][ T4201] Bluetooth: hci0: failed to register connection device [ 78.688754][ T21] usb 2-1: config 179 has no interface number 0 [ 78.695082][ T21] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 78.795059][ T21] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 78.881841][ T21] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 78.934572][ T21] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 78.948477][ T4452] loop2: detected capacity change from 0 to 64 [ 78.977127][ T4453] process 'syz.3.52' launched './file0' with NULL argv: empty string added [ 78.989825][ T21] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 79.023547][ T21] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 79.094396][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.124570][ T4452] Trying to free block not in datazone [ 79.198987][ T4431] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 79.300781][ T4457] loop4: detected capacity change from 0 to 512 [ 79.469600][ T4197] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input6 [ 79.647315][ T4431] udc-core: couldn't find an available UDC or it's busy [ 79.660241][ T4431] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.836393][ T4457] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 79.977137][ T4457] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.112163][ T21] usb 2-1: USB disconnect, device number 3 [ 80.118345][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 80.118498][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 80.657022][ T21] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 80.804959][ T26] audit: type=1326 audit(1756533359.471:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4477 comm="syz.2.62" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff681cdbe9 code=0x0 [ 80.976324][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 80.986379][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.000032][ T4471] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 81.002962][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.056098][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.065522][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.073677][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.082426][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.090597][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.099284][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.107139][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.115588][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.123718][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.147610][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.165716][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.177475][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.195641][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.213817][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.216630][ T4486] loop1: detected capacity change from 0 to 8192 [ 81.231951][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.241336][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.249247][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.257178][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.271173][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.292546][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.300568][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.308829][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.316616][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.324916][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.332950][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.342110][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.349980][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.358054][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.365816][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.373868][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.381769][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.389805][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.399193][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.407240][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.415220][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.423301][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.431214][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.440527][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.448515][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.456546][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.464505][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.472778][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.480766][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.493438][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.502523][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.515222][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.524548][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.551512][ T7] cfg80211: failed to load regulatory.db [ 81.583540][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.591830][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.599463][ T4492] loop3: detected capacity change from 0 to 128 [ 81.599744][ T13] hid-generic 0008:0006:80000007.0002: unknown main item tag 0x0 [ 81.639283][ T13] hid-generic 0008:0006:80000007.0002: hidraw0: HID v0.0b Device [syz1] on syz1 [ 81.665583][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 81.803343][ T4493] fido_id[4493]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.925138][ T4492] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,bsddf,,errors=continue. Quota mode: none. [ 81.992947][ T4506] loop2: detected capacity change from 0 to 512 [ 82.000355][ T4492] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.083582][ T4506] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 82.119892][ T4506] EXT4-fs (loop2): Ignoring removed bh option [ 82.136652][ T4202] udevd[4202]: incorrect jbd checksum on /dev/loop3 [ 82.149597][ T4506] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.273411][ T4202] udevd[4202]: incorrect jbd checksum on /dev/loop3 [ 82.288494][ T4506] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 82.417729][ T4506] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #11: comm syz.2.71: corrupted inode contents [ 82.456044][ T154] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm kworker/u4:2: Invalid inode table block 7810774662855537973 in block_group 0 [ 82.524669][ T4506] EXT4-fs error (device loop2): ext4_dirty_inode:6040: inode #11: comm syz.2.71: mark_inode_dirty error [ 82.650452][ T4511] loop0: detected capacity change from 0 to 8 [ 82.735482][ T4506] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.71: invalid indirect mapped block 1 (level 1) [ 82.933900][ T4511] SQUASHFS error: zlib decompression failed, data probably corrupt [ 82.942732][ T4511] SQUASHFS error: Failed to read block 0x4de: -5 [ 82.954199][ T4511] SQUASHFS error: Failed to read block 0x4e2: -5 [ 82.982827][ T4511] SQUASHFS error: Failed to read block 0x9ca: -5 [ 82.990502][ T4511] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 82.998616][ T4511] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 83.006684][ T4511] SQUASHFS error: Failed to read block 0x535f2: -5 [ 83.066299][ T26] audit: type=1800 audit(1756533361.741:3): pid=4511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.73" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 83.201625][ T4506] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #11: comm syz.2.71: corrupted inode contents [ 83.389517][ T4506] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 83.493238][ T4506] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #11: comm syz.2.71: corrupted inode contents [ 83.783530][ T4506] EXT4-fs error (device loop2): ext4_truncate:4273: inode #11: comm syz.2.71: mark_inode_dirty error [ 83.967248][ T4506] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 84.289037][ T4506] EXT4-fs (loop2): 1 truncate cleaned up [ 84.294911][ T4506] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,bh,,errors=continue. Quota mode: none. [ 84.447923][ T4528] loop0: detected capacity change from 0 to 256 [ 84.511358][ T4528] exfat: Bad value for 'uid' [ 84.643728][ T4532] loop1: detected capacity change from 0 to 512 [ 84.660081][ T26] audit: type=1326 audit(1756533363.341:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.2.80" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff681cdbe9 code=0x0 [ 85.552303][ T4532] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 85.869845][ T4532] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.808055][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.826341][ T4558] loop2: detected capacity change from 0 to 512 [ 86.859572][ T4558] EXT4-fs (loop2): Ignoring removed orlov option [ 86.891550][ T4558] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c119, mo2=0002] [ 86.893459][ T4558] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.87: corrupted in-inode xattr [ 86.904401][ T4558] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.87: couldn't read orphan inode 15 (err -117) [ 86.915415][ T4558] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 87.050208][ T4497] ODEBUG: Out of memory. ODEBUG disabled [ 87.144712][ T4562] loop3: detected capacity change from 0 to 512 [ 87.207458][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 87.407732][ T21] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 87.485697][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.554550][ T4562] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 87.817395][ T21] usb 1-1: config 0 has no interface number 0 [ 87.871228][ T4562] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.180685][ T4562] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.89: iget: bad i_size value: 2533274857506816 [ 88.407857][ T21] usb 