last executing test programs: 18.042924346s ago: executing program 3 (id=243): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000027c0)=[@hoplimit={{0x14}}, @dontfrag={{0x14}}], 0x30}, 0x0) 17.263688569s ago: executing program 3 (id=244): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000b80)={[{@allow_utime={'allow_utime', 0x3d, 0x6}}, {@umask={'umask', 0x3d, 0x2}}, {@gid}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x106}}, {@fmask={'fmask', 0x3d, 0x5}}, {@fmask={'fmask', 0x3d, 0x6}}, {@fmask={'fmask', 0x3d, 0x3}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}]}, 0x1, 0x1524, &(0x7f00000037c0)="$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") sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, 0x0) getpid() fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) dup(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 15.769727952s ago: executing program 3 (id=250): r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40305839, &(0x7f0000000240)) 15.588690487s ago: executing program 3 (id=254): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0006000000000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001540)={&(0x7f0000001500)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 15.329742568s ago: executing program 3 (id=256): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x25c}}, 0x0) 15.17568593s ago: executing program 3 (id=257): readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x33) 6.504732968s ago: executing program 0 (id=305): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) 4.808551097s ago: executing program 0 (id=315): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000740), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x9237, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000001cc0)='1', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000001240)={&(0x7f0000001180)="b7", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000180)={r4}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) unshare(0x22020400) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000001640), 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 4.537856169s ago: executing program 1 (id=316): mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fstat(r1, &(0x7f0000000100)) recvmsg$unix(r1, &(0x7f0000000180)={&(0x7f0000000200), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000280)=""/175, 0xaf}, {&(0x7f0000000340)=""/139, 0x8b}, {&(0x7f0000000400)=""/216, 0xd8}], 0x3, &(0x7f0000000500)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x40010042) open$dir(&(0x7f0000002180)='./file1\x00', 0x0, 0x0) splice(r0, 0x0, r0, &(0x7f00000000c0)=0x1ff, 0x7, 0x0) mlockall(0x3) 4.059745438s ago: executing program 4 (id=317): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000440)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="63202a3a2a207700e9d89e89ff79aac421b6c44a481dcb2db33d0e3a22590b57c0254eb1a3741876a9a2ec80cd3c7c94f9fa84d9e77beddac26090335769a2d4a6c6df82499388a981ee7baa0560ad7fb47eab4079595cae0a4bd3f451da9daa2d802d23ea101217514ee7fb1e5f4b2ea53ee147211bc1"], 0x8) r2 = openat$cgroup_devices(r0, &(0x7f0000000580)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1a, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000001040000000000000a0000000f110000c2ccb0bff73098e74a6440775144fc3175ff37e619ed0c282dda690e394ac842798cf5a02a33337ca952f2a29df12a487bb7803f123be280ce94366692a839ff91069361ccf6f9ae7a82fd2d7b1076b97d3a6891da7f05cafde910a9879701cf21aa3235b5395d3547cdd675d218bcaa8c6894df4a81029539dc60a0e0455be4e8c9f38d9c7a14c69f8295e55ef955", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018510000070000000000000000000000d8b3ffff000000008340f8ff1000000018140000", @ANYRES32=0x1, @ANYBLOB="000000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0xfffffffb, 0x27, &(0x7f0000000200)=""/39, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x6, 0x5d69, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x3, 0x5, 0xb, 0xb}, {0x4, 0x1, 0x4, 0x5}], 0x10, 0x6}, 0x90) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="300000006800010000000000000000000008000600000000000800050000000000000000000000000000000042150b7267eb362edead9bee8800010e5029ae3d246b97910c491d0b74db01e18c286e47f90b2b932ad3db53ed732a2192e5626b347cc28aa6b80de385570600b09b0b0efa6a029bc1828308a72d1dcc251d460499a8449f75a94cb0d10ac43aaf0c1ad1bdce17c32a5919d73504651ece63c750f93b373386e38f0eb3e97615095e23fa756a3017eb1d102c8f6b28454420e1f16310ce3d44e9528e8fec82353ea07b2ccacc6f661b4508d2afffe7", @ANYRES32=r4, @ANYBLOB], 0x30}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000800)={0x0, 0x0, 0x1, 0x6}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000480)="745061b5f518724cf164854de01516c8144698d746c1cc7df151b36f3fa5d94adb3b5fe8521969038dfda753c2f5354f1081ec6f0c483b668db1c2c086104a1790e619abc569dcb4778169ae8117ec", 0x4f, 0x2400c000, &(0x7f00000005c0)={0xa, 0x4e21, 0x67d, @local, 0x1ff}, 0x1c) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, 0x0, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) sendfile(r7, r6, 0x0, 0xffffffff00d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f0000000400), &(0x7f0000000500)=r7}, 0x20) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r8, &(0x7f00000003c0)='./bus\x00', 0x0) renameat2(r8, &(0x7f0000000300)='./bus\x00', r8, &(0x7f00000001c0)='./file0\x00', 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000000, &(0x7f0000000000)={[{@errors_remount}]}, 0xfc, 0x53e, &(0x7f0000000a80)="$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") r9 = msgget(0x2, 0x0) unshare(0x8000480) r10 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x300) ioctl$SNDRV_PCM_IOCTL_DRAIN(r10, 0x40084149, 0x40944f9c780000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x13, &(0x7f0000000840)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x4000002, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) msgctl$IPC_STAT(r9, 0x2, &(0x7f0000000280)=""/144) 3.657921571s ago: executing program 0 (id=320): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001980)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) 3.657451761s ago: executing program 2 (id=321): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.515987573s ago: executing program 0 (id=322): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ff623140fd0704005026010203010902120001000000000904000000ff"], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x880a, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00'], 0x0, 0x5e7, &(0x7f0000001a00)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff6ffc}]}) uname(&(0x7f0000000100)=""/214) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000180), &(0x7f0000000840)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x82000714) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) listen(0xffffffffffffffff, 0x0) 3.515657383s ago: executing program 2 (id=323): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x4}, 0x48) 3.457641077s ago: executing program 2 (id=324): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x40}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/211, &(0x7f0000000180), &(0x7f0000000440), 0x3, r2}, 0x38) 3.368021765s ago: executing program 2 (id=325): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000d070000000000000000100018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 3.270051153s ago: executing program 4 (id=326): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58, &(0x7f00000000c0)}, 0x5) 3.219703497s ago: executing program 2 (id=327): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0006000000000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001540)={&(0x7f0000001500)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 3.219201607s ago: executing program 1 (id=328): syz_mount_image$fuse(0x0, 0x0, 0xaa0088, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) 3.170272191s ago: executing program 4 (id=329): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x25c}}, 0x20000809) 3.069496989s ago: executing program 4 (id=330): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffd04, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2610054c6560", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300), 0x2}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r5, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000040)={'wg1\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000fc0)={0x1d4, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x1b5, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @device_a, @initial, {0x9}, @value=@ver_80211n={0x0, 0x7f, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x410, @default, 0x10, @val={0x0, 0x1a, @random="e105e57602dec24a291254d240bc31d6129be2c3c9bd51903553"}, @void, @val={0x3, 0x1, 0x7c}, @void, @val={0x6, 0x2, 0x2}, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x9, 0x7c, 0x3}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x2, 0xf8, 0x21}}, @void, [{0xdd, 0x31, "966dc64f90ae9e42d7af14eacef3547bec6dbcba73a8430134b8b2b5c9c0a52ee008401304fd297f418680ed5c44cefc42"}, {0xdd, 0x5a, "92fac575f6f70c5ba9f28550663bb556496eeb6d4278dd31078791e52d268c0b28c5a594a4315d140ef5c7e5cd7151e635e94459f87cf344251eac40891e657fb80287a673734ac825e6d260ea96eb967ad4e32639f501d42e4f"}, {0xdd, 0xbe, "959cfff83e3bb5613b6d59c195cf64f090b11981564fe8c19ad6cbf4fa0042f959d7ee3deef67a921e8b7f1a46ccd5d6d30b1177cbabcf32ec4648a678608163d50cb281011ef33afd9c03720b4775a3bd514aca2c77967eb90766a6d59a66b9f318c97d1e3ca985a50e79255c7b13ff04585409a532228312d3503bcf1b3242999e1f3b0dbff3413818120f5466240fef9bb499e87015786e5a400c55ec55a03a2fb2962e02bad63bf50b848e0260d0e54cc92e5b928622036574969294"}]}}]}, 0x1d4}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r8, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000125bd7000fedbdf255300000008000300", @ANYRES32=r11, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2.879647534s ago: executing program 4 (id=331): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000022c0)={0xffffffffffffffff}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r1, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000002200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000e2"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = dup2(r3, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) socket$inet_tcp(0x2, 0x1, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = dup2(r6, r6) ioctl$sock_inet_SIOCSIFBRDADDR(r7, 0x127f, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4) getpgid(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009210000000122010009058103", @ANYRESHEX=0x0, @ANYRES8=0x0], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) 1.946384831s ago: executing program 1 (id=332): syz_open_procfs(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 1.793576914s ago: executing program 1 (id=333): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00', @ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x54}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f040, 0x4}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f00000007c0)) r8 = dup(r5) r9 = fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000000080)={0x0, r8}) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x12}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) 1.603801269s ago: executing program 0 (id=334): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001300)='./file2\x00', 0x0, &(0x7f0000000ac0)={[{@prjquota}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@sysvgroups}, {@lazytime}, {@errors_continue}, {@grpjquota}], [{@fsname}]}, 