last executing test programs: 1m6.688025545s ago: executing program 2 (id=159): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x106420, &(0x7f0000000b00)=ANY=[], 0xe, 0x2bd, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m5.56461079s ago: executing program 2 (id=163): r0 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 1m3.348612461s ago: executing program 2 (id=168): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xc4, 0x15, 0xfd3649826d894c67, 0x70bd28, 0x20000, {{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0xffffffffffffffff}, 0xbbb}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x2) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)) 1m2.330116127s ago: executing program 2 (id=171): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file2\x00', 0x404, &(0x7f00000005c0)={[{@block_validity}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@minixdf}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@mblk_io_submit}]}, 0x3, 0x42f, &(0x7f0000000d80)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m1.167728852s ago: executing program 3 (id=174): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120100003f7a7e40720c12009622010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000200)={0x60, 0x15}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1m1.104379231s ago: executing program 2 (id=175): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000107d1eb42d00000000000109022400010000000009040000010300020009210000000122040009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0x21, 0x42, {0x42, 0x22, "7d99af7d06636dc7fcdea82a801ae7df4779fcab0c669e650758549b29490fea06a9e72bf85872bc3b51f736cef364af31e39830a58706cfedb5a485a1193301"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 59.822308846s ago: executing program 3 (id=181): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xc4, 0x15, 0xfd3649826d894c67, 0x70bd28, 0x20000, {{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0xffffffffffffffff}, 0xbbb}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x2) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)) 58.35608141s ago: executing program 3 (id=184): openat$vcsu(0xffffffffffffff9c, &(0x7f0000002700), 0x88000, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 58.18450856s ago: executing program 3 (id=186): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file2\x00', 0x404, &(0x7f00000005c0)={[{@block_validity}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@minixdf}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@mblk_io_submit}]}, 0x3, 0x42f, &(0x7f0000000d80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 57.169382346s ago: executing program 1 (id=187): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) mknodat$null(r2, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x103) 57.024961145s ago: executing program 3 (id=188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x0, 0x10162, 0x0) 56.564742053s ago: executing program 2 (id=189): io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x2000000, 0x0, 0x0, 0x0, 0xf00, 0xffffffffffffffff, &(0x7f0000000000)="96", 0x1}]) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000040000000400000006"], 0x48) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)=@udp}, 0x20) 56.332725952s ago: executing program 32 (id=189): io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x2000000, 0x0, 0x0, 0x0, 0xf00, 0xffffffffffffffff, &(0x7f0000000000)="96", 0x1}]) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000040000000400000006"], 0x48) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)=@udp}, 0x20) 55.77519919s ago: executing program 3 (id=192): syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='dots,errors=continue,nodots,dmask=00000000000000000077777,nodots,dots,nodots,showexec,dots,sys_immutable,discard,dots,nodots,nodots,dots,nodots,dots,nfs,dots,dots,dots,dots,nodots,nodots,nodots,quiet,dots,nodots,gid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000O00000,erroRs=coe,uid<\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB=',\x00'], 0xfd, 0x1bf, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 55.501690029s ago: executing program 33 (id=192): syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='dots,errors=continue,nodots,dmask=00000000000000000077777,nodots,dots,nodots,showexec,dots,sys_immutable,discard,dots,nodots,nodots,dots,nodots,dots,nfs,dots,dots,dots,dots,nodots,nodots,nodots,quiet,dots,nodots,gid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000O00000,erroRs=coe,uid<\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB=',\x00'], 0xfd, 0x1bf, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 54.028995912s ago: executing program 1 (id=196): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x400) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000300)={0xee, 0x0, 0x100e, 0x7ff, 0xffffffff, 0x5, 0x4}) 53.798521282s ago: executing program 1 (id=198): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000000000062e169d46060015000400000014001680100008800c"], 0x38}}, 0x0) 53.663771041s ago: executing program 1 (id=199): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file2\x00', 0x404, &(0x7f00000005c0)={[{@block_validity}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@minixdf}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@mblk_io_submit}]}, 0x3, 0x42f, &(0x7f0000000d80)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 51.213676201s ago: executing program 1 (id=204): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, "00050000000000000000000000000700"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000002c0)) close_range(r0, 0xffffffffffffffff, 0x0) 48.919013582s ago: executing program 0 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffff]}, 0x0, 0x8) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8, 0x80800) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x1f, &(0x7f0000000140)={0x0, 0x0, 0x1}) read$FUSE(r3, &(0x7f0000001a00)={0x2020}, 0x2020) 47.896573817s ago: executing program 0 (id=209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xc4, 0x15, 0xfd3649826d894c67, 0x70bd28, 0x20000, {{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0xffffffffffffffff}, 0xbbb}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)) 46.850369493s ago: executing program 0 (id=212): r0 = socket$netlink(0x10, 0x3, 0x9) connect$netlink(r0, 0x0, 0x0) 46.778195723s ago: executing program 0 (id=213): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file2\x00', 0x404, &(0x7f00000005c0)={[{@block_validity}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@minixdf}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@mblk_io_submit}]}, 0x3, 0x42f, &(0x7f0000000d80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 45.795364119s ago: executing program 0 (id=215): mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}, {@cachetag={'cachetag', 0x3d, 'GPL\x00'}}]}}) setfsuid(0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 45.032705115s ago: executing program 1 (id=216): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES8=r0, @ANYRESDEC], 0x0) 44.835293475s ago: executing program 34 (id=216): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES8=r0, @ANYRESDEC], 0x0) 44.707939464s ago: executing program 0 (id=218): unshare(0x24040480) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000200)=0x2, 0x4) 44.331520943s ago: executing program 35 (id=218): unshare(0x24040480) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000200)=0x2, 0x4) 8.479663285s ago: executing program 4 (id=342): syz_mount_image$fuse(0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x12f, 0x12) 8.019439693s ago: executing program 8 (id=353): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xc4, 0x15, 0xfd3649826d894c67, 0x70bd28, 0x20000, {{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0xffffffffffffffff}, 0xbbb}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)) 7.066503909s ago: executing program 7 (id=348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000080)="b301", 0x2, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000140)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) readahead(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) writev(r2, 0x0, 0x0) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x0, &(0x7f0000000200)={[{@dyn}]}) 6.770527928s ago: executing program 7 (id=350): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xf}}], 0x1, 0x0) 6.573151807s ago: executing program 7 (id=352): mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@cachetag={'cachetag', 0x3d, 'GPL\x00'}}]}}) setfsuid(0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 5.443012823s ago: executing program 7 (id=358): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) mknodat$null(r3, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x103) 5.222496172s ago: executing program 6 (id=360): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x5, 0x4) recvmmsg(r0, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) 5.000639771s ago: executing program 6 (id=362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000080)="b301", 0x2, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000140)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) readahead(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) writev(r4, 0x0, 0x0) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x0, &(0x7f0000000200)={[{@dyn}]}) 4.103839217s ago: executing program 6 (id=364): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=@ipv6_newaddrlabel={0x30, 0x48, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1, 0x0, 0x0, 0x9e}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 3.988638867s ago: executing program 6 (id=365): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 3.951289956s ago: executing program 6 (id=366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="38020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1b02330050340900080211000001080211000000ffffffffffff"], 0x238}, 0x1, 0x0, 0x0, 0xc1}, 0x40) 3.834723396s ago: executing program 4 (id=367): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xc0, 0x0, 0x0, 0xee00}, {@in=@loopback, 0xfe, 0x3c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x0, 0x2, 0x2}, {0x11df}, {}, 0xffffffff, 0x0, 0xa, 0x3}}, 0xf0}}, 0x0) 3.834008966s ago: executing program 6 (id=377): syz_mount_image$fuse(0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x12f, 0x12) 3.700920056s ago: executing program 4 (id=369): recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2}, 0x100) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/237, 0xe}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2.441864541s ago: executing program 8 (id=373): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.32461891s ago: executing program 5 (id=374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_TYPE={0x8}]}}}]}]}], {0x14}}, 0x80}}, 0x0) 2.31000861s ago: executing program 4 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000080)="b301", 0x2, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000140)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) readahead(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) writev(r4, 0x0, 0x0) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x0, &(0x7f0000000200)={[{@dyn}]}) 2.13009109s ago: executing program 5 (id=376): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x149a83, 0xf0) 1.964651829s ago: executing program 5 (id=378): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000600)={{&(0x7f0000957000/0x4000)=nil, 0x4000}, 0x1}) 1.843186858s ago: executing program 5 (id=379): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r3, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) 1.525953587s ago: executing program 8 (id=380): sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="af51e0c7c29eee564d9428858b26d3c8cf", 0x11, 0x8880, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r0, &(0x7f00000001c0), 0x10) 1.382131326s ago: executing program 4 (id=381): mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@cachetag={'cachetag', 0x3d, 'GPL\x00'}}]}}) setfsuid(0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 1.264697876s ago: executing program 8 (id=382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffff]}, 0x0, 0x8) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8, 0x80800) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x1f, &(0x7f0000000140)={0x0, 0x0, 0x1}) read$FUSE(r0, &(0x7f0000001a00)={0x2020}, 0x2020) 1.129016255s ago: executing program 7 (id=383): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 1.119683145s ago: executing program 8 (id=384): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x1) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x5a) add_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) 251.813152ms ago: executing program 4 (id=385): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xc4, 0x15, 0xfd3649826d894c67, 0x70bd28, 0x20000, {{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0xffffffffffffffff}, 0xbbb}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)) 176.655621ms ago: executing program 5 (id=386): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 176.483001ms ago: executing program 8 (id=387): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0xfffffffb, 0x0, 0x0, 0xfffbffff, 0x4f77}, [@TCA_NETEM_LOSS={0x2c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x2b562c68, 0x3, 0x8001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7b1, 0x1, 0x8, 0x1}}]}]}}}]}, 0x78}}, 0x0) 73.140611ms ago: executing program 7 (id=388): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) 0s ago: executing program 5 (id=389): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="20061700"], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): eate hsr debugfs directory [ 48.289447][ T4030] device hsr_slave_0 entered promiscuous mode [ 48.337945][ T4030] device hsr_slave_1 entered promiscuous mode [ 48.397522][ T4030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.399685][ T4030] Cannot create hsr debugfs directory [ 48.435210][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.437073][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.444252][ T4031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.471130][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.473018][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.480265][ T4031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.539534][ T4022] device hsr_slave_0 entered promiscuous mode [ 48.577851][ T4022] device hsr_slave_1 entered promiscuous mode [ 48.617664][ T4022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.619773][ T4022] Cannot create hsr debugfs directory [ 48.699504][ T4031] device hsr_slave_0 entered promiscuous mode [ 48.737747][ T4031] device hsr_slave_1 entered promiscuous mode [ 48.777588][ T4031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.779724][ T4031] Cannot create hsr debugfs directory [ 48.907974][ T4034] Bluetooth: hci3: command 0x0409 tx timeout [ 48.910150][ T4034] Bluetooth: hci0: command 0x0409 tx timeout [ 48.987810][ T4034] Bluetooth: hci4: command 0x0409 tx timeout [ 48.989693][ T4034] Bluetooth: hci1: command 0x0409 tx timeout [ 48.991499][ T4034] Bluetooth: hci2: command 0x0409 tx timeout [ 49.008833][ T4029] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.064265][ T4029] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.099480][ T4029] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.140640][ T4029] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.225638][ T4023] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.306930][ T4023] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.367893][ T4023] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.424740][ T4023] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.474194][ T4022] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.511824][ T4022] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.560227][ T4022] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.636406][ T4022] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.669942][ T4031] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 49.709777][ T4031] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 49.749610][ T4031] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 49.796028][ T4031] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 49.917815][ T4030] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.950821][ T4030] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.980147][ T4030] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.049701][ T4030] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.110569][ T4029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.116248][ T4023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.133107][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.136128][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.149668][ T4023] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.166137][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.170016][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.176197][ T4029] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.184499][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.188665][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.192046][ T1598] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.194125][ T1598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.211684][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.230110][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.232940][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.235508][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.237406][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.241785][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.244494][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.246916][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.248822][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.252865][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.260736][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.267168][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.270926][ T1598] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.272900][ T1598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.283892][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.296979][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.316797][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.322454][ T4022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.333548][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.337225][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.341559][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.360006][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.363529][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.366881][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.370472][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.373353][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.376194][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.381215][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.394118][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.396772][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.400159][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.403183][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.405785][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.413300][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.425767][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.429226][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.432205][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.434786][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.437315][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.442190][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.449464][ T4022] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.453445][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.459397][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.477305][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.481948][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.484658][ T1598] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.486451][ T1598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.490856][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.493400][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.495890][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.510312][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.516131][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.526268][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.531010][ T1598] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.532998][ T1598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.545467][ T4030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.551586][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.573687][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.576513][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.586322][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.588362][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.592811][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.595695][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.601266][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.603218][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.605562][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.608988][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.624216][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.626431][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.646818][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.650528][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.653574][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.656173][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.663712][ T4030] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.676666][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.680702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.684119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.686928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.697138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.701380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.704164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.706964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.710927][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.712757][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.715295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.720676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.725590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.735065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.746630][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.753988][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.756700][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.758633][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.761337][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.764252][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.777181][ T4029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.788648][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.791348][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.794025][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.796134][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.803133][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.806483][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.810253][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.813141][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.836158][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.839369][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.842271][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.845021][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.848559][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.851102][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.857183][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.869369][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.905424][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.911639][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.915097][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.944234][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.947305][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.951297][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.955377][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.965826][ T4023] device veth0_vlan entered promiscuous mode [ 50.987661][ T4075] Bluetooth: hci0: command 0x041b tx timeout [ 50.989585][ T4075] Bluetooth: hci3: command 0x041b tx timeout [ 50.993313][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.995834][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.998928][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.004931][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.009244][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.012004][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.014570][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.018824][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.025219][ T4023] device veth1_vlan entered promiscuous mode [ 51.029064][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.075494][ T4075] Bluetooth: hci2: command 0x041b tx timeout [ 51.077304][ T4075] Bluetooth: hci1: command 0x041b tx timeout [ 51.080562][ T4075] Bluetooth: hci4: command 0x041b tx timeout [ 51.092152][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.094899][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.097995][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.101347][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.104756][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.106956][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.114144][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.116386][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.123963][ T4029] device veth0_vlan entered promiscuous mode [ 51.132668][ T4022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.136983][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.140546][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.154560][ T4029] device veth1_vlan entered promiscuous mode [ 51.162474][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.165257][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.170120][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.174350][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.194188][ T4023] device veth0_macvtap entered promiscuous mode [ 51.207987][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.211105][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.214096][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.216361][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.229479][ T4030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.236685][ T4023] device veth1_macvtap entered promiscuous mode [ 51.278220][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.280824][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.283572][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.286406][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.290653][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.295822][ T4029] device veth0_macvtap entered promiscuous mode [ 51.316641][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.320202][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.322864][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.332509][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.342737][ T4022] device veth0_vlan entered promiscuous mode [ 51.348170][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.350857][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.353615][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.356264][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.362079][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.364658][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.375731][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.381168][ T4029] device veth1_macvtap entered promiscuous mode [ 51.385121][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.395351][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.398993][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.402612][ T4022] device veth1_vlan entered promiscuous mode [ 51.416971][ T4023] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.420322][ T4023] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.423562][ T4023] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.425821][ T4023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.431096][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.433762][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.436346][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.440310][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.442914][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.452192][ T4030] device veth0_vlan entered promiscuous mode [ 51.483336][ T4030] device veth1_vlan entered promiscuous mode [ 51.485854][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.491425][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.495211][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.497313][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.501309][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.503823][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.506439][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.521046][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.523831][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.528125][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.531125][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.533720][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.536394][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.541574][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.544258][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.565764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.570373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.588962][ T4029] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.591350][ T4029] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.593740][ T4029] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.596013][ T4029] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.615603][ T4022] device veth0_macvtap entered promiscuous mode [ 51.621051][ T4022] device veth1_macvtap entered promiscuous mode [ 51.674516][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.678506][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.681156][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.683934][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.702068][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.704646][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.717157][ T4031] device veth0_vlan entered promiscuous mode [ 51.722142][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.724966][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.728797][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.731520][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.735413][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.742702][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.744983][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.752530][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.755808][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.759696][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.763938][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.768196][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.774308][ T4030] device veth0_macvtap entered promiscuous mode [ 51.788843][ T4030] device veth1_macvtap entered promiscuous mode [ 51.824882][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.829245][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.831970][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.834786][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.838799][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.841637][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.845867][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.853219][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.856072][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.859532][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.862265][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.866058][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.873609][ T4022] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.875996][ T4022] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.879838][ T4022] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.882114][ T4022] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.887038][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.891446][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.894114][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.896865][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.900244][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.902914][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.909884][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.912372][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.917218][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.917218][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.920108][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.920127][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.920140][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.920153][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.921468][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.943967][ T4031] device veth1_vlan entered promiscuous mode [ 51.964378][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.966976][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.969535][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.972237][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.974958][ T1598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.975798][ T4030] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.977105][ T1598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.981148][ T4030] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.983959][ T4030] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.986372][ T4030] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.995689][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.103862][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.106159][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.137684][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.140497][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.152424][ T4031] device veth0_macvtap entered promiscuous mode [ 52.164446][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.167280][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.174014][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.216011][ T4031] device veth1_macvtap entered promiscuous mode [ 52.225307][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.228415][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.231410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.234245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.259227][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.262300][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.264949][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.297021][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.300846][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.303698][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.306500][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.321990][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.326797][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.357534][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.360483][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.380134][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.383158][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.385861][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.398728][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.401658][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.404471][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.406950][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.416325][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.424179][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.447068][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.451312][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.462416][ T1598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.464626][ T1598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.468577][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.508569][ T4031] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.510961][ T4031] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.534534][ T4104] loop1: detected capacity change from 0 to 32768 [ 52.538036][ T4031] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.540368][ T4031] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.557932][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.565423][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.569722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.684170][ T4104] (syz.1.2,4104,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 52.730550][ T4104] (syz.1.2,4104,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 52.757144][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.768068][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.771044][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.783935][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.786151][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.789632][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.026041][ T4113] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 53.496496][ T4075] Bluetooth: hci3: command 0x040f tx timeout [ 53.499353][ T4075] Bluetooth: hci0: command 0x040f tx timeout [ 53.501112][ T4075] Bluetooth: hci4: command 0x040f tx timeout [ 53.502821][ T4075] Bluetooth: hci1: command 0x040f tx timeout [ 53.504529][ T4075] Bluetooth: hci2: command 0x040f tx timeout [ 53.573037][ T4104] JBD2: Ignoring recovery information on journal [ 53.639114][ T4104] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 53.840443][ T4119] binder: 4111:4119 ioctl c0306201 0 returned -14 [ 54.637063][ T4112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.650479][ T4112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.665675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.697008][ T4023] ocfs2: Unmounting device (7,1) on (node local) [ 54.824055][ T4131] udc-core: couldn't find an available UDC or it's busy [ 54.825939][ T4131] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.958036][ T4132] loop3: detected capacity change from 0 to 4096 [ 55.043871][ T4134] loop1: detected capacity change from 0 to 512 [ 55.087630][ T4132] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 55.250373][ T4134] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 55.601910][ T4123] loop2: detected capacity change from 0 to 32768 [ 55.679029][ T4084] Bluetooth: hci2: command 0x0419 tx timeout [ 55.681035][ T4084] Bluetooth: hci1: command 0x0419 tx timeout [ 55.689138][ T4123] XFS: ikeep mount option is deprecated. [ 55.690453][ T4084] Bluetooth: hci4: command 0x0419 tx timeout [ 55.690754][ T4123] XFS: attr2 mount option is deprecated. [ 55.692320][ T4084] Bluetooth: hci0: command 0x0419 tx timeout [ 55.695351][ T4084] Bluetooth: hci3: command 0x0419 tx timeout [ 55.898714][ T4150] loop1: detected capacity change from 0 to 2048 [ 55.936771][ T4123] XFS (loop2): Mounting V5 Filesystem [ 56.059970][ T4150] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.251509][ T4150] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.278091][ T4123] XFS (loop2): Ending clean mount [ 56.296717][ T4123] XFS (loop2): Quotacheck needed: Please wait. [ 56.454249][ T4159] loop1: detected capacity change from 0 to 64 [ 56.458140][ T4123] XFS (loop2): Quotacheck: Done. [ 56.716810][ T4029] XFS (loop2): Unmounting Filesystem [ 57.135294][ T4171] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 59.152344][ T4187] binder: 4184:4187 ioctl c0306201 0 returned -14 [ 60.133498][ T4175] loop3: detected capacity change from 0 to 32768 [ 60.205089][ T4175] (syz.3.18,4175,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 60.242783][ T4175] (syz.3.18,4175,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 60.265984][ T4183] loop1: detected capacity change from 0 to 32768 [ 60.285470][ T4175] JBD2: Ignoring recovery information on journal [ 60.364487][ T4175] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 60.372568][ T4183] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.22 (4183) [ 60.440398][ T4190] loop2: detected capacity change from 0 to 32768 [ 60.453697][ T4183] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 60.472550][ T4183] BTRFS info (device loop1): enabling disk space caching [ 60.474701][ T4183] BTRFS info (device loop1): enabling auto defrag [ 60.486213][ T4183] BTRFS info (device loop1): doing ref verification [ 60.488864][ T4183] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 60.507649][ T4183] BTRFS info (device loop1): use lzo compression, level 0 [ 60.509854][ T4183] BTRFS info (device loop1): force clearing of disk cache [ 60.516124][ T4190] read_mapping_page failed! [ 60.520571][ T4190] jfs_mount: dbMount failed w/rc = -5 [ 60.521560][ T4183] BTRFS info (device loop1): disabling disk space caching [ 60.522401][ T4190] Mount JFS Failure: -5 [ 60.525122][ T4183] BTRFS info (device loop1): has skinny extents [ 60.535195][ T4190] jfs_mount failed w/return code = -5 [ 60.720771][ T4183] BTRFS info (device loop1): enabling ssd optimizations [ 60.725380][ T4183] BTRFS info (device loop1): clearing free space tree [ 60.737697][ T4183] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 60.740580][ T4183] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 60.760637][ T4022] ocfs2: Unmounting device (7,3) on (node local) [ 61.043884][ T4216] loop0: detected capacity change from 0 to 4096 [ 61.165639][ T4216] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 61.864824][ T4221] loop4: detected capacity change from 0 to 2048 [ 62.014522][ T4221] EXT4-fs (loop4): fragment/cluster size (32768) != block size (2048) [ 62.085938][ T4232] loop3: detected capacity change from 0 to 2048 [ 62.594092][ T4236] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 63.070253][ T4232] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.280737][ T4232] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.389764][ T4248] loop4: detected capacity change from 0 to 64 [ 63.440979][ T4248] ======================================================= [ 63.440979][ T4248] WARNING: The mand mount option has been deprecated and [ 63.440979][ T4248] and is ignored by this kernel. Remove the mand [ 63.440979][ T4248] option from the mount to silence this warning. [ 63.440979][ T4248] ======================================================= [ 63.767162][ T4257] binder: 4251:4257 ioctl c0306201 0 returned -14 [ 64.814824][ T4264] loop4: detected capacity change from 0 to 2048 [ 64.864644][ T4264] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 64.873695][ T4014] udevd[4014]: incorrect nilfs2 checksum on /dev/loop4 [ 64.922162][ T4014] udevd[4014]: incorrect nilfs2 checksum on /dev/loop4 [ 64.935133][ T4265] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.266647][ T4260] loop3: detected capacity change from 0 to 32768 [ 65.281343][ T4262] loop2: detected capacity change from 0 to 32768 [ 65.337513][ T4260] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.38 (4260) [ 65.339099][ T4262] (syz.2.37,4262,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 65.357131][ T4262] (syz.2.37,4262,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 65.373788][ T4260] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 65.376125][ T4260] BTRFS info (device loop3): enabling disk space caching [ 65.381248][ T4260] BTRFS info (device loop3): enabling auto defrag [ 65.382918][ T4260] BTRFS info (device loop3): doing ref verification [ 65.384697][ T4260] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 65.387060][ T4260] BTRFS info (device loop3): use lzo compression, level 0 [ 65.392864][ T4262] JBD2: Ignoring recovery information on journal [ 65.410959][ T4260] BTRFS info (device loop3): force clearing of disk cache [ 65.412856][ T4260] BTRFS info (device loop3): disabling disk space caching [ 65.414846][ T4260] BTRFS info (device loop3): has skinny extents [ 65.498439][ T4262] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 65.735786][ T4029] ocfs2: Unmounting device (7,2) on (node local) [ 65.772113][ T4260] BTRFS info (device loop3): enabling ssd optimizations [ 65.819681][ T4260] BTRFS info (device loop3): clearing free space tree [ 65.821655][ T4260] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 65.828909][ T4260] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 67.180912][ T4300] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 67.547370][ C0] sched: RT throttling activated [ 68.049704][ T4307] loop4: detected capacity change from 0 to 2048 [ 68.146240][ T4307] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.155598][ T4318] loop3: detected capacity change from 0 to 4096 [ 68.191763][ T4307] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 68.267851][ T4318] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 68.344323][ T4323] udc-core: couldn't find an available UDC or it's busy [ 68.354358][ T4323] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 70.215102][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.217172][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.789352][ T4334] loop4: detected capacity change from 0 to 32768 [ 70.833661][ T4334] (syz.4.52,4334,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 70.834724][ T4332] loop3: detected capacity change from 0 to 32768 [ 70.844992][ T4334] (syz.4.52,4334,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 70.872224][ T4334] JBD2: Ignoring recovery information on journal [ 70.942900][ T4338] loop0: detected capacity change from 0 to 32768 [ 70.956407][ T4334] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 70.967712][ T4332] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.51 (4332) [ 71.013640][ T4332] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 71.016115][ T4332] BTRFS info (device loop3): force zlib compression, level 3 [ 71.089502][ T4332] BTRFS info (device loop3): force clearing of disk cache [ 71.091939][ T4332] BTRFS info (device loop3): setting nodatasum [ 71.094390][ T4332] BTRFS info (device loop3): allowing degraded mounts [ 71.097697][ T4332] BTRFS info (device loop3): enabling disk space caching [ 71.112479][ T4338] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.53 (4338) [ 71.121501][ T4332] BTRFS info (device loop3): disk space caching is enabled [ 71.123591][ T4332] BTRFS info (device loop3): has skinny extents [ 71.336772][ T4031] ocfs2: Unmounting device (7,4) on (node local) [ 71.568136][ T4338] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 71.570588][ T4338] BTRFS info (device loop0): enabling disk space caching [ 71.572554][ T4338] BTRFS info (device loop0): enabling auto defrag [ 71.574291][ T4338] BTRFS info (device loop0): doing ref verification [ 71.638708][ T4332] BTRFS info (device loop3): clearing free space tree [ 71.640642][ T4332] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 71.643305][ T4332] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 71.648596][ T4338] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 71.651163][ T4338] BTRFS info (device loop0): use lzo compression, level 0 [ 71.653190][ T4338] BTRFS info (device loop0): force clearing of disk cache [ 71.655074][ T4338] BTRFS info (device loop0): disabling disk space caching [ 71.765734][ T4338] BTRFS info (device loop0): has skinny extents [ 71.846683][ T4332] BTRFS error (device loop3): balance: invalid convert system profile raid5 [ 72.098455][ T4375] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 72.849836][ T4338] BTRFS info (device loop0): enabling ssd optimizations [ 72.865588][ T4338] BTRFS info (device loop0): clearing free space tree [ 72.870630][ T4338] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 72.873392][ T4338] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 73.882868][ T4400] loop4: detected capacity change from 0 to 2048 [ 74.027015][ T4400] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.116184][ T4400] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.313471][ T4407] loop0: detected capacity change from 0 to 4096 [ 74.547735][ T4407] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 74.702835][ T4422] binder: 4411:4422 ioctl c0306201 0 returned -14 [ 75.214144][ T21] cfg80211: failed to load regulatory.db [ 76.543308][ T4436] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 78.695755][ T4432] loop1: detected capacity change from 0 to 32768 [ 78.859737][ T4451] loop3: detected capacity change from 0 to 2048 [ 79.077987][ T4451] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.082416][ T4452] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 79.125472][ T4451] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 79.498986][ T4447] loop4: detected capacity change from 0 to 32768 [ 79.571490][ T4447] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.71 (4447) [ 79.591291][ T4447] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 79.603027][ T4447] BTRFS info (device loop4): enabling disk space caching [ 79.605133][ T4447] BTRFS info (device loop4): enabling auto defrag [ 79.617745][ T4447] BTRFS info (device loop4): doing ref verification [ 79.620939][ T4447] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 79.634439][ T4447] BTRFS info (device loop4): use lzo compression, level 0 [ 79.791960][ T4447] BTRFS info (device loop4): force clearing of disk cache [ 79.794323][ T4447] BTRFS info (device loop4): disabling disk space caching [ 79.798901][ T4447] BTRFS info (device loop4): has skinny extents [ 79.947434][ T4470] binder: 4463:4470 ioctl c0306201 0 returned -14 [ 80.688352][ T4476] syz.0.77 uses obsolete (PF_INET,SOCK_PACKET) [ 80.714085][ T4476] device syzkaller1 entered promiscuous mode [ 80.819586][ T4486] netlink: 36 bytes leftover after parsing attributes in process `syz.3.80'. [ 80.876444][ T4447] BTRFS info (device loop4): enabling ssd optimizations [ 80.880214][ T4447] BTRFS info (device loop4): clearing free space tree [ 80.882030][ T4447] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 80.927602][ T4478] loop2: detected capacity change from 0 to 4096 [ 80.931288][ T4447] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 80.980060][ T4478] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 81.030168][ T4461] loop1: detected capacity change from 0 to 32768 [ 81.147516][ T4461] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.73 (4461) [ 81.517133][ T4437] Bluetooth: (null): Too short H5 packet [ 81.605115][ T4437] Bluetooth: (null): Invalid header checksum [ 81.807309][ T4437] Bluetooth: (null): Invalid header checksum [ 82.809855][ T4511] loop3: detected capacity change from 0 to 2048 [ 83.678011][ T4511] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.882769][ T4510] loop1: detected capacity change from 0 to 4096 [ 83.946281][ T4510] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 84.031419][ T4523] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 85.667615][ T4520] loop2: detected capacity change from 0 to 32768 [ 85.733372][ T4520] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.85 (4520) [ 85.777281][ T4520] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 85.787066][ T4520] BTRFS info (device loop2): force zlib compression, level 3 [ 85.803404][ T4520] BTRFS info (device loop2): force clearing of disk cache [ 85.817672][ T4520] BTRFS info (device loop2): setting nodatasum [ 85.826832][ T4520] BTRFS info (device loop2): allowing degraded mounts [ 85.840485][ T4520] BTRFS info (device loop2): enabling disk space caching [ 85.852969][ T4520] BTRFS info (device loop2): disk space caching is enabled [ 85.865065][ T4520] BTRFS info (device loop2): has skinny extents [ 86.204253][ T4520] BTRFS info (device loop2): clearing free space tree [ 86.206383][ T4520] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 86.209537][ T4520] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 86.244007][ T4532] loop1: detected capacity change from 0 to 40427 [ 86.289796][ T4520] BTRFS error (device loop2): balance: invalid convert system profile raid5 [ 86.315891][ T4532] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 86.738092][ T4557] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 87.397040][ T4563] binder: 4560:4563 ioctl c0306201 0 returned -14 [ 90.716375][ T4579] loop0: detected capacity change from 0 to 4096 [ 90.757752][ T4579] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 90.831642][ T4588] IPVS: set_ctl: invalid protocol: 42 10.1.1.2:20004 [ 92.120712][ T4594] loop3: detected capacity change from 0 to 2048 [ 92.508884][ T4599] binder: 4595:4599 ioctl c0306201 0 returned -14 [ 93.446092][ T4594] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.479254][ T4608] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 93.596140][ T4586] loop4: detected capacity change from 0 to 32768 [ 93.651417][ T4586] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.101 (4586) [ 93.707246][ T4586] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 93.712193][ T4586] BTRFS info (device loop4): force zlib compression, level 3 [ 93.720220][ T4586] BTRFS info (device loop4): force clearing of disk cache [ 93.730379][ T4586] BTRFS info (device loop4): setting nodatasum [ 93.739654][ T4586] BTRFS info (device loop4): allowing degraded mounts [ 93.748577][ T4586] BTRFS info (device loop4): enabling disk space caching [ 93.758351][ T4586] BTRFS info (device loop4): disk space caching is enabled [ 93.765848][ T4586] BTRFS info (device loop4): has skinny extents [ 93.767197][ T4617] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.893732][ T4586] BTRFS error (device loop4): open_ctree failed [ 94.399030][ T4301] Bluetooth: (null): Too short H5 packet [ 94.402261][ T4301] Bluetooth: (null): Invalid header checksum [ 94.404783][ T4301] Bluetooth: (null): Invalid header checksum [ 94.608434][ T4301] Bluetooth: (null): Invalid header checksum [ 94.740774][ T4301] Bluetooth: (null): Invalid header checksum [ 94.867870][ T4301] Bluetooth: (null): Invalid header checksum [ 95.324317][ T4648] loop0: detected capacity change from 0 to 4096 [ 96.126752][ T4648] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 97.415007][ T4661] binder: 4656:4661 ioctl c0306201 0 returned -14 [ 100.221952][ T4666] loop4: detected capacity change from 0 to 40427 [ 100.274637][ T4666] F2FS-fs (loop4): Unrecognized mount option "errors=continue" or missing value [ 101.212719][ T4513] Bluetooth: (null): Too short H5 packet [ 101.235787][ T4513] Bluetooth: (null): Invalid header checksum [ 101.263039][ T4513] Bluetooth: (null): Invalid header checksum [ 101.409715][ T4676] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 103.013585][ T4696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 103.024220][ T4675] loop0: detected capacity change from 0 to 32768 [ 103.044906][ T4696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 103.066682][ T4675] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.121 (4675) [ 103.070876][ T4696] Zero length message leads to an empty skb [ 103.084267][ T4695] loop4: detected capacity change from 0 to 2048 [ 103.213348][ T4698] binder: 4689:4698 ioctl c0306201 0 returned -14 [ 103.900040][ T4675] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 103.902744][ T4675] BTRFS info (device loop0): force zlib compression, level 3 [ 103.904845][ T4675] BTRFS info (device loop0): force clearing of disk cache [ 103.906977][ T4675] BTRFS info (device loop0): setting nodatasum [ 103.917542][ T4675] BTRFS info (device loop0): allowing degraded mounts [ 103.919817][ T4675] BTRFS info (device loop0): enabling disk space caching [ 103.965887][ T4675] BTRFS info (device loop0): disk space caching is enabled [ 103.989961][ T4675] BTRFS info (device loop0): has skinny extents [ 104.052934][ T4695] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.532504][ T4675] BTRFS error (device loop0): open_ctree failed [ 105.630704][ T4727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.135'. [ 105.633389][ T4727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.135'. [ 105.636238][ T4727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.135'. [ 105.643700][ T4727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.135'. [ 105.694515][ T4016] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by udevd (4016) [ 105.815407][ T4732] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 107.312356][ T4112] Bluetooth: (null): Too short H5 packet [ 107.314640][ T4112] Bluetooth: (null): Invalid header checksum [ 107.316804][ T4112] Bluetooth: (null): Invalid header checksum [ 107.606760][ T4746] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 109.287212][ T4756] loop2: detected capacity change from 0 to 2048 [ 109.419147][ T4760] binder: 4757:4760 ioctl c0306201 0 returned -14 [ 110.037896][ T4756] hpfs: Bad version 183,140. Mount readonly to go around [ 110.053800][ T4756] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz [ 110.580854][ T4782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.152'. [ 110.583688][ T4782] netlink: 'syz.3.152': attribute type 1 has an invalid length. [ 110.870017][ T4112] Bluetooth: (null): Too short H5 packet [ 110.873622][ T4112] Bluetooth: (null): Invalid header checksum [ 110.909724][ T4112] Bluetooth: (null): Invalid header checksum [ 110.920188][ T4112] Bluetooth: (null): Invalid header checksum [ 110.999119][ T4112] Bluetooth: (null): Invalid header checksum [ 111.132768][ T136] Bluetooth: (null): Invalid header checksum [ 112.385174][ T4790] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 112.726262][ T4801] loop2: detected capacity change from 0 to 256 [ 112.857596][ T4807] binder: 4797:4807 ioctl c0306201 0 returned -14 [ 115.659990][ T4822] loop1: detected capacity change from 0 to 2048 [ 115.700409][ T4822] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.288387][ T4074] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.316868][ T136] Bluetooth: (null): Too short H5 packet [ 116.318774][ T136] Bluetooth: (null): Invalid header checksum [ 116.320538][ T136] Bluetooth: (null): Invalid header checksum [ 116.414887][ T4839] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 116.420218][ T4301] Bluetooth: (null): Invalid header checksum [ 116.528602][ T4301] Bluetooth: (null): Invalid header checksum [ 116.638605][ T4513] Bluetooth: (null): Invalid header checksum [ 116.698658][ T4074] usb 1-1: config 2 has an invalid interface number: 19 but max is 0 [ 116.701784][ T4074] usb 1-1: config 2 has no interface number 0 [ 116.703634][ T4074] usb 1-1: config 2 interface 19 has no altsetting 0 [ 116.712697][ T4833] loop4: detected capacity change from 0 to 32768 [ 116.748582][ T136] Bluetooth: (null): Invalid header checksum [ 116.785968][ T4833] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.169 (4833) [ 116.830373][ T4833] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 116.834117][ T4833] BTRFS info (device loop4): using free space tree [ 116.846251][ T4833] BTRFS info (device loop4): has skinny extents [ 116.869610][ T4074] usb 1-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=f3.51 [ 116.872002][ T4074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.876428][ T4074] usb 1-1: Product: syz [ 116.881199][ T4074] usb 1-1: Manufacturer: syz [ 116.882491][ T4074] usb 1-1: SerialNumber: syz [ 116.995232][ T4847] loop2: detected capacity change from 0 to 512 [ 117.019984][ T4847] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 117.021985][ T4847] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 117.025596][ T4847] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 117.177019][ T4847] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 117.194132][ T4847] EXT4-fs (loop2): 1 truncate cleaned up [ 117.195788][ T4847] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000006c,minixdf,journal_dev=0x0000000000000004,jqfmt=vfsold,mblk_io_submit,,errors=continue. Quota mode: none. [ 117.288628][ T4074] hub 1-1:2.19: bad descriptor, ignoring hub [ 117.290428][ T4074] hub: probe of 1-1:2.19 failed with error -5 [ 117.293061][ T4074] f81232 1-1:2.19: f81232 converter detected [ 117.572955][ T4074] usb 1-1: f81232 converter now attached to ttyUSB0 [ 118.142015][ T4029] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /38/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 118.157639][ T4074] usb 1-1: USB disconnect, device number 2 [ 118.168844][ T4074] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 118.171657][ T4074] f81232 1-1:2.19: device disconnected [ 118.178044][ T4865] udc-core: couldn't find an available UDC or it's busy [ 118.179902][ T4865] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 118.195640][ T4833] BTRFS info (device loop4): enabling ssd optimizations [ 118.199470][ T4029] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 118.210158][ T4029] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /38/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 118.248139][ T4029] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 118.263853][ T4029] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /38/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 118.284159][ T4029] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 118.305506][ T4029] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /38/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 118.334591][ T4029] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 118.355846][ T4029] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /38/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 118.394206][ T4029] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 120.913730][ T4898] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 121.113945][ T4904] loop3: detected capacity change from 0 to 512 [ 121.265192][ T4904] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 121.267314][ T4904] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 122.067695][ T4904] EXT4-fs (loop3): 1 truncate cleaned up [ 122.069303][ T4904] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000006c,minixdf,journal_dev=0x0000000000000004,jqfmt=vfsold,mblk_io_submit,,errors=continue. Quota mode: none. [ 122.232139][ T4910] loop1: detected capacity change from 0 to 2048 [ 122.276662][ T4022] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /37/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 122.297253][ T4022] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 122.306317][ T4022] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /37/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 122.341664][ T4022] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 122.374547][ T4022] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /37/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 122.388832][ T4910] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.511751][ T4022] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 122.529892][ T4022] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /37/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 122.551784][ T4022] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 122.562306][ T4022] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /37/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 122.571390][ T4022] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 122.669802][ T4915] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.920947][ T136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.996244][ T136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.044878][ T136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.086608][ T136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.893465][ T4918] loop4: detected capacity change from 0 to 32768 [ 124.932966][ T4919] chnl_net:caif_netlink_parms(): no params data found [ 125.227578][ T4721] Bluetooth: hci0: command 0x0409 tx timeout [ 125.308379][ T4919] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.310275][ T4919] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.313052][ T4919] device bridge_slave_0 entered promiscuous mode [ 125.322694][ T4919] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.328249][ T4946] Bluetooth: (null): Too short H5 packet [ 125.329735][ T4946] Bluetooth: (null): Invalid header checksum [ 125.331382][ T4946] Bluetooth: (null): Invalid header checksum [ 125.338718][ T4919] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.341404][ T4919] device bridge_slave_1 entered promiscuous mode [ 125.592623][ T4112] Bluetooth: (null): Invalid header checksum [ 125.594524][ T148] Bluetooth: (null): Invalid header checksum [ 125.629400][ T4919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.399562][ T4919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.455870][ T4982] loop1: detected capacity change from 0 to 512 [ 126.569607][ T4919] team0: Port device team_slave_0 added [ 126.573913][ T4919] team0: Port device team_slave_1 added [ 126.617405][ T4982] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 126.619445][ T4982] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 126.656771][ T4982] EXT4-fs (loop1): 1 truncate cleaned up [ 126.658737][ T4982] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000006c,minixdf,journal_dev=0x0000000000000004,jqfmt=vfsold,mblk_io_submit,,errors=continue. Quota mode: none. [ 127.617614][ T3321] Bluetooth: hci3: command 0x0409 tx timeout [ 127.620746][ T3321] Bluetooth: hci0: command 0x041b tx timeout [ 128.082748][ T4919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.084721][ T4919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.097511][ T4919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.103646][ T4023] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /40/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 128.266668][ T5003] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 128.282959][ T4023] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 128.308411][ T4023] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /40/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 128.316089][ T4919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.763704][ T4023] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 129.781936][ T4919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.796331][ T4919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.815426][ T4023] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /40/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 129.822375][ T4023] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 129.842063][ T4226] Bluetooth: hci0: command 0x040f tx timeout [ 129.844106][ T4226] Bluetooth: hci3: command 0x041b tx timeout [ 129.988110][ T4023] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /40/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 129.995061][ T4023] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 130.006796][ T4023] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /40/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 130.032624][ T5010] loop4: detected capacity change from 0 to 2048 [ 130.088278][ T4023] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 130.148535][ T5010] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.357712][ T4919] device hsr_slave_0 entered promiscuous mode [ 130.388384][ T4919] device hsr_slave_1 entered promiscuous mode [ 130.487671][ T5028] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 130.527603][ T4919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.529630][ T4919] Cannot create hsr debugfs directory [ 131.118785][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.122313][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.639228][ T136] device hsr_slave_0 left promiscuous mode [ 131.679239][ T136] device hsr_slave_1 left promiscuous mode [ 131.759166][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.761429][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.764694][ T4301] Bluetooth: (null): Too short H5 packet [ 131.766380][ T4301] Bluetooth: (null): Invalid header checksum [ 131.768823][ T4301] Bluetooth: (null): Invalid header checksum [ 131.772522][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.777960][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.783312][ T136] device bridge_slave_1 left promiscuous mode [ 131.788242][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.851354][ T136] device bridge_slave_0 left promiscuous mode [ 131.853475][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.867513][ T3321] Bluetooth: hci3: command 0x040f tx timeout [ 131.868537][ T148] Bluetooth: (null): Invalid header checksum [ 131.869424][ T3321] Bluetooth: hci0: command 0x0419 tx timeout [ 131.977859][ T1598] Bluetooth: (null): Invalid header checksum [ 131.988368][ T136] device veth1_macvtap left promiscuous mode [ 131.990520][ T136] device veth0_macvtap left promiscuous mode [ 131.992311][ T136] device veth1_vlan left promiscuous mode [ 131.994306][ T136] device veth0_vlan left promiscuous mode [ 132.088688][ T1598] Bluetooth: (null): Invalid header checksum [ 132.202605][ T4301] Bluetooth: (null): Invalid header checksum [ 132.508317][ T136] team0 (unregistering): Port device team_slave_1 removed [ 133.287991][ T136] team0 (unregistering): Port device team_slave_0 removed [ 133.302437][ T5044] loop0: detected capacity change from 0 to 512 [ 133.347853][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.349531][ T5044] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 133.352029][ T5044] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.390310][ T5044] EXT4-fs (loop0): 1 truncate cleaned up [ 133.391960][ T5044] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000006c,minixdf,journal_dev=0x0000000000000004,jqfmt=vfsold,mblk_io_submit,,errors=continue. Quota mode: none. [ 133.475526][ T4030] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /43/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 133.503033][ T4030] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 133.513052][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.515133][ T4030] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /43/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 133.524622][ T4030] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 133.531492][ T4030] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /43/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 133.538506][ T4030] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 133.544513][ T4030] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /43/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 133.552902][ T4030] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 133.563164][ T4030] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /43/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 133.570308][ T4030] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 133.765258][ T136] bond0 (unregistering): Released all slaves [ 133.953288][ T4947] chnl_net:caif_netlink_parms(): no params data found [ 133.958142][ T4635] Bluetooth: hci3: command 0x0419 tx timeout [ 134.102930][ T4947] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.105078][ T4947] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.108536][ T4947] device bridge_slave_0 entered promiscuous mode [ 134.121732][ T4947] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.126503][ T4947] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.130945][ T4947] device bridge_slave_1 entered promiscuous mode [ 134.279470][ T4947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.306859][ T4947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.380005][ T4947] team0: Port device team_slave_0 added [ 134.382491][ T4919] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 134.442949][ T4919] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 134.484792][ T4947] team0: Port device team_slave_1 added [ 134.487304][ T4919] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 134.549653][ T4919] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 134.721740][ T4947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.723995][ T4947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.760184][ T4947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.802638][ T4947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.804756][ T4947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.847607][ T4947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.130692][ T4947] device hsr_slave_0 entered promiscuous mode [ 135.174405][ T4947] device hsr_slave_1 entered promiscuous mode [ 135.501348][ T4919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.623448][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.626322][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.638431][ T4188] Bluetooth: (null): Too short H5 packet [ 135.639969][ T4188] Bluetooth: (null): Invalid header checksum [ 135.641568][ T4188] Bluetooth: (null): Invalid header checksum [ 135.650141][ T4919] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.747837][ T4188] Bluetooth: (null): Invalid header checksum [ 135.767261][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.770493][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.773236][ T4224] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.775182][ T4224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.780811][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.786865][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.792889][ T4224] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.794943][ T4224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.804405][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.858118][ T9] Bluetooth: (null): Invalid header checksum [ 135.893225][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.944842][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.970461][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.975366][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.978030][ T9] Bluetooth: (null): Invalid header checksum [ 135.985249][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.994429][ T5068] chnl_net:caif_netlink_parms(): no params data found [ 136.036699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.044887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.077765][ T9] Bluetooth: (null): Invalid header checksum [ 136.115401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.118990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.173227][ T4919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.185475][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.189708][ T4947] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 136.315267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.318479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.471388][ T4947] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 136.510100][ T4947] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 136.604573][ T5068] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.606585][ T5068] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.617673][ T5068] device bridge_slave_0 entered promiscuous mode [ 136.624282][ T5068] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.656138][ T5068] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.678235][ T5068] device bridge_slave_1 entered promiscuous mode [ 136.681475][ T4947] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 136.748085][ T4034] Bluetooth: hci1: command 0x0409 tx timeout [ 137.418293][ T5068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.430687][ T5068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.509225][ T5068] team0: Port device team_slave_0 added [ 137.519680][ T5068] team0: Port device team_slave_1 added [ 137.524602][ T4226] Bluetooth: hci2: command 0x0409 tx timeout [ 137.775913][ T5150] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 137.851441][ T5085] chnl_net:caif_netlink_parms(): no params data found [ 137.887300][ T5068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.890066][ T5068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.906688][ T5068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.951246][ T4919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.057069][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.059504][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.100542][ T5068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.102520][ T5068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.123303][ T5068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.382058][ T5068] device hsr_slave_0 entered promiscuous mode [ 138.431307][ T5068] device hsr_slave_1 entered promiscuous mode [ 138.467600][ T5068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.469727][ T5068] Cannot create hsr debugfs directory [ 138.793266][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.795266][ T5085] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.807659][ T5085] device bridge_slave_0 entered promiscuous mode [ 138.827968][ T4308] Bluetooth: hci1: command 0x041b tx timeout [ 139.452964][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.455858][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.459570][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.461639][ T5085] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.464425][ T5085] device bridge_slave_1 entered promiscuous mode [ 139.547574][ T4073] Bluetooth: hci2: command 0x041b tx timeout [ 139.608160][ T9] Bluetooth: (null): Too short H5 packet [ 139.609760][ T9] Bluetooth: (null): Invalid header checksum [ 139.611326][ T9] Bluetooth: (null): Invalid header checksum [ 139.718473][ T4301] Bluetooth: (null): Invalid header checksum [ 139.745335][ T136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.785547][ T5085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.811012][ T5085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.828170][ T4188] Bluetooth: (null): Invalid header checksum [ 139.836497][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.839989][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.853449][ T4919] device veth0_vlan entered promiscuous mode [ 139.861558][ T4947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.876751][ T136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.883060][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.885775][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.902922][ T4919] device veth1_vlan entered promiscuous mode [ 139.922153][ T136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.932585][ T5085] team0: Port device team_slave_0 added [ 139.951123][ T5085] team0: Port device team_slave_1 added [ 139.952218][ T4112] Bluetooth: (null): Invalid header checksum [ 139.984829][ T136] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.992463][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.994358][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.002498][ T5085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.013212][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.016753][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.027240][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.030774][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.033809][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.035762][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.043489][ T5085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.062598][ T4528] Bluetooth: (null): Invalid header checksum [ 140.078620][ T4947] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.096438][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.100142][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.102742][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.104617][ T4528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.111402][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.173085][ T5085] device hsr_slave_0 entered promiscuous mode [ 140.215456][ T5085] device hsr_slave_1 entered promiscuous mode [ 140.277981][ T5085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.280080][ T5085] Cannot create hsr debugfs directory [ 140.330017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.332834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.335680][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.337730][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.366496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.378547][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.381441][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.401857][ T4919] device veth0_macvtap entered promiscuous mode [ 140.406593][ T4919] device veth1_macvtap entered promiscuous mode [ 140.413165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.422990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.425580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.516379][ T136] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.560760][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.563419][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.566005][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.571827][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.574391][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.577199][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.579990][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.582732][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.586624][ T4919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.591952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.596065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.599176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.608214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.611207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.616311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.622626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.631440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.636496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.643344][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.646091][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.669582][ T136] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.682362][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.685231][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.690710][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.696999][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.703831][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.712505][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.716416][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.720878][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.725820][ T4919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.730777][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.737912][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.766588][ T136] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.779055][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.784567][ T4919] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.787149][ T4919] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.791087][ T4919] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.793367][ T4919] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.832362][ T136] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.898349][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.900619][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.916102][ T4308] Bluetooth: hci1: command 0x040f tx timeout [ 140.923043][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.940793][ T4112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.943031][ T4112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.947470][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.950853][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.953112][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.965042][ T4947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.043218][ T136] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.091740][ T136] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.144956][ T136] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.256806][ T136] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.275264][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.278394][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.313584][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.316223][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.325643][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.339035][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.346138][ T4947] device veth0_vlan entered promiscuous mode [ 141.628906][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 142.170560][ T4947] device veth1_vlan entered promiscuous mode [ 142.205007][ T4947] device veth0_macvtap entered promiscuous mode [ 142.225238][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.228873][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.233539][ T4947] device veth1_macvtap entered promiscuous mode [ 142.245609][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.250900][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.286216][ T5068] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 142.394427][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.397234][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.431460][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.434372][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.441615][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.444449][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.447120][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.460324][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.468350][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.471237][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.482280][ T4947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.496801][ T5068] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 142.551835][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.554943][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.620227][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.637737][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.640365][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.643199][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.673734][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.686876][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.696980][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.703656][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.706185][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.729095][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.738399][ T4947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.759682][ T5068] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 142.823444][ T5222] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 142.859717][ T5068] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 142.913554][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.917755][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.990708][ T4308] Bluetooth: hci1: command 0x0419 tx timeout [ 143.060725][ T4947] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.063143][ T4947] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.065460][ T4947] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.097516][ T4947] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.155686][ T5085] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 143.361898][ T5085] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 143.517993][ T1598] Bluetooth: (null): Too short H5 packet [ 143.519691][ T1598] Bluetooth: (null): Invalid header checksum [ 143.521481][ T1598] Bluetooth: (null): Invalid header checksum [ 143.627812][ T4528] Bluetooth: (null): Invalid header checksum [ 143.707474][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 143.737788][ T4528] Bluetooth: (null): Invalid header checksum [ 143.848325][ T4528] Bluetooth: (null): Invalid header checksum [ 143.853211][ T5085] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 143.920991][ T5085] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 143.959050][ T4528] Bluetooth: (null): Invalid header checksum [ 144.199178][ T1598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.201584][ T1598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.229131][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.401942][ T1598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.404236][ T1598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.423642][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.497756][ T5279] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 147.541088][ T5068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.655332][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.659299][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.664844][ T5068] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.004082][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.009079][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.016236][ T4112] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.018226][ T4112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.056710][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.068800][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.079997][ T4946] Bluetooth: (null): Too short H5 packet [ 148.081819][ T4946] Bluetooth: (null): Invalid header checksum [ 148.083674][ T4946] Bluetooth: (null): Invalid header checksum [ 148.086744][ T4112] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.088810][ T4112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.104475][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.120890][ T5085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.152420][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.155318][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.188747][ T1598] Bluetooth: (null): Invalid header checksum [ 148.195366][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.199209][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.203486][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.220001][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.238478][ T5085] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.254752][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.260402][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.278239][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.297812][ T1598] Bluetooth: (null): Invalid header checksum [ 148.310967][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.316628][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.327314][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.337079][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.351786][ T4112] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.353733][ T4112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.381807][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.407818][ T1598] Bluetooth: (null): Invalid header checksum [ 148.465108][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.468933][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.474337][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.486459][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.490047][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.492797][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.494778][ T4301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.546768][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.551799][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.577832][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.594377][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.605099][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.637100][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.653526][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.761820][ T5085] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.764653][ T5085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.805252][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.833428][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.836282][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.855173][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.883936][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.925631][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.928116][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.950944][ T5341] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 148.972185][ T5068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.736692][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.739149][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.754371][ T5085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.812454][ T5369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.260'. [ 152.116819][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.128291][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.177287][ T5389] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 152.932368][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.935170][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.938613][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.941114][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.972401][ T5068] device veth0_vlan entered promiscuous mode [ 153.000159][ T5068] device veth1_vlan entered promiscuous mode [ 153.124808][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.131436][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.238581][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.339818][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.346407][ T5085] device veth0_vlan entered promiscuous mode [ 154.259486][ T5068] device veth0_macvtap entered promiscuous mode [ 154.262417][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.264996][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.267788][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.312040][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.314750][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.323449][ T5085] device veth1_vlan entered promiscuous mode [ 154.562556][ T5068] device veth1_macvtap entered promiscuous mode [ 154.803192][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.806131][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.811602][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.814401][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.817030][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.227320][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.591382][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.594136][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.596729][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.599624][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.602258][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.605017][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.607757][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.610467][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.614642][ T5068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.661739][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.664663][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.671478][ T5085] device veth0_macvtap entered promiscuous mode [ 155.674556][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.681376][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.689946][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.692768][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.711561][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.714379][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.716910][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.722066][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.724656][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.748210][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.750896][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.753651][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.782239][ T5068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.856395][ T5436] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 155.883463][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.886987][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.979725][ T5445] rdma_op 0000000092d45096 conn xmit_rdma 0000000000000000 [ 156.005936][ T5085] device veth1_macvtap entered promiscuous mode [ 156.026836][ T5068] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.031649][ T5068] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.033925][ T5068] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.038543][ T5068] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.077586][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.080389][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.083039][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.159414][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.162499][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.165318][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.168008][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.170779][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.173460][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.176267][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.179398][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.185386][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.189006][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.191846][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.196191][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.282548][ T5457] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 156.315221][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.330558][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.344321][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.370584][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.383678][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.404124][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.407034][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.410272][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.413462][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.416182][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.419019][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.424308][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.427588][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.430229][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.435214][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.437599][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.441121][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.443986][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.452916][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.547889][ T5085] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.550336][ T5085] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.552866][ T5085] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.554982][ T5085] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.568847][ T1616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.571539][ T1616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.580007][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.684142][ T1616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.686581][ T1616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.775763][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.780074][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.783037][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.787992][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.855835][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.859155][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.911298][ T136] device hsr_slave_0 left promiscuous mode [ 158.938790][ T136] device hsr_slave_1 left promiscuous mode [ 159.007640][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.009843][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.012598][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.015815][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.021057][ T136] device bridge_slave_1 left promiscuous mode [ 159.025126][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.089055][ T136] device bridge_slave_0 left promiscuous mode [ 159.090968][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.152410][ T136] device hsr_slave_0 left promiscuous mode [ 159.177789][ T136] device hsr_slave_1 left promiscuous mode [ 159.257752][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.262043][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.265967][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.268236][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.270913][ T136] device bridge_slave_1 left promiscuous mode [ 159.272638][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.318678][ T136] device bridge_slave_0 left promiscuous mode [ 159.320939][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.363995][ T136] device hsr_slave_0 left promiscuous mode [ 159.407758][ T136] device hsr_slave_1 left promiscuous mode [ 159.487617][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.489622][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.492236][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.494247][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.496754][ T136] device bridge_slave_1 left promiscuous mode [ 159.499312][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.553381][ T136] device bridge_slave_0 left promiscuous mode [ 159.555150][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.718011][ T136] device veth1_macvtap left promiscuous mode [ 159.719763][ T136] device veth0_macvtap left promiscuous mode [ 159.721497][ T136] device veth1_vlan left promiscuous mode [ 159.723274][ T136] device veth0_vlan left promiscuous mode [ 159.837777][ T136] device veth1_macvtap left promiscuous mode [ 159.839419][ T136] device veth0_macvtap left promiscuous mode [ 159.841097][ T136] device veth1_vlan left promiscuous mode [ 159.842739][ T136] device veth0_vlan left promiscuous mode [ 159.917856][ T136] device veth1_macvtap left promiscuous mode [ 159.919515][ T136] device veth0_macvtap left promiscuous mode [ 159.921161][ T136] device veth1_vlan left promiscuous mode [ 159.922852][ T136] device veth0_vlan left promiscuous mode [ 160.414627][ T136] team0 (unregistering): Port device team_slave_1 removed [ 160.424951][ T136] team0 (unregistering): Port device team_slave_0 removed [ 160.443062][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.485156][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.508090][ T4071] Bluetooth: hci3: command 0x0409 tx timeout [ 160.625459][ T136] bond0 (unregistering): Released all slaves [ 160.830399][ T136] team0 (unregistering): Port device team_slave_1 removed [ 160.842863][ T136] team0 (unregistering): Port device team_slave_0 removed [ 160.851827][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.886738][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.024787][ T136] bond0 (unregistering): Released all slaves [ 161.245081][ T136] team0 (unregistering): Port device team_slave_1 removed [ 161.256211][ T136] team0 (unregistering): Port device team_slave_0 removed [ 161.275621][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.321814][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.495353][ T136] bond0 (unregistering): Released all slaves [ 161.604363][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 162.698718][ T4073] Bluetooth: hci3: command 0x040f tx timeout [ 162.782653][ T5511] loop8: detected capacity change from 0 to 2048 [ 162.894675][ T5511] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.309143][ T5523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 163.321066][ T5521] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 164.888654][ T5550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'. [ 165.498355][ T5576] udc-core: couldn't find an available UDC or it's busy [ 165.500247][ T5576] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 166.348437][ T1598] Bluetooth: (null): Too short H5 packet [ 166.353669][ T1598] Bluetooth: (null): Invalid header checksum [ 166.357048][ T1598] Bluetooth: (null): Invalid header checksum [ 166.360610][ T1598] Bluetooth: (null): Invalid header checksum [ 167.246964][ T5610] loop6: detected capacity change from 0 to 2048 [ 167.453691][ T5624] device erspan1 entered promiscuous mode [ 167.523230][ T4308] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 167.532198][ T4308] Bluetooth: hci1: Injecting HCI hardware error event [ 167.535416][ T4032] Bluetooth: hci1: hardware error 0x00 [ 167.626397][ T5610] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.924674][ T5643] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 168.418358][ T5656] udc-core: couldn't find an available UDC or it's busy [ 168.547609][ T5656] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 168.614590][ T5670] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 169.084736][ T153] Bluetooth: (null): Too short H5 packet [ 169.093866][ T153] Bluetooth: (null): Invalid header checksum [ 169.107259][ T153] Bluetooth: (null): Invalid header checksum [ 169.110714][ T153] Bluetooth: (null): Invalid header checksum [ 169.121049][ T153] Bluetooth: (null): Invalid header checksum [ 169.131275][ T153] Bluetooth: (null): Invalid header checksum [ 169.141585][ T153] Bluetooth: (null): Invalid header checksum [ 169.187483][ T153] Bluetooth: (null): Invalid header checksum [ 169.274985][ T5680] udc-core: couldn't find an available UDC or it's busy [ 169.277080][ T5680] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 170.462649][ T5730] loop7: detected capacity change from 0 to 2048 [ 170.547754][ T4301] Bluetooth: (null): Too short H5 packet [ 170.550017][ T153] Bluetooth: (null): Invalid header checksum [ 170.551879][ T153] Bluetooth: (null): Invalid header checksum [ 170.568095][ T5730] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.657660][ T4301] Bluetooth: (null): Invalid header checksum [ 170.768233][ T4301] Bluetooth: (null): Invalid header checksum [ 170.877771][ T4301] Bluetooth: (null): Invalid header checksum [ 170.988517][ T153] Bluetooth: (null): Invalid header checksum [ 171.097994][ T4437] Bluetooth: (null): Invalid header checksum [ 171.453369][ T5755] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 171.952564][ T4188] Bluetooth: (null): Too short H5 packet [ 171.954117][ T4188] Bluetooth: (null): Invalid header checksum [ 171.955800][ T4188] Bluetooth: (null): Invalid header checksum [ 171.999643][ T4188] Bluetooth: (null): Invalid header checksum [ 172.005502][ T4188] Bluetooth: (null): Invalid header checksum [ 172.148198][ T4437] Bluetooth: (null): Invalid header checksum [ 173.128992][ T5799] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 173.919693][ T5802] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 173.956453][ T5808] loop7: detected capacity change from 0 to 2048 [ 174.038671][ T5808] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.107549][ T4308] Bluetooth: hci4: command 0x0406 tx timeout [ 174.233748][ T5820] udc-core: couldn't find an available UDC or it's busy [ 174.248598][ T5820] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 175.167739][ T5840] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 175.896983][ T5868] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 176.966739][ T26] audit: type=1326 audit(176.930:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.8.373" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96ed3aa8 code=0x0 [ 178.323494][ T5922] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 179.310287][ T5936] page:000000005ec338ff refcount:4 mapcount:1 mapping:00000000235dafdc index:0x0 pfn:0x12d824 [ 179.313574][ T5936] memcg:ffff0000e68b0000 [ 179.314737][ T5936] aops:shmem_aops ino:473 [ 179.315890][ T5936] flags: 0x5ffc00000080015(locked|uptodate|lru|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 179.318545][ T5936] raw: 05ffc00000080015 fffffc0003a70a48 fffffc0003b60948 ffff0000c994c180 [ 179.321036][ T5936] raw: 0000000000000000 0000000000000000 0000000400000000 ffff0000e68b0000 [ 179.323443][ T5936] page dumped because: VM_BUG_ON_PAGE(page_mapped(page)) [ 179.325388][ T5936] ------------[ cut here ]------------ [ 179.326828][ T5936] kernel BUG at mm/filemap.c:166! [ 179.328544][ T5936] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 179.330699][ T5936] Modules linked in: [ 179.331791][ T5936] CPU: 1 PID: 5936 Comm: syz.7.388 Not tainted 5.15.174-syzkaller #0 [ 179.333975][ T5936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 179.336682][ T5936] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 179.338945][ T5936] pc : unaccount_page_cache_page+0x600/0x744 [ 179.340540][ T5936] lr : unaccount_page_cache_page+0x600/0x744 [ 179.342176][ T5936] sp : ffff80001ffd70a0 [ 179.343306][ T5936] x29: ffff80001ffd70a0 x28: dfff800000000000 x27: 1ffff00003ffae78 [ 179.345458][ T5936] x26: 1fffff800076c121 x25: dfff800000000000 x24: fffffc0003a70a48 [ 179.347641][ T5936] x23: 0000000000000000 x22: fffffc0003a70a48 x21: fffffc0003b60908 [ 179.349879][ T5936] x20: ffff0000c994c180 x19: fffffc0003b60900 x18: 0000000000000002 [ 179.352010][ T5936] x17: 0000000000000000 x16: ffff800011b4e2a8 x15: 00000000ffffffff [ 179.354192][ T5936] x14: ffff0000f596d1c0 x13: 0000000000000001 x12: 0000000000000001 [ 179.356357][ T5936] x11: 0000000000000001 x10: 0000000000000000 x9 : 3573b84947316a00 [ 179.358608][ T5936] x8 : 3573b84947316a00 x7 : 0000000000000001 x6 : 0000000000000001 [ 179.360746][ T5936] x5 : ffff80001ffd6518 x4 : ffff800014c50660 x3 : ffff800008555fe4 [ 179.362995][ T5936] x2 : 0000000000000001 x1 : 0000000100000001 x0 : 0000000000000036 [ 179.365188][ T5936] Call trace: [ 179.366089][ T5936] unaccount_page_cache_page+0x600/0x744 [ 179.367588][ T5936] __delete_from_page_cache+0xc8/0x6d4 [ 179.369066][ T5936] delete_from_page_cache+0x108/0x17c [ 179.370534][ T5936] truncate_inode_page+0x98/0xc8 [ 179.371870][ T5936] shmem_undo_range+0x448/0x1460 [ 179.373262][ T5936] shmem_evict_inode+0x1c4/0x844 [ 179.374633][ T5936] evict+0x418/0x894 [ 179.375585][ T5936] iput+0x744/0x824 [ 179.376674][ T5936] dentry_unlink_inode+0x37c/0x4bc [ 179.378120][ T5936] __dentry_kill+0x324/0x5e4 [ 179.379355][ T5936] dentry_kill+0xc8/0x250 [ 179.380573][ T5936] dput+0x21c/0x458 [ 179.381584][ T5936] __fput+0x494/0x800 [ 179.382644][ T5936] ____fput+0x20/0x30 [ 179.383729][ T5936] task_work_run+0x130/0x1e4 [ 179.385022][ T5936] do_notify_resume+0x262c/0x32b8 [ 179.386400][ T5936] el0_svc+0xfc/0x1f0 [ 179.387547][ T5936] el0t_64_sync_handler+0x84/0xe4 [ 179.388944][ T5936] el0t_64_sync+0x1a0/0x1a4 [ 179.390150][ T5936] Code: f004b201 91158021 aa1303e0 94037059 (d4210000) [ 179.391944][ T5936] ---[ end trace f6912c4ab002726f ]--- [ 179.968062][ T5969] udc-core: couldn't find an available UDC or it's busy [ 179.970086][ T5969] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 180.016942][ T5936] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 180.018963][ T5936] SMP: stopping secondary CPUs [ 180.020250][ T5936] Kernel Offset: disabled [ 180.021458][ T5936] CPU features: 0x8,000081c1,21302e40 [ 180.022984][ T5936] Memory Limit: none [ 180.601320][ T5936] Rebooting in 86400 seconds..