1-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 88.416966][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.425133][ T21] usb 1-1: Product: syz [ 88.429675][ T21] usb 1-1: Manufacturer: syz [ 88.434288][ T21] usb 1-1: SerialNumber: syz [ 88.633056][ T21] usb 1-1: config 0 descriptor?? [ 89.358955][ T26] audit: type=1326 audit(1756533368.041:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4575 comm="syz.1.92" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbae7551be9 code=0x0 [ 89.391574][ T4578] capability: warning: `syz.2.93' uses deprecated v2 capabilities in a way that may be insecure [ 89.533611][ T21] usb 1-1: USB disconnect, device number 3 [ 89.959985][ T4595] loop3: detected capacity change from 0 to 512 [ 90.115649][ T4595] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 90.178792][ T4595] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.708376][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 90.718030][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 90.727454][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 90.736582][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 90.746565][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 90.756151][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 90.756308][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 90.765587][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 90.774993][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 90.783539][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 92.218284][ T4612] 9pnet: Insufficient options for proto=fd [ 92.366233][ T4607] loop1: detected capacity change from 0 to 512 [ 93.898750][ T4620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.104'. [ 94.307652][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 94.317224][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 94.324798][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.334997][ T4201] Workqueue: hci0 hci_rx_work [ 94.339711][ T4201] Call Trace: [ 94.343000][ T4201] [ 94.345936][ T4201] dump_stack_lvl+0x168/0x230 [ 94.350642][ T4201] ? show_regs_print_info+0x20/0x20 [ 94.355856][ T4201] ? load_image+0x3b0/0x3b0 [ 94.360473][ T4201] sysfs_create_dir_ns+0x252/0x280 [ 94.365598][ T4201] ? __lock_acquire+0x7c60/0x7c60 [ 94.370632][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 94.375420][ T4201] ? le_conn_complete_evt+0xcbc/0x1590 [ 94.381234][ T4201] ? hci_event_packet+0xe05/0x12f0 [ 94.386350][ T4201] ? process_one_work+0x863/0x1000 [ 94.391553][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 94.396757][ T4201] kobject_add_internal+0x662/0xd00 [ 94.401970][ T4201] kobject_add+0x152/0x210 [ 94.406393][ T4201] ? kobject_init+0x1d0/0x1d0 [ 94.411079][ T4201] ? klist_children_get+0x50/0x50 [ 94.416107][ T4201] ? get_device_parent+0x121/0x3f0 [ 94.421229][ T4201] device_add+0x483/0xfb0 [ 94.425579][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 94.430531][ T4201] le_conn_complete_evt+0xcbc/0x1590 [ 94.435841][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 94.440990][ T4201] ? __mutex_trylock_common+0x14f/0x250 [ 94.446558][ T4201] hci_le_meta_evt+0x289/0x3b80 [ 94.451418][ T4201] ? hci_event_packet+0x36d/0x12f0 [ 94.456571][ T4201] ? hci_event_packet+0x2e2/0x12f0 [ 94.461691][ T4201] ? __lock_acquire+0x7c60/0x7c60 [ 94.466748][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 94.472913][ T4201] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 94.478565][ T4201] ? mark_lock+0x94/0x320 [ 94.482905][ T4201] ? mutex_unlock+0x10/0x10 [ 94.487413][ T4201] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 94.493401][ T4201] ? lock_chain_count+0x20/0x20 [ 94.498255][ T4201] ? __rwlock_init+0x140/0x140 [ 94.503028][ T4201] hci_event_packet+0xe05/0x12f0 [ 94.507977][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 94.513182][ T4201] ? rcu_lock_release+0x20/0x20 [ 94.518046][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 94.523257][ T4201] hci_rx_work+0x255/0xa10 [ 94.527689][ T4201] process_one_work+0x863/0x1000 [ 94.532647][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 94.538279][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 94.543572][ T4201] ? _raw_spin_lock_irq+0xab/0xe0 [ 94.548605][ T4201] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 94.553984][ T4201] ? wq_worker_running+0x97/0x170 [ 94.559014][ T4201] worker_thread+0xaa8/0x12a0 [ 94.563696][ T4201] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 94.569601][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 94.574819][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 94.580026][ T4201] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 94.585939][ T4201] kthread+0x436/0x520 [ 94.590016][ T4201] ? rcu_lock_release+0x20/0x20 [ 94.594871][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 94.599468][ T4201] ret_from_fork+0x1f/0x30 [ 94.603900][ T4201] [ 94.615941][ T4201] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 94.629215][ T4201] Bluetooth: hci0: failed to register connection device [ 94.857823][ T26] audit: type=1326 audit(1756533373.541:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4625 comm="syz.3.109" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32b6da8be9 code=0x0 [ 98.144554][ T4650] 9pnet: Insufficient options for proto=fd [ 98.256922][ T4652] loop1: detected capacity change from 0 to 1024 [ 98.323183][ T4497] Set syz1 is full, maxelem 65536 reached [ 98.459293][ T4638] chnl_net:caif_netlink_parms(): no params data found [ 98.551956][ T4662] loop0: detected capacity change from 0 to 512 [ 98.596518][ T4668] loop2: detected capacity change from 0 to 16 [ 98.674317][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 98.684263][ T4201] CPU: 0 PID: 4201 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 98.691844][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.701933][ T4201] Workqueue: hci4 hci_rx_work [ 98.706650][ T4201] Call Trace: [ 98.709951][ T4201] [ 98.712900][ T4201] dump_stack_lvl+0x168/0x230 [ 98.717620][ T4201] ? show_regs_print_info+0x20/0x20 [ 98.722844][ T4201] ? load_image+0x3b0/0x3b0 [ 98.727389][ T4201] sysfs_create_dir_ns+0x252/0x280 [ 98.732545][ T4201] ? __lock_acquire+0x7c60/0x7c60 [ 98.737615][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 98.742317][ T4201] ? le_conn_complete_evt+0xcbc/0x1590 [ 98.747802][ T4201] ? hci_event_packet+0xe05/0x12f0 [ 98.752940][ T4201] ? process_one_work+0x863/0x1000 [ 98.758080][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 98.763305][ T4201] kobject_add_internal+0x662/0xd00 [ 98.768523][ T4201] kobject_add+0x152/0x210 [ 98.772954][ T4201] ? kobject_init+0x1d0/0x1d0 [ 98.777657][ T4201] ? klist_children_get+0x50/0x50 [ 98.782691][ T4201] ? get_device_parent+0x121/0x3f0 [ 98.787904][ T4201] device_add+0x483/0xfb0 [ 98.792257][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 98.797207][ T4201] le_conn_complete_evt+0xcbc/0x1590 [ 98.802508][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 98.807630][ T4201] ? __mutex_trylock_common+0x14f/0x250 [ 98.813187][ T4201] hci_le_meta_evt+0x289/0x3b80 [ 98.818052][ T4201] ? hci_event_packet+0x36d/0x12f0 [ 98.823167][ T4201] ? hci_event_packet+0x2e2/0x12f0 [ 98.828286][ T4201] ? __lock_acquire+0x7c60/0x7c60 [ 98.833351][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 98.839430][ T4201] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 98.845105][ T4201] ? mark_lock+0x94/0x320 [ 98.849448][ T4201] ? mutex_unlock+0x10/0x10 [ 98.853960][ T4201] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 98.859947][ T4201] ? lock_chain_count+0x20/0x20 [ 98.864802][ T4201] ? __rwlock_init+0x140/0x140 [ 98.869571][ T4201] hci_event_packet+0xe05/0x12f0 [ 98.874515][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 98.879723][ T4201] ? rcu_lock_release+0x20/0x20 [ 98.884594][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 98.889802][ T4201] hci_rx_work+0x255/0xa10 [ 98.894236][ T4201] process_one_work+0x863/0x1000 [ 98.899195][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 98.904835][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 98.910128][ T4201] ? _raw_spin_lock_irq+0xab/0xe0 [ 98.915160][ T4201] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 98.920541][ T4201] ? wq_worker_running+0x97/0x170 [ 98.925571][ T4201] worker_thread+0xaa8/0x12a0 [ 98.930254][ T4201] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 98.936153][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 98.941471][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 98.946689][ T4201] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 98.952619][ T4201] kthread+0x436/0x520 [ 98.956690][ T4201] ? rcu_lock_release+0x20/0x20 [ 98.961542][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 98.966135][ T4201] ret_from_fork+0x1f/0x30 [ 98.970566][ T4201] [ 98.976433][ T4668] erofs: (device loop2): mounted with root inode @ nid 36. [ 98.980119][ T4201] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 98.998647][ T4201] Bluetooth: hci4: failed to register connection device [ 99.047435][ T4229] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.067873][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 99.084803][ T26] audit: type=1326 audit(1756533377.761:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4669 comm="syz.1.123" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbae7551be9 code=0x0 [ 99.227592][ T4662] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 99.334779][ T4662] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.859384][ T4229] usb 4-1: Using ep0 maxpacket: 16 [ 99.866765][ T4684] loop1: detected capacity change from 0 to 16 [ 99.900611][ T4638] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.916927][ T4638] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.932527][ T4684] erofs: (device loop1): mounted with root inode @ nid 36. [ 99.944591][ T4638] device bridge_slave_0 entered promiscuous mode [ 99.987680][ T4229] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 99.990618][ T4638] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.005285][ T4229] usb 4-1: config 0 has no interface number 0 [ 100.026936][ T4229] usb 4-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 100.037729][ T4638] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.044981][ T4229] usb 4-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 100.058939][ T4638] device bridge_slave_1 entered promiscuous mode [ 100.073171][ T4229] usb 4-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 100.136428][ T4677] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 100.181138][ T4638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.237164][ T4476] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.258242][ T4638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.307140][ T4229] usb 4-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 100.316931][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.335403][ T4229] usb 4-1: Product: syz [ 100.357433][ T4229] usb 4-1: Manufacturer: syz [ 100.362224][ T4229] usb 4-1: SerialNumber: syz [ 100.659644][ T4691] 9pnet: Insufficient options for proto=fd [ 101.190068][ T4229] usb 4-1: config 0 descriptor?? [ 101.208404][ T4663] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 101.223443][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 101.223786][ T4663] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 101.306020][ T4476] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.362666][ T4638] team0: Port device team_slave_0 added [ 101.371137][ T4698] loop1: detected capacity change from 0 to 128 [ 101.409889][ T4476] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.436908][ T4638] team0: Port device team_slave_1 added [ 101.448508][ T4249] usb 4-1: USB disconnect, device number 2 [ 101.502514][ T4476] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.550503][ T4698] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.564815][ T4638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.572282][ T4707] loop2: detected capacity change from 0 to 512 [ 101.573636][ T4638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.581529][ T4705] loop0: detected capacity change from 0 to 512 [ 101.613102][ T4698] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.674760][ T4638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.691381][ T4707] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.714962][ T4638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.727685][ T4638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.743048][ T4705] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 101.767944][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 101.777563][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 101.785283][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.795372][ T4201] Workqueue: hci0 hci_rx_work [ 101.800099][ T4201] Call Trace: [ 101.803394][ T4201] [ 101.806357][ T4201] dump_stack_lvl+0x168/0x230 [ 101.811070][ T4201] ? show_regs_print_info+0x20/0x20 [ 101.816298][ T4201] ? load_image+0x3b0/0x3b0 [ 101.820829][ T4201] sysfs_create_dir_ns+0x252/0x280 [ 101.825958][ T4201] ? __lock_acquire+0x7c60/0x7c60 [ 101.830997][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 101.835685][ T4201] ? le_conn_complete_evt+0xcbc/0x1590 [ 101.841151][ T4201] ? hci_event_packet+0xe05/0x12f0 [ 101.846274][ T4201] ? process_one_work+0x863/0x1000 [ 101.851395][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 101.856614][ T4201] kobject_add_internal+0x662/0xd00 [ 101.861827][ T4201] kobject_add+0x152/0x210 [ 101.866253][ T4201] ? kobject_init+0x1d0/0x1d0 [ 101.870937][ T4201] ? klist_children_get+0x50/0x50 [ 101.875965][ T4201] ? get_device_parent+0x121/0x3f0 [ 101.881085][ T4201] device_add+0x483/0xfb0 [ 101.885433][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 101.890398][ T4201] le_conn_complete_evt+0xcbc/0x1590 [ 101.895723][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 101.900846][ T4201] ? __mutex_trylock_common+0x14f/0x250 [ 101.906404][ T4201] hci_le_meta_evt+0x289/0x3b80 [ 101.911362][ T4201] ? hci_event_packet+0x36d/0x12f0 [ 101.916489][ T4201] ? hci_event_packet+0x2e2/0x12f0 [ 101.921694][ T4201] ? __lock_acquire+0x7c60/0x7c60 [ 101.926733][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 101.932807][ T4201] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 101.938446][ T4201] ? mark_lock+0x94/0x320 [ 101.942785][ T4201] ? mutex_unlock+0x10/0x10 [ 101.947304][ T4201] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 101.953304][ T4201] ? lock_chain_count+0x20/0x20 [ 101.958159][ T4201] ? __rwlock_init+0x140/0x140 [ 101.962942][ T4201] hci_event_packet+0xe05/0x12f0 [ 101.967886][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 101.973103][ T4201] ? rcu_lock_release+0x20/0x20 [ 101.977966][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 101.983169][ T4201] hci_rx_work+0x255/0xa10 [ 101.987616][ T4201] process_one_work+0x863/0x1000 [ 101.992573][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 101.998208][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 102.003501][ T4201] ? _raw_spin_lock_irq+0xab/0xe0 [ 102.008540][ T4201] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 102.013937][ T4201] ? wq_worker_running+0x97/0x170 [ 102.018981][ T4201] worker_thread+0xaa8/0x12a0 [ 102.023672][ T4201] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 102.029580][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 102.034790][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 102.040084][ T4201] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 102.045998][ T4201] kthread+0x436/0x520 [ 102.050074][ T4201] ? rcu_lock_release+0x20/0x20 [ 102.054927][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 102.059524][ T4201] ret_from_fork+0x1f/0x30 [ 102.063968][ T4201] [ 102.070942][ T4201] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 102.085425][ T4201] Bluetooth: hci0: failed to register connection device [ 102.093041][ T4638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.097179][ T4707] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.132: bad orphan inode 131083 [ 102.126748][ T26] audit: type=1326 audit(1756533380.801:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4713 comm="syz.3.134" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32b6da8be9 code=0x0 [ 102.186925][ T4707] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 102.199335][ T4705] EXT4-fs (loop0): 1 truncate cleaned up [ 102.226860][ T4705] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 102.322257][ T4707] EXT4-fs (loop2): shut down requested (0) [ 102.353653][ T4638] device hsr_slave_0 entered promiscuous mode [ 102.380449][ T4638] device hsr_slave_1 entered promiscuous mode [ 102.409089][ T4705] fscrypt (loop0, inode 18): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 102.447992][ T4638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.455625][ T4638] Cannot create hsr debugfs directory [ 102.480223][ T4722] loop1: detected capacity change from 0 to 2048 [ 102.725393][ T4722] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 103.185843][ T4722] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.309719][ T4229] Bluetooth: hci5: command 0x040f tx timeout [ 103.534918][ T4730] 9pnet: Insufficient options for proto=fd [ 103.578302][ T26] audit: type=1800 audit(1756533382.261:9): pid=4722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.135" name="file0" dev="loop1" ino=1313 res=0 errno=0 [ 104.651639][ T4638] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.725023][ T4752] loop0: detected capacity change from 0 to 1024 [ 104.761971][ T4638] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.738865][ T4758] loop1: detected capacity change from 0 to 256 [ 106.061390][ T4174] Bluetooth: hci5: command 0x0419 tx timeout [ 106.142632][ T4758] exfat: Deprecated parameter 'utf8' [ 106.148032][ T4758] exfat: Unknown parameter 'keep_last_dots' [ 106.317960][ T4764] loop2: detected capacity change from 0 to 512 [ 106.326793][ T4638] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.376071][ T4638] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.409160][ T4764] EXT4-fs (loop2): Ignoring removed orlov option [ 106.600492][ T4779] 9pnet: Insufficient options for proto=fd [ 106.633154][ T4764] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c119, mo2=0002] [ 106.914228][ T4764] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.147: corrupted in-inode xattr [ 107.300407][ T4764] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.147: couldn't read orphan inode 15 (err -117) [ 107.397527][ T4764] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 107.429191][ T4785] loop3: detected capacity change from 0 to 1024 [ 107.502125][ T4788] loop0: detected capacity change from 0 to 512 [ 107.557110][ T4638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.583920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.627809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.639929][ T4788] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.153: casefold flag without casefold feature [ 107.722811][ T4788] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.153: couldn't read orphan inode 15 (err -117) [ 108.289180][ T4638] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.290077][ T4788] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.323358][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.388157][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.396672][ T4475] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.403948][ T4475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.493882][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.518083][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.605699][ T4475] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.612895][ T4475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.715655][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.036417][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.492720][ T4803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.156'. [ 109.557595][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.569566][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.595407][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.643578][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.691655][ T4201] ================================================================== [ 109.700079][ T4201] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12c0/0x3b80 [ 109.707931][ T4201] Read of size 1 at addr ffff88807afa440a by task kworker/u5:7/4201 [ 109.715930][ T4201] [ 109.718276][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 109.725836][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.735916][ T4201] Workqueue: hci1 hci_rx_work [ 109.740666][ T4201] Call Trace: [ 109.743964][ T4201] [ 109.747004][ T4201] dump_stack_lvl+0x168/0x230 [ 109.751711][ T4201] ? show_regs_print_info+0x20/0x20 [ 109.755198][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.756939][ T4201] ? load_image+0x3b0/0x3b0 [ 109.769270][ T4201] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 109.774783][ T4201] print_address_description+0x60/0x2d0 [ 109.780364][ T4201] ? hci_le_meta_evt+0x12c0/0x3b80 [ 109.785508][ T4201] kasan_report+0xdf/0x130 [ 109.789953][ T4201] ? hci_le_meta_evt+0x12c0/0x3b80 [ 109.795102][ T4201] hci_le_meta_evt+0x12c0/0x3b80 [ 109.800173][ T4201] ? hci_event_packet+0x230/0x12f0 [ 109.805328][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 109.811441][ T4201] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 109.817108][ T4201] ? mark_lock+0x94/0x320 [ 109.821480][ T4201] ? mutex_unlock+0x10/0x10 [ 109.826041][ T4201] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 109.832079][ T4201] ? lock_chain_count+0x20/0x20 [ 109.833361][ T4788] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #2: comm syz.0.153: directory missing '.' [ 109.836965][ T4201] ? __rwlock_init+0x140/0x140 [ 109.836997][ T4201] hci_event_packet+0xe05/0x12f0 [ 109.854946][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.857816][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 109.857852][ T4201] ? rcu_lock_release+0x20/0x20 [ 109.857884][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 109.857910][ T4201] hci_rx_work+0x255/0xa10 [ 109.885383][ T4201] process_one_work+0x863/0x1000 [ 109.890353][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 109.896040][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 109.901356][ T4201] ? _raw_spin_lock_irq+0xab/0xe0 [ 109.906393][ T4201] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 109.911779][ T4201] ? wq_worker_running+0x97/0x170 [ 109.916816][ T4201] worker_thread+0xaa8/0x12a0 [ 109.921507][ T4201] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 109.927412][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 109.932623][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 109.937830][ T4201] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 109.943740][ T4201] kthread+0x436/0x520 [ 109.947815][ T4201] ? rcu_lock_release+0x20/0x20 [ 109.952669][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 109.957261][ T4201] ret_from_fork+0x1f/0x30 [ 109.961693][ T4201] [ 109.964714][ T4201] [ 109.967036][ T4201] Allocated by task 4809: [ 109.971364][ T4201] __kasan_kmalloc+0xb5/0xf0 [ 109.975961][ T4201] __alloc_skb+0x22c/0x750 [ 109.980378][ T4201] vhci_write+0xbc/0x450 [ 109.984628][ T4201] vfs_write+0x712/0xd00 [ 109.988875][ T4201] ksys_write+0x14d/0x250 [ 109.993206][ T4201] do_syscall_64+0x4c/0xa0 [ 109.997618][ T4201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.003522][ T4201] [ 110.005847][ T4201] The buggy address belongs to the object at ffff88807afa4000 [ 110.005847][ T4201] which belongs to the cache kmalloc-1k of size 1024 [ 110.019975][ T4201] The buggy address is located 10 bytes to the right of [ 110.019975][ T4201] 1024-byte region [ffff88807afa4000, ffff88807afa4400) [ 110.033786][ T4201] The buggy address belongs to the page: [ 110.039445][ T4201] page:ffffea0001ebe800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807afa1000 pfn:0x7afa0 [ 110.050907][ T4201] head:ffffea0001ebe800 order:3 compound_mapcount:0 compound_pincount:0 [ 110.059230][ T4201] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 110.067217][ T4201] raw: 00fff00000010200 ffffea0000958a00 0000000200000002 ffff888016841dc0 [ 110.075835][ T4201] raw: ffff88807afa1000 000000008010000f 00000001ffffffff 0000000000000000 [ 110.084420][ T4201] page dumped because: kasan: bad access detected [ 110.090867][ T4201] page_owner tracks the page as allocated [ 110.096582][ T4201] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4172, ts 73159668407, free_ts 73120849720 [ 110.117100][ T4201] get_page_from_freelist+0x1b77/0x1c60 [ 110.122712][ T4201] __alloc_pages+0x1e1/0x470 [ 110.127313][ T4201] new_slab+0xc0/0x4b0 [ 110.131385][ T4201] ___slab_alloc+0x81e/0xdf0 [ 110.136011][ T4201] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 110.141832][ T4201] __alloc_skb+0x22c/0x750 [ 110.146261][ T4201] sk_stream_alloc_skb+0x1fa/0xa60 [ 110.151386][ T4201] tcp_sendmsg_locked+0xc3e/0x3590 [ 110.156500][ T4201] tcp_sendmsg+0x2b/0x40 [ 110.160755][ T4201] sock_write_iter+0x29c/0x380 [ 110.165539][ T4201] vfs_write+0x712/0xd00 [ 110.169780][ T4201] ksys_write+0x14d/0x250 [ 110.174134][ T4201] do_syscall_64+0x4c/0xa0 [ 110.178641][ T4201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.184539][ T4201] page last free stack trace: [ 110.189210][ T4201] free_unref_page_prepare+0x637/0x6c0 [ 110.194675][ T4201] free_unref_page+0x94/0x280 [ 110.199467][ T4201] __unfreeze_partials+0x1a5/0x200 [ 110.204685][ T4201] put_cpu_partial+0x12d/0x190 [ 110.209460][ T4201] qlist_free_all+0x35/0x90 [ 110.214012][ T4201] kasan_quarantine_reduce+0x150/0x160 [ 110.219491][ T4201] __kasan_slab_alloc+0x2f/0xd0 [ 110.224355][ T4201] slab_post_alloc_hook+0x4c/0x380 [ 110.229474][ T4201] kmem_cache_alloc+0x100/0x290 [ 110.234335][ T4201] taskstats_exit+0x151/0xab0 [ 110.239016][ T4201] do_exit+0x594/0x20a0 [ 110.243179][ T4201] do_group_exit+0x12e/0x300 [ 110.247779][ T4201] __x64_sys_exit_group+0x3b/0x40 [ 110.252813][ T4201] do_syscall_64+0x4c/0xa0 [ 110.257333][ T4201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.263236][ T4201] [ 110.265557][ T4201] Memory state around the buggy address: [ 110.271183][ T4201] ffff88807afa4300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 110.279246][ T4201] ffff88807afa4380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 110.287314][ T4201] >ffff88807afa4400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 110.295375][ T4201] ^ [ 110.299716][ T4201] ffff88807afa4480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 110.307781][ T4201] ffff88807afa4500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 110.315842][ T4201] ================================================================== [ 110.323901][ T4201] Disabling lock debugging due to kernel taint [ 110.333219][ T4201] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 110.340449][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:7 Tainted: G B syzkaller #0 [ 110.342420][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.349393][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.349407][ T4201] Workqueue: hci1 hci_rx_work [ 110.349431][ T4201] Call Trace: [ 110.349437][ T4201] [ 110.349445][ T4201] dump_stack_lvl+0x168/0x230 [ 110.349471][ T4201] ? show_regs_print_info+0x20/0x20 [ 110.349492][ T4201] ? load_image+0x3b0/0x3b0 [ 110.349519][ T4201] panic+0x2c9/0x7f0 [ 110.349541][ T4201] ? bpf_jit_dump+0xd0/0xd0 [ 110.401036][ T4201] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 110.406947][ T4201] ? _raw_spin_unlock+0x40/0x40 [ 110.411917][ T4201] ? hci_le_meta_evt+0x12c0/0x3b80 [ 110.417041][ T4201] check_panic_on_warn+0x80/0xa0 [ 110.422004][ T4201] ? hci_le_meta_evt+0x12c0/0x3b80 [ 110.427130][ T4201] end_report+0x6d/0xf0 [ 110.431293][ T4201] kasan_report+0x102/0x130 [ 110.435805][ T4201] ? hci_le_meta_evt+0x12c0/0x3b80 [ 110.440927][ T4201] hci_le_meta_evt+0x12c0/0x3b80 [ 110.445871][ T4201] ? hci_event_packet+0x230/0x12f0 [ 110.450991][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 110.457064][ T4201] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 110.462705][ T4201] ? mark_lock+0x94/0x320 [ 110.467039][ T4201] ? mutex_unlock+0x10/0x10 [ 110.471553][ T4201] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 110.477535][ T4201] ? lock_chain_count+0x20/0x20 [ 110.482388][ T4201] ? __rwlock_init+0x140/0x140 [ 110.487152][ T4201] hci_event_packet+0xe05/0x12f0 [ 110.492094][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 110.497296][ T4201] ? rcu_lock_release+0x20/0x20 [ 110.502150][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 110.507356][ T4201] hci_rx_work+0x255/0xa10 [ 110.511781][ T4201] process_one_work+0x863/0x1000 [ 110.516729][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 110.522358][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 110.527643][ T4201] ? _raw_spin_lock_irq+0xab/0xe0 [ 110.532669][ T4201] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 110.538045][ T4201] ? wq_worker_running+0x97/0x170 [ 110.543075][ T4201] worker_thread+0xaa8/0x12a0 [ 110.547749][ T4201] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 110.553651][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 110.558851][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 110.564047][ T4201] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 110.569952][ T4201] kthread+0x436/0x520 [ 110.574017][ T4201] ? rcu_lock_release+0x20/0x20 [ 110.578869][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 110.583462][ T4201] ret_from_fork+0x1f/0x30 [ 110.587888][ T4201] [ 110.591166][ T4201] Kernel Offset: disabled [ 110.595496][ T4201] Rebooting in 86400 seconds..