0x1, 0x477, &(0x7f0000001340)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="070002000000000000000000000000950000"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) chdir(&(0x7f0000000000)='./file0\x00') syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1301"], 0x16) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604110, &(0x7f0000000380)={0x0, [[0x1fe], [0x2000002, 0x1000000], [0x8002]], '\x00', [{0x0, 0x610cfd08}, {0x6, 0xc}, {0x0, 0x1efb660a}, {}, {}, {0x8000, 0x98b}, {}, {}, {0x9b99}], '\x00', 0x3f9, 0x0, 0x0, 0x0, 0x0, 0x2}) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_req={{0x17, 0x3, 0x14}, {0x1, 0x8, 0x96, 0x5, [0x4, 0xe3, 0x0, 0x100, 0xfffe, 0x9]}}}}, 0x21) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000e00), 0x400) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000e80)) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r7, @ANYBLOB="0a0006000802110000000074ff382e129f660d02020000004802cb092e987b97ac7125766ff2d5906a02"], 0x34}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="050000000000000000000e00000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r4, 0x28, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xffffffffffffff35}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}}, 0x2000c000) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x80, &(0x7f0000000e40)={[{@resgid}, {@oldalloc}, {@jqfmt_vfsold}, {@quota}]}, 0x1, 0x51d, &(0x7f0000000500)="$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") r11 = socket$unix(0x1, 0x2, 0x0) bind$unix(r11, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.123847928s ago: executing program 1 (id=335): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x201805a, &(0x7f0000000100)={[{@abort}, {@bh}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@minixdf}, {@nobh}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f0000000680)={0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2401}) 687.759524ms ago: executing program 0 (id=336): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14800, &(0x7f0000000140)={[{@inode32}, {@allocsize={'allocsize', 0x3d, [0x39, 0x47]}}]}, 0x1, 0x980d, &(0x7f00000130c0)="$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") flock(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000840)="$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") prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f0000000240)=0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100001400b99f000000000000c04b06"], 0x114}], 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0x7ffffffd, 0x0, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000280)=@ringbuf, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x90) syz_io_uring_submit(r0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000080)) 519.495928ms ago: executing program 4 (id=337): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0xffffffff}, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'team0\x00', 0x44}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x3}, {0x6, 0x0, 0xf6}]}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x0, 0x80000009, 0xfffffffe, 0x1}) socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x3, r3, 0x5}) ioperm(0xfffffffffffffffd, 0xfffc, 0x0) futex(0x0, 0xc, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000200)={0x2, {0x2, 0x8, 0x43, 0xa, 0x8, 0x4}}) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2$watch_queue(&(0x7f0000000040), 0x80) 449.332723ms ago: executing program 1 (id=338): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00', @ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x54}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f040, 0x4}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f00000007c0)) r8 = dup(r5) r9 = fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000000080)={0x0, r8}) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x12}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) 0s ago: executing program 2 (id=339): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.141' (ED25519) to the list of known hosts. [ 42.536949][ T3493] cgroup: Unknown subsys name 'net' [ 42.679577][ T3493] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.863971][ T3493] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 45.417102][ T3511] chnl_net:caif_netlink_parms(): no params data found [ 45.539447][ T3511] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.546958][ T3511] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.555061][ T3511] device bridge_slave_0 entered promiscuous mode [ 45.577348][ T3508] chnl_net:caif_netlink_parms(): no params data found [ 45.588778][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.596455][ T3511] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.605138][ T3511] device bridge_slave_1 entered promiscuous mode [ 45.655408][ T3502] chnl_net:caif_netlink_parms(): no params data found [ 45.667598][ T3503] chnl_net:caif_netlink_parms(): no params data found [ 45.679049][ T3511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.702397][ T3511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.741038][ T3507] chnl_net:caif_netlink_parms(): no params data found [ 45.783072][ T3511] team0: Port device team_slave_0 added [ 45.807992][ T3511] team0: Port device team_slave_1 added [ 45.817767][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.825381][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.833184][ T3508] device bridge_slave_0 entered promiscuous mode [ 45.877017][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.884086][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.892710][ T3508] device bridge_slave_1 entered promiscuous mode [ 45.918257][ T3511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.925278][ T3511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.951240][ T3511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.963179][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.970375][ T3502] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.978130][ T3502] device bridge_slave_0 entered promiscuous mode [ 45.991574][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.998808][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.006844][ T3503] device bridge_slave_0 entered promiscuous mode [ 46.018670][ T3511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.025846][ T3511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.051920][ T3511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.063205][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.070483][ T3502] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.078277][ T3502] device bridge_slave_1 entered promiscuous mode [ 46.092904][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.100195][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.108162][ T3503] device bridge_slave_1 entered promiscuous mode [ 46.130567][ T3508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.168679][ T3508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.187820][ T3503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.197372][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.205594][ T3507] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.213237][ T3507] device bridge_slave_0 entered promiscuous mode [ 46.222163][ T3502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.245503][ T3503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.261952][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.269213][ T3507] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.277752][ T3507] device bridge_slave_1 entered promiscuous mode [ 46.287168][ T3502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.338514][ T3508] team0: Port device team_slave_0 added [ 46.348234][ T3511] device hsr_slave_0 entered promiscuous mode [ 46.355260][ T3511] device hsr_slave_1 entered promiscuous mode [ 46.364053][ T3503] team0: Port device team_slave_0 added [ 46.377865][ T3502] team0: Port device team_slave_0 added [ 46.386721][ T3507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.397252][ T3508] team0: Port device team_slave_1 added [ 46.405036][ T3507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.422878][ T3503] team0: Port device team_slave_1 added [ 46.437834][ T3502] team0: Port device team_slave_1 added [ 46.483003][ T3508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.490063][ T3508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.516696][ T3508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.530754][ T3507] team0: Port device team_slave_0 added [ 46.539623][ T3507] team0: Port device team_slave_1 added [ 46.563679][ T3502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.570755][ T3502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.596957][ T3502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.608500][ T3508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.615785][ T3508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.641752][ T3508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.661032][ T3503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.668063][ T3503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.694247][ T3503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.713440][ T3502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.720476][ T3502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.746774][ T3502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.772882][ T3503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.780565][ T3503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.807068][ T3503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.842485][ T3507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.849552][ T3507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.876024][ T3507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.909298][ T3502] device hsr_slave_0 entered promiscuous mode [ 46.916338][ T3502] device hsr_slave_1 entered promiscuous mode [ 46.922888][ T3502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.931116][ T3502] Cannot create hsr debugfs directory [ 46.937114][ T3507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.944058][ T3507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.970035][ T3507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.042273][ T3508] device hsr_slave_0 entered promiscuous mode [ 47.049535][ T3508] device hsr_slave_1 entered promiscuous mode [ 47.056403][ T3508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.064054][ T3508] Cannot create hsr debugfs directory [ 47.086024][ T3503] device hsr_slave_0 entered promiscuous mode [ 47.092878][ T3503] device hsr_slave_1 entered promiscuous mode [ 47.099890][ T3503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.107847][ T3503] Cannot create hsr debugfs directory [ 47.165502][ T3507] device hsr_slave_0 entered promiscuous mode [ 47.172399][ T3507] device hsr_slave_1 entered promiscuous mode [ 47.178975][ T3507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.187668][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 47.192269][ T3507] Cannot create hsr debugfs directory [ 47.194307][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 47.199564][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 47.211986][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 47.219157][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 47.421285][ T3511] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.434557][ T3511] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.450968][ T3511] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.463040][ T3511] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.532746][ T3502] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.542478][ T3502] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.552304][ T3502] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.561282][ T3502] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.603418][ T3508] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.612425][ T3508] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 47.628518][ T3508] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 47.656047][ T3508] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 47.692002][ T3507] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.718653][ T3511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.727455][ T3507] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.743635][ T3507] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.754372][ T3507] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.804399][ T3511] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.816392][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.826935][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.838197][ T3503] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.865484][ T3503] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.885411][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.894418][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.904222][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.911533][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.919917][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.929409][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.937855][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.944929][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.952943][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.962341][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.973586][ T3502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.986406][ T3503] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.996488][ T3503] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.013033][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.021704][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.031224][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.039744][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.048362][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.064242][ T3502] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.090273][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.098701][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.106823][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.115329][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.123596][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.139012][ T3511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.151265][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.163796][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.178719][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.189029][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.196168][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.204387][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.213448][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.222118][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.230880][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.239285][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.246380][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.280615][ T3502] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.294043][ T3502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.312175][ T3508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.333405][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.341759][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.351291][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.360130][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.369198][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.377783][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.386775][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.395397][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.403680][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.412286][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.421189][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.479689][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.496023][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.503997][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.511880][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.519701][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.528321][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.541190][ T3511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.567686][ T3507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.577046][ T3508] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.609910][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.624398][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.633422][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.640556][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.663256][ T3507] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.685546][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.693609][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.706692][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.717911][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.725025][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.732650][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.742159][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.750892][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.759525][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.767645][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.775745][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.785343][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.793670][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.800764][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.813400][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.836170][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.843703][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.851487][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.860856][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.869868][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.878294][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.885363][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.896159][ T3503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.919267][ T3502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.935418][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.944128][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.953879][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.963482][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.972052][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.980617][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.989390][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.998541][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.011497][ T3511] device veth0_vlan entered promiscuous mode [ 49.032945][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.041337][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.049927][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.058688][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.067315][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.077534][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.086239][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.094625][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.102993][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.111159][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.119787][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.127705][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.139947][ T3511] device veth1_vlan entered promiscuous mode [ 49.158296][ T3503] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.168951][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.178455][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.187931][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.197469][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.206252][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.214381][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.224040][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.233120][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.243969][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.267468][ T3532] Bluetooth: hci4: command 0x041b tx timeout [ 49.276235][ T3532] Bluetooth: hci3: command 0x041b tx timeout [ 49.282367][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.291364][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.300775][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.309824][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.316939][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.324873][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.333569][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.342222][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.349447][ T3554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.357629][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.366444][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.384579][ T3554] Bluetooth: hci2: command 0x041b tx timeout [ 49.394952][ T3554] Bluetooth: hci1: command 0x041b tx timeout [ 49.404764][ T3554] Bluetooth: hci0: command 0x041b tx timeout [ 49.408106][ T3511] device veth0_macvtap entered promiscuous mode [ 49.425654][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.460618][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.469974][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.479212][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.488512][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.497740][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.506375][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.515629][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.523755][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.532218][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.540682][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.551950][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.560129][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.568044][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.576157][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.591652][ T3502] device veth0_vlan entered promiscuous mode [ 49.603348][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.617841][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.643350][ T3503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.658738][ T3503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.669619][ T3511] device veth1_macvtap entered promiscuous mode [ 49.688257][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.697451][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.705946][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.713354][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.726451][ T3508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.735707][ T3502] device veth1_vlan entered promiscuous mode [ 49.751008][ T3511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.763389][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.773107][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.793661][ T3511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.822885][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.832057][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.848259][ T3511] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.867421][ T3511] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.876876][ T3511] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.886553][ T3511] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.900292][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.912446][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.948412][ T3507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.968892][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.981211][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.996434][ T3502] device veth0_macvtap entered promiscuous mode [ 50.014713][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.023501][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.045356][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.059706][ T3502] device veth1_macvtap entered promiscuous mode [ 50.078206][ T3503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.110457][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.118940][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.130715][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.139934][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.151449][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.200838][ T3502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.213622][ T3502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.224971][ T3502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.237812][ T3502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.248750][ T3502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.260290][ T3502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.285252][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.294051][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.303284][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.311975][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.320766][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.329536][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.351610][ T3502] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.360550][ T3502] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.365963][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.371796][ T3502] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.378165][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.394799][ T3502] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.415614][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.423859][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.432274][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.440487][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.448655][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.467610][ T3503] device veth0_vlan entered promiscuous mode [ 50.475596][ T3507] device veth0_vlan entered promiscuous mode [ 50.492654][ T3508] device veth0_vlan entered promiscuous mode [ 50.501475][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.510586][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.519374][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.528034][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.541152][ T3503] device veth1_vlan entered promiscuous mode [ 50.565423][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.573897][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.582218][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.590141][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.597964][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.607901][ T3507] device veth1_vlan entered promiscuous mode [ 50.642840][ T3508] device veth1_vlan entered promiscuous mode [ 50.649374][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.666313][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.702774][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.712035][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.721357][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.729880][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.738733][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.756329][ T3503] device veth0_macvtap entered promiscuous mode [ 50.776899][ T3507] device veth0_macvtap entered promiscuous mode [ 50.799948][ T3503] device veth1_macvtap entered promiscuous mode [ 50.809111][ T3582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.818763][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.832207][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.840185][ T3582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.854215][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.863905][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.873213][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.881838][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.891798][ T3508] device veth0_macvtap entered promiscuous mode [ 50.913855][ T3503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.930281][ T3503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.941106][ T3503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.952256][ T3503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.964296][ T3503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.975398][ T3507] device veth1_macvtap entered promiscuous mode [ 50.988192][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.996646][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.005304][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.013998][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.036682][ T3503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.049679][ T3503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.060317][ T3503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.071338][ T3503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.083881][ T3503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.103063][ T3508] device veth1_macvtap entered promiscuous mode [ 51.115377][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.123425][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.137720][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.150922][ T3503] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.165841][ T3503] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.180953][ T3503] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.192520][ T3503] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.215194][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.223226][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.262261][ T3508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.277971][ T3508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.289074][ T3508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.300453][ T3508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.310862][ T3508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.322732][ T3508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.335924][ T3508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.343651][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.356483][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.360240][ T3551] Bluetooth: hci3: command 0x040f tx timeout [ 51.367544][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.384212][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.384664][ T3551] Bluetooth: hci4: command 0x040f tx timeout [ 51.399947][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.410976][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.427711][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.435055][ T3551] Bluetooth: hci0: command 0x040f tx timeout [ 51.441415][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.454529][ T3551] Bluetooth: hci1: command 0x040f tx timeout [ 51.460659][ T3551] Bluetooth: hci2: command 0x040f tx timeout [ 51.460959][ T3507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.469476][ T3584] loop2: detected capacity change from 0 to 32768 [ 51.480698][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.481499][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.498554][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.507496][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.516257][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.541851][ T3508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.563010][ T3508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.574246][ T3508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.585851][ T3508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.592171][ T3584] XFS (loop2): Mounting V5 Filesystem [ 51.596832][ T3508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.611810][ T3508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.625702][ T3508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.636265][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.655931][ T3584] XFS (loop2): Starting recovery (logdev: internal) [ 51.657464][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.682215][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.682981][ T3584] XFS (loop2): Ending recovery (logdev: internal) [ 51.693354][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.709884][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.720733][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.731090][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.742800][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.757042][ T3507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.775190][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.793741][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.803389][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.812652][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.823722][ T3508] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.843612][ T3593] ======================================================= [ 51.843612][ T3593] WARNING: The mand mount option has been deprecated and [ 51.843612][ T3593] and is ignored by this kernel. Remove the mand [ 51.843612][ T3593] option from the mount to silence this warning. [ 51.843612][ T3593] ======================================================= [ 51.895045][ T3508] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.904225][ T3508] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.914952][ T3508] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.930210][ T3507] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.940569][ T3507] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.954397][ T3507] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.963396][ T3507] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.023065][ T3511] XFS (loop2): Unmounting Filesystem [ 52.054914][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.070925][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.108426][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.182401][ T473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.185043][ T1069] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 52.194328][ T473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.212464][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.235057][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.243220][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.262302][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.276770][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.299069][ T3599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.319067][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.333188][ T3599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.342153][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.359316][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.396998][ T3582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.421285][ T3582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.442477][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.605997][ T3610] loop2: detected capacity change from 0 to 512 [ 52.650565][ T1069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.665867][ T1069] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 52.681008][ T1069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.693424][ T1069] usb 4-1: config 0 descriptor?? [ 52.807310][ T3617] loop0: detected capacity change from 0 to 2048 [ 52.929364][ T3620] hub 9-0:1.0: USB hub found [ 52.936861][ T3620] hub 9-0:1.0: 8 ports detected [ 52.946958][ T3553] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 53.265926][ T3553] usb 2-1: Using ep0 maxpacket: 16 [ 53.355518][ T3610] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 53.382032][ T3617] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 53.383150][ T3610] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 53.391887][ T3553] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.413402][ T3610] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.8: corrupted xattr block 33 [ 53.426861][ T3598] Bluetooth: hci4: command 0x0419 tx timeout [ 53.449895][ T3598] Bluetooth: hci3: command 0x0419 tx timeout [ 53.522859][ T3596] Bluetooth: hci2: command 0x0419 tx timeout [ 53.529428][ T3553] usb 2-1: config 0 has no interfaces? [ 53.535022][ T3553] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 53.540951][ T3596] Bluetooth: hci1: command 0x0419 tx timeout [ 53.548672][ T3553] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.558665][ T3596] Bluetooth: hci0: command 0x0419 tx timeout [ 53.572103][ T1069] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 53.576122][ T3553] usb 2-1: config 0 descriptor?? [ 53.607079][ T1069] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input5 [ 53.791086][ T1069] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 54.138664][ T3598] usb 2-1: USB disconnect, device number 2 [ 54.142957][ T3626] loop4: detected capacity change from 0 to 32768 [ 54.208322][ T3626] XFS (loop4): Mounting V5 Filesystem [ 54.244576][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 54.287461][ T3647] loop2: detected capacity change from 0 to 512 [ 54.303834][ T3553] usb 4-1: USB disconnect, device number 2 [ 54.311111][ T3626] XFS (loop4): Starting recovery (logdev: internal) [ 54.359809][ T3647] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.18: bg 0: block 205: padding at end of block bitmap is not set [ 54.369161][ T3626] XFS (loop4): Ending recovery (logdev: internal) [ 54.387908][ T3647] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6186: Corrupt filesystem [ 54.413413][ T3647] EXT4-fs (loop2): 1 orphan inode deleted [ 54.422117][ T3647] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 54.444336][ T3647] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff) [ 54.460510][ T3647] EXT4-fs warning (device loop2): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed [ 54.499040][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 54.563999][ T3508] XFS (loop4): Unmounting Filesystem [ 54.626665][ T21] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 164, changing to 11 [ 54.657209][ T21] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 54.667015][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.718900][ T21] hub 1-1:4.0: USB hub found [ 54.812066][ T3658] loop1: detected capacity change from 0 to 2048 [ 54.903717][ T3662] loop4: detected capacity change from 0 to 2048 [ 54.934772][ T21] hub 1-1:4.0: 2 ports detected [ 54.990443][ T3658] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 55.006184][ T3662] EXT4-fs (loop4): Unrecognized mount option "uid=00000000000000000000" or missing value [ 55.138612][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 55.198049][ T3666] hub 9-0:1.0: USB hub found [ 55.212467][ T3666] hub 9-0:1.0: 8 ports detected [ 55.524649][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 56.086513][ T7] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 56.175706][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.362573][ T7] usb 3-1: Product: syz [ 56.448930][ T7] usb 3-1: Manufacturer: syz [ 56.488477][ T7] usb 3-1: SerialNumber: syz [ 56.521122][ T7] r8152-cfgselector 3-1: config 0 descriptor?? [ 56.625894][ T21] hub 1-1:4.0: hub_hub_status failed (err = -32) [ 56.632585][ T21] hub 1-1:4.0: config failed, can't get hub status (err -32) [ 56.726228][ T3681] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 56.840662][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 56.854497][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 56.867398][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 56.876619][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 56.885596][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 56.894588][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 56.903810][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 56.912801][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 56.921889][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 56.932912][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 57.434870][ T21] usb 1-1: USB disconnect, device number 2 [ 57.575889][ T7] r8152-cfgselector 3-1: Unknown version 0x0000 [ 57.582527][ T7] r8152-cfgselector 3-1: bad CDC descriptors [ 57.654629][ T7] r8152-cfgselector 3-1: Unknown version 0x0000 [ 57.680629][ T7] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 57.702582][ T3680] loop3: detected capacity change from 0 to 32768 [ 57.730490][ T3693] loop0: detected capacity change from 0 to 4096 [ 57.819142][ T3693] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 57.846159][ T3680] XFS (loop3): Mounting V5 Filesystem [ 57.928917][ T3680] XFS (loop3): Starting recovery (logdev: internal) [ 57.954344][ T3680] XFS (loop3): Ending recovery (logdev: internal) [ 58.014730][ T3547] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 58.045963][ T3502] XFS (loop3): Unmounting Filesystem [ 58.068561][ T3707] loop0: detected capacity change from 0 to 2048 [ 58.144546][ T3707] EXT4-fs (loop0): Unrecognized mount option "uid=00000000000000000000" or missing value [ 58.294573][ T3547] usb 2-1: Using ep0 maxpacket: 16 [ 58.338968][ T3712] loop4: detected capacity change from 0 to 2048 [ 58.358519][ T3710] loop2: detected capacity change from 0 to 8192 [ 58.417657][ T3714] loop3: detected capacity change from 0 to 2048 [ 58.444750][ T3547] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.475899][ T3547] usb 2-1: config 0 has no interfaces? [ 58.481662][ T3547] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 58.501076][ T3547] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.522599][ T3714] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 58.554097][ T3547] usb 2-1: config 0 descriptor?? [ 58.823898][ T26] audit: type=1326 audit(1720748366.304:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3724 comm="syz.3.42" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f565048abd9 code=0x0 [ 59.057851][ T21] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 59.083692][ T3547] usb 2-1: USB disconnect, device number 3 [ 60.077447][ T3736] loop3: detected capacity change from 0 to 2048 [ 60.113085][ T21] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 60.151410][ T3736] EXT4-fs (loop3): Unrecognized mount option "uid=00000000000000000000" or missing value [ 60.230138][ T3741] loop4: detected capacity change from 0 to 16 [ 60.305519][ T3741] erofs: Unknown parameter 'ÿÿÿÿ' [ 60.323204][ T21] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.333596][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 60.342234][ T21] usb 3-1: SerialNumber: syz [ 61.282902][ T3722] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 61.344702][ T3722] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 61.380617][ T21] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 61.394902][ T21] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 61.422861][ T21] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 61.641417][ T3739] loop0: detected capacity change from 0 to 32768 [ 61.666059][ T13] usb 3-1: USB disconnect, device number 3 [ 61.697628][ T3750] loop1: detected capacity change from 0 to 2048 [ 61.790417][ T3750] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.859083][ T3739] XFS (loop0): Mounting V5 Filesystem [ 62.727835][ T3739] XFS (loop0): Starting recovery (logdev: internal) [ 62.776292][ T3739] XFS (loop0): Ending recovery (logdev: internal) [ 62.792926][ T3776] loop2: detected capacity change from 0 to 8192 [ 62.940470][ T3786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 62.992561][ T3503] XFS (loop0): Unmounting Filesystem [ 63.264605][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 63.544556][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 63.562281][ T3781] loop3: detected capacity change from 0 to 40427 [ 63.664099][ T3781] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 63.694912][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 63.707848][ T3781] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 63.715051][ T7] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 63.724653][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 63.734615][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.767785][ T7] usb 3-1: config 0 descriptor?? [ 63.793582][ T3781] F2FS-fs (loop3): Found nat_bits in checkpoint [ 63.895067][ T3781] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 63.899367][ T3794] loop4: detected capacity change from 0 to 2048 [ 63.902456][ T3781] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 63.952749][ T26] audit: type=1804 audit(1720748371.434:3): pid=3781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.59" name="/newroot/11/file2/bus" dev="loop3" ino=10 res=1 errno=0 [ 63.975380][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 63.988789][ T3794] EXT4-fs (loop4): Unrecognized mount option "uid=00000000000000000000" or missing value [ 63.993035][ T26] audit: type=1804 audit(1720748371.464:4): pid=3781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.59" name="/newroot/11/file2/bus" dev="loop3" ino=10 res=1 errno=0 [ 64.094838][ T21] usb 1-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 64.115547][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.173998][ T21] usb 1-1: config 0 descriptor?? [ 64.327562][ T3502] attempt to access beyond end of device [ 64.327562][ T3502] loop3: rw=2049, want=45112, limit=40427 [ 64.338062][ T21] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 64.385323][ T3776] udc-core: couldn't find an available UDC or it's busy [ 64.405285][ T3776] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 65.034655][ T21] usb 1-1: Detected FT8U232AM [ 65.049886][ T21] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 65.068972][ T21] usb 1-1: USB disconnect, device number 3 [ 65.125955][ T7] usbhid 3-1:0.0: can't add hid device: -71 [ 65.131995][ T7] usbhid: probe of 3-1:0.0 failed with error -71 [ 65.141964][ T21] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 65.151554][ T7] usb 3-1: USB disconnect, device number 4 [ 65.199693][ T21] ftdi_sio 1-1:0.0: device disconnected [ 65.208603][ T3812] loop4: detected capacity change from 0 to 16 [ 65.253132][ T3812] erofs: (device loop4): mounted with root inode @ nid 36. [ 66.487571][ T3825] loop2: detected capacity change from 0 to 2048 [ 66.522603][ T3825] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 67.586031][ T3849] loop0: detected capacity change from 0 to 1024 [ 67.604465][ T3847] loop3: detected capacity change from 0 to 2048 [ 67.659443][ T3847] EXT4-fs (loop3): Unrecognized mount option "uid=00000000000000000000" or missing value [ 67.729295][ T3849] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000006,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 67.932723][ T3849] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 68.640877][ T3849] syz.0.77 (3849) used greatest stack depth: 19904 bytes left [ 69.026272][ T3845] loop2: detected capacity change from 0 to 40427 [ 69.374901][ T3868] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.196732][ T3845] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 70.257562][ T3845] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 70.291443][ T3878] loop1: detected capacity change from 0 to 16 [ 70.344419][ T3845] F2FS-fs (loop2): Found nat_bits in checkpoint [ 70.447036][ T3845] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 70.454373][ T3845] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 70.494159][ T3878] erofs: (device loop1): mounted with root inode @ nid 36. [ 71.827168][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.833773][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.851107][ T1066] cfg80211: failed to load regulatory.db [ 72.174188][ T3901] loop1: detected capacity change from 0 to 1024 [ 72.186433][ T3900] netlink: 104 bytes leftover after parsing attributes in process `syz.0.89'. [ 72.311666][ T3901] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000006,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 72.557731][ T3910] loop0: detected capacity change from 0 to 2048 [ 72.565726][ T3901] syz.1.90 (3901) used greatest stack depth: 19760 bytes left [ 72.669257][ T3919] loop4: detected capacity change from 0 to 164 [ 72.695094][ T3915] 9pnet: Insufficient options for proto=fd [ 72.718710][ T3910] EXT4-fs (loop0): Unrecognized mount option "uid=00000000000000000000" or missing value [ 72.955098][ T3923] binder: Unknown parameter 'seclabel' [ 73.533241][ T3919] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 73.774971][ T2924] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 74.695226][ T2924] usb 3-1: Using ep0 maxpacket: 32 [ 74.964902][ T2924] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 74.983275][ T2924] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 75.371298][ T2924] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.666235][ T3942] loop1: detected capacity change from 0 to 128 [ 75.704770][ T2924] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.713835][ T2924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.768013][ T2924] usb 3-1: Product: syz [ 75.783446][ T2924] usb 3-1: Manufacturer: syz [ 75.802631][ T2924] usb 3-1: SerialNumber: syz [ 75.860454][ T2924] usb 3-1: can't set config #1, error -71 [ 75.881850][ T2924] usb 3-1: USB disconnect, device number 5 [ 76.275611][ T3947] xt_CT: You must specify a L4 protocol and not use inversions on it [ 76.972471][ T3950] netlink: 104 bytes leftover after parsing attributes in process `syz.2.102'. [ 77.273427][ T3955] loop4: detected capacity change from 0 to 256 [ 77.470916][ T3961] loop0: detected capacity change from 0 to 2048 [ 77.538684][ T3961] loop0: p1 < > p4 [ 77.593545][ T3961] loop0: p4 size 8388608 extends beyond EOD, truncated [ 77.644688][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.801513][ T2963] loop0: p1 < > p4 [ 77.834894][ T3969] 9pnet: Insufficient options for proto=fd [ 77.856715][ T2963] loop0: p4 size 8388608 extends beyond EOD, truncated [ 78.012649][ T3973] hub 9-0:1.0: USB hub found [ 78.018197][ T3973] hub 9-0:1.0: 8 ports detected [ 78.744529][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 78.862365][ T3622] udevd[3622]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 78.891891][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 78.902329][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.973716][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.098802][ T3977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 79.164252][ T13] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 79.217733][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.301801][ T13] usb 4-1: config 0 descriptor?? [ 79.396338][ T13] hub 4-1:0.0: USB hub found [ 79.614779][ T13] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 79.841765][ T3994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.115'. [ 79.924740][ T13] usbhid 4-1:0.0: can't add hid device: -71 [ 79.930751][ T13] usbhid: probe of 4-1:0.0 failed with error -71 [ 79.981054][ T3998] loop4: detected capacity change from 0 to 256 [ 80.016465][ T13] usb 4-1: USB disconnect, device number 3 [ 81.007033][ T4002] loop3: detected capacity change from 0 to 128 [ 81.146138][ T4004] loop4: detected capacity change from 0 to 2048 [ 81.197746][ T3989] loop0: detected capacity change from 0 to 40427 [ 81.232967][ T4004] EXT4-fs (loop4): Unrecognized mount option "uid=00000000000000000000" or missing value [ 81.323238][ T3989] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 81.357308][ T3989] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 81.574090][ T3989] F2FS-fs (loop0): Found nat_bits in checkpoint [ 82.371545][ T3989] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 82.422307][ T26] audit: type=1326 audit(1720748389.904:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4013 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1647e7fbd9 code=0x7ffc0000 [ 82.435746][ T3989] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 82.514877][ T26] audit: type=1326 audit(1720748389.904:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4013 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1647e7fbd9 code=0x7ffc0000 [ 82.584537][ T26] audit: type=1326 audit(1720748389.924:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4013 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f1647e7fbd9 code=0x7ffc0000 [ 82.650930][ T26] audit: type=1326 audit(1720748389.924:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4013 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1647e7fbd9 code=0x7ffc0000 [ 82.749715][ T26] audit: type=1326 audit(1720748389.924:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4013 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1647e7fbd9 code=0x7ffc0000 [ 83.325495][ T4025] loop3: detected capacity change from 0 to 256 [ 84.100816][ T4019] loop4: detected capacity change from 0 to 1024 [ 84.475276][ T3549] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 84.783932][ T3549] usb 2-1: Using ep0 maxpacket: 32 [ 84.861403][ T4019] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.953667][ T4051] loop0: detected capacity change from 0 to 2048 [ 84.990001][ T3549] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.083653][ T4049] loop2: detected capacity change from 0 to 8192 [ 85.136595][ T4051] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 85.145159][ T3549] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.156916][ T3549] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 85.166371][ T3549] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.167410][ T4049] loop2: p2 p4[EZD] [ 85.184845][ T4049] loop2: p2 size 2130706432 extends beyond EOD, truncated [ 85.195649][ T3549] usb 2-1: config 0 descriptor?? [ 85.206243][ T4049] loop2: p4 size 65536 extends beyond EOD, truncated [ 85.253268][ T3549] hub 2-1:0.0: USB hub found [ 85.734963][ T3549] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 85.776838][ T2963] loop2: p2 p4[EZD] [ 85.782043][ T2963] loop2: p2 size 2130706432 extends beyond EOD, truncated [ 85.976139][ T2963] loop2: p4 size 65536 extends beyond EOD, truncated [ 86.065190][ T3549] usbhid 2-1:0.0: can't add hid device: -71 [ 86.081798][ T4063] capability: warning: `syz.0.131' uses deprecated v2 capabilities in a way that may be insecure [ 86.126740][ T3549] usbhid: probe of 2-1:0.0 failed with error -71 [ 86.315676][ T3549] usb 2-1: USB disconnect, device number 4 [ 86.339828][ T3622] udevd[3622]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 86.352331][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 88.030076][ T3768] udevd[3768]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 88.043591][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 88.094739][ T3508] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /25/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 88.260982][ T3508] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 88.289653][ T4079] loop0: detected capacity change from 0 to 512 [ 88.391593][ T26] audit: type=1326 audit(1720748395.874:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4082 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237d11ebd9 code=0x7ffc0000 [ 88.424984][ T4079] EXT4-fs (loop0): Invalid log block size: 3607101440 [ 88.461835][ T4083] loop1: detected capacity change from 0 to 256 [ 88.481683][ T3508] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 88.516253][ T26] audit: type=1326 audit(1720748395.944:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4082 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f237d11ebd9 code=0x7ffc0000 [ 88.664326][ T26] audit: type=1326 audit(1720748395.944:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4082 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f237d11ec13 code=0x7ffc0000 [ 88.755158][ T26] audit: type=1326 audit(1720748395.944:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4082 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f237d11d75f code=0x7ffc0000 [ 88.839545][ T26] audit: type=1326 audit(1720748395.944:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4082 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f237d11ec67 code=0x7ffc0000 [ 88.960963][ T26] audit: type=1326 audit(1720748395.944:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4082 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f237d11d610 code=0x7ffc0000 [ 89.011014][ T3508] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /25/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 89.034414][ T3508] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 89.048283][ T26] audit: type=1326 audit(1720748395.944:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4082 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f237d11e7db code=0x7ffc0000 [ 89.171288][ T3508] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 89.198129][ T3508] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /25/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 89.240405][ T4087] loop2: detected capacity change from 0 to 2048 [ 89.254529][ T26] audit: type=1326 audit(1720748395.954:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4082 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f237d11d90a code=0x7ffc0000 [ 89.289888][ T3508] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 89.331165][ T26] audit: type=1326 audit(1720748395.954:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4082 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f237d11d90a code=0x7ffc0000 [ 89.362094][ T4087] loop2: p1 < > p4 [ 89.392650][ T3508] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 89.398789][ T4087] loop2: p4 size 8388608 extends beyond EOD, truncated [ 89.412474][ T3508] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /25/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 89.444831][ T26] audit: type=1326 audit(1720748396.484:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4082 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f237d11d517 code=0x7ffc0000 [ 89.494515][ T3508] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 89.927615][ T3508] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 90.031472][ T3508] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /25/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 90.094036][ T2963] loop2: p1 < > p4 [ 90.100157][ T2963] loop2: p4 size 8388608 extends beyond EOD, truncated [ 90.140858][ T4096] loop1: detected capacity change from 0 to 128 [ 90.166031][ T3508] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 90.191584][ T3508] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 90.228687][ T4098] loop0: detected capacity change from 0 to 128 [ 90.246037][ T4096] FAT-fs (loop1): Unrecognized mount option "error˜.ô3 îÛç Ï/s=c " or missing value [ 90.267468][ T3508] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 90.286494][ T4098] FAT-fs (loop0): Unrecognized mount option "error˜.ô3 îÛç Ï/s=c " or missing value [ 90.289958][ T3508] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 90.308224][ T2963] loop2: p1 < > p4 [ 90.309125][ T2963] loop2: p4 size 8388608 extends beyond EOD, truncated [ 90.342696][ T3508] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 90.381859][ T3508] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 90.492455][ T3508] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 90.942139][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.007126][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 91.039681][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 92.124440][ C0] sched: RT throttling activated [ 92.139550][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 92.144181][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 93.124303][ T3508] EXT4-fs error: 127 callbacks suppressed [ 93.124317][ T3508] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 93.190554][ T3508] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /25/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 93.226913][ T3508] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 93.263660][ T3508] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /25/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 93.426221][ T3508] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 93.615844][ T3508] EXT4-fs warning: 60 callbacks suppressed [ 93.615860][ T3508] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 93.654688][ T7] usb 4-1: device descriptor read/all, error -71 [ 93.690617][ T4130] loop3: detected capacity change from 0 to 2048 [ 93.697655][ T3508] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /25/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 93.735224][ T3508] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 93.765026][ T3508] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 93.785025][ T3508] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /25/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 93.837776][ T4130] loop3: p1 < > p4 [ 93.844322][ T4130] loop3: p4 size 8388608 extends beyond EOD, truncated [ 93.858391][ T3508] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 94.473671][ T3508] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 94.491873][ T3508] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /25/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 94.570397][ T3508] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 94.662825][ T3508] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 94.745412][ T3508] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 94.763975][ T3508] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 94.829196][ T4142] loop3: detected capacity change from 0 to 128 [ 94.845981][ T3508] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 94.875702][ T4142] FAT-fs (loop3): Unrecognized mount option "error˜.ô3 îÛç Ï/s=c " or missing value [ 94.888630][ T3508] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 95.638236][ T3508] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 95.982855][ T4161] virtio-fs: tag <(null)> not found [ 96.069003][ T4161] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 96.076057][ T4161] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 96.135344][ T4161] vhci_hcd vhci_hcd.0: Device attached [ 96.218707][ T4163] vhci_hcd: connection closed [ 96.223857][ T144] vhci_hcd: stop threads [ 96.264332][ T144] vhci_hcd: release socket [ 96.278418][ T144] vhci_hcd: disconnect device [ 96.335047][ T1069] vhci_hcd: vhci_device speed not set [ 96.341909][ T3869] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.390109][ T4173] loop1: detected capacity change from 0 to 128 [ 96.445809][ T3869] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.456411][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 96.523999][ T3869] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.586656][ T4173] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.629636][ T3869] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.634987][ T4180] loop0: detected capacity change from 0 to 2048 [ 96.649235][ T4173] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 96.706693][ T4180] loop0: p1 < > p4 [ 96.712405][ T4173] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: none. [ 96.715013][ T4180] loop0: p4 size 8388608 extends beyond EOD, truncated [ 96.744584][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 96.871281][ T3514] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 96.887614][ T7] usb 4-1: config 0 has no interfaces? [ 97.007720][ T4193] loop2: detected capacity change from 0 to 128 [ 97.026933][ T4193] FAT-fs (loop2): Unrecognized mount option "error˜.ô3 îÛç Ï/s=c " or missing value [ 97.069677][ T7] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 97.079808][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.088929][ T7] usb 4-1: Product: syz [ 97.096818][ T7] usb 4-1: Manufacturer: syz [ 97.101441][ T7] usb 4-1: SerialNumber: syz [ 97.101976][ T4175] chnl_net:caif_netlink_parms(): no params data found [ 97.108170][ T7] usb 4-1: config 0 descriptor?? [ 97.144748][ T3547] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.094906][ T3547] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 98.109713][ T4219] KVM: debugfs: duplicate directory 4219-4 [ 98.123327][ T3547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.162532][ T3547] usb 2-1: Product: syz [ 98.172596][ T3547] usb 2-1: Manufacturer: syz [ 98.183055][ T3547] usb 2-1: SerialNumber: syz [ 98.209190][ T3547] usb 2-1: config 0 descriptor?? [ 98.226929][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.234011][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.245709][ T7] Bluetooth: hci4: command 0x2016 tx timeout [ 98.271112][ T3547] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 98.283545][ T4175] device bridge_slave_0 entered promiscuous mode [ 98.287329][ T3547] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 98.315795][ T3547] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 98.395014][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.407106][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.432457][ T4217] loop0: detected capacity change from 0 to 32768 [ 98.435522][ T4175] device bridge_slave_1 entered promiscuous mode [ 98.490570][ T4229] loop2: detected capacity change from 0 to 2048 [ 98.544920][ T1066] Bluetooth: hci3: command 0x0409 tx timeout [ 98.553773][ T4229] loop2: p1 < > p4 [ 98.563982][ T4229] loop2: p4 size 8388608 extends beyond EOD, truncated [ 98.564311][ T4185] loop1: detected capacity change from 0 to 1024 [ 98.587137][ T4217] XFS (loop0): Mounting V5 Filesystem [ 98.637472][ T4175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.660708][ T4175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.805027][ T4175] team0: Port device team_slave_0 added [ 98.817759][ T4217] XFS (loop0): Starting recovery (logdev: internal) [ 98.820909][ T4175] team0: Port device team_slave_1 added [ 98.883715][ T4217] XFS (loop0): Ending recovery (logdev: internal) [ 98.890141][ T4213] udevd[4213]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 98.912202][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 98.952010][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.967918][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.063318][ T1069] usb 2-1: USB disconnect, device number 5 [ 99.090622][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.101798][ T3503] XFS (loop0): Unmounting Filesystem [ 99.165010][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.172562][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.208100][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.278729][ T4253] device pim6reg1 entered promiscuous mode [ 99.296298][ T4175] device hsr_slave_0 entered promiscuous mode [ 99.323126][ T4175] device hsr_slave_1 entered promiscuous mode [ 99.343886][ T4175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.362055][ T4175] Cannot create hsr debugfs directory [ 99.584722][ T4270] loop2: detected capacity change from 0 to 256 [ 99.872011][ T4275] loop0: detected capacity change from 0 to 128 [ 100.386829][ T4275] FAT-fs (loop0): Unrecognized mount option "error˜.ô3 îÛç Ï/s=c " or missing value [ 100.492239][ T3869] device hsr_slave_0 left promiscuous mode [ 100.547970][ T3869] device hsr_slave_1 left promiscuous mode [ 100.573719][ T1069] usb 4-1: USB disconnect, device number 6 [ 100.604952][ T3869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.620768][ T3869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.624871][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 100.636067][ T3869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.644011][ T3869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.687329][ T3869] device bridge_slave_1 left promiscuous mode [ 100.709698][ T3869] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.767449][ T3869] device bridge_slave_0 left promiscuous mode [ 100.774091][ T3869] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.015202][ T4294] hub 6-0:1.0: USB hub found [ 101.021004][ T4294] hub 6-0:1.0: 1 port detected [ 101.240684][ T3869] device veth1_macvtap left promiscuous mode [ 101.256407][ T3869] device veth0_macvtap left promiscuous mode [ 101.303136][ T3869] device veth1_vlan left promiscuous mode [ 101.360696][ T3869] device veth0_vlan left promiscuous mode [ 101.424874][ T4299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 101.772282][ T4292] loop3: detected capacity change from 0 to 32768 [ 101.889006][ T4292] XFS (loop3): Mounting V5 Filesystem [ 101.911162][ T4308] loop0: detected capacity change from 0 to 128 [ 101.993171][ T4292] XFS (loop3): Starting recovery (logdev: internal) [ 102.022509][ T4292] XFS (loop3): Ending recovery (logdev: internal) [ 102.146321][ T3502] XFS (loop3): Unmounting Filesystem [ 102.204278][ T3869] team0 (unregistering): Port device team_slave_1 removed [ 102.250385][ T3869] team0 (unregistering): Port device team_slave_0 removed [ 102.270909][ T3869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.308253][ T3869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.459741][ T3869] bond0 (unregistering): Released all slaves [ 102.675043][ T4316] netlink: 'syz.0.200': attribute type 5 has an invalid length. [ 102.705372][ T3549] Bluetooth: hci3: command 0x040f tx timeout [ 103.010490][ T4342] netlink: 20 bytes leftover after parsing attributes in process `syz.0.207'. [ 103.044251][ T4342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'. [ 103.114715][ T3547] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.127038][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 103.127051][ T26] audit: type=1326 audit(1720748410.614:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4346 comm="syz.2.209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1d2789bd9 code=0x0 [ 103.189308][ T4351] loop0: detected capacity change from 0 to 1024 [ 103.274086][ T4351] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.388187][ T4175] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.404770][ T3547] usb 2-1: Using ep0 maxpacket: 32 [ 103.409398][ T4175] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.450013][ T4175] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.473528][ T4175] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.524790][ T3547] usb 2-1: config 0 has no interfaces? [ 103.592197][ T4367] loop3: detected capacity change from 0 to 1024 [ 103.596884][ T4369] loop0: detected capacity change from 0 to 128 [ 103.699379][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.714260][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.734872][ T3547] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 103.738420][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.743933][ T3547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.743956][ T3547] usb 2-1: Product: syz [ 103.743969][ T3547] usb 2-1: Manufacturer: syz [ 103.743982][ T3547] usb 2-1: SerialNumber: syz [ 103.761675][ T3547] usb 2-1: config 0 descriptor?? [ 103.767717][ T4367] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.805954][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.819814][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.829461][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.839560][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.846682][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.866963][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.875593][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.885750][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.894470][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.901617][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.911773][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.921722][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.944408][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.957195][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.966038][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.975708][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.984280][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.993861][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.039051][ T4175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.061712][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.072908][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.083066][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.091943][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.239955][ T4380] loop3: detected capacity change from 0 to 2048 [ 104.409560][ T4380] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.550373][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.589974][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.622257][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.631922][ T26] audit: type=1326 audit(1720748412.124:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d2789bd9 code=0x7ffc0000 [ 104.635999][ T4403] loop0: detected capacity change from 0 to 512 [ 104.671452][ T154] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 104.735014][ T26] audit: type=1326 audit(1720748412.124:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d2789bd9 code=0x7ffc0000 [ 104.750745][ T154] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 104.785060][ T2924] Bluetooth: hci3: command 0x0419 tx timeout [ 104.839556][ T26] audit: type=1326 audit(1720748412.124:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1d2789bd9 code=0x7ffc0000 [ 104.850055][ T154] EXT4-fs (loop3): This should not happen!! Data will be lost [ 104.850055][ T154] [ 104.923776][ T26] audit: type=1326 audit(1720748412.124:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d2789bd9 code=0x7ffc0000 [ 104.942612][ T154] EXT4-fs (loop3): Total free blocks count 0 [ 104.999994][ T154] EXT4-fs (loop3): Free/Dirty block details [ 105.020004][ T154] EXT4-fs (loop3): free_blocks=2415919104 [ 105.033059][ T26] audit: type=1326 audit(1720748412.124:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d2789bd9 code=0x7ffc0000 [ 105.039947][ T154] EXT4-fs (loop3): dirty_blocks=16 [ 105.098963][ T4403] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.114718][ T4403] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038 (0x7fffffff) [ 105.117756][ T26] audit: type=1326 audit(1720748412.124:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1d2789bd9 code=0x7ffc0000 [ 105.150155][ T26] audit: type=1326 audit(1720748412.124:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d2789bd9 code=0x7ffc0000 [ 105.172958][ T26] audit: type=1326 audit(1720748412.124:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d2789bd9 code=0x7ffc0000 [ 105.196946][ T26] audit: type=1326 audit(1720748412.124:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fb1d2789bd9 code=0x7ffc0000 [ 105.230950][ T4403] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #2: comm syz.0.218: corrupted inode contents [ 105.236583][ T154] EXT4-fs (loop3): Block reservation details [ 105.263932][ T154] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 105.272210][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.300067][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.318793][ T4403] EXT4-fs error (device loop0): ext4_dirty_inode:5993: inode #2: comm syz.0.218: mark_inode_dirty error [ 105.352478][ T4403] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #2: comm syz.0.218: corrupted inode contents [ 105.382467][ T4175] device veth0_vlan entered promiscuous mode [ 105.426347][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.450632][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.455091][ T4403] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.218: mark_inode_dirty error [ 105.490893][ T4175] device veth1_vlan entered promiscuous mode [ 105.525568][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.542958][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.569665][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.649289][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.671392][ T4443] loop3: detected capacity change from 0 to 128 [ 105.676312][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.718644][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.753139][ T4175] device veth0_macvtap entered promiscuous mode [ 105.788876][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.807808][ T4175] device veth1_macvtap entered promiscuous mode [ 105.927958][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.974765][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.026455][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.060459][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.096006][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.117678][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.118019][ T4455] Restarting kernel threads ... [ 106.140226][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.159617][ T4455] done. [ 106.172474][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.196585][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.220788][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.236211][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.266317][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.303455][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.327258][ T2924] usb 2-1: USB disconnect, device number 6 [ 106.344114][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.383888][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.413441][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.459089][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.498648][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.541713][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.597641][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.630501][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.653043][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.701374][ T4175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.734481][ T4175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.774911][ T4175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.814502][ T4175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.824368][ T4486] netlink: 20 bytes leftover after parsing attributes in process `syz.3.238'. [ 106.844590][ T4483] Restarting kernel threads ... done. [ 106.979655][ T4493] loop3: detected capacity change from 0 to 128 [ 107.059976][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.105839][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.131191][ T4493] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.166770][ T4493] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038 (0x7fffffff) [ 107.191414][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.227060][ T1546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.253437][ T1546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.264519][ T3748] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.355847][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 107.582608][ T4508] loop2: detected capacity change from 0 to 8 [ 107.590809][ T3748] usb 1-1: Using ep0 maxpacket: 32 [ 107.803526][ T3748] usb 1-1: config 0 has no interfaces? [ 108.815714][ T3748] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 108.904498][ T3748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.913155][ T3748] usb 1-1: Product: syz [ 108.924633][ T3748] usb 1-1: Manufacturer: syz [ 108.929253][ T3748] usb 1-1: SerialNumber: syz [ 108.947221][ T3748] usb 1-1: config 0 descriptor?? [ 109.054879][ T4523] loop3: detected capacity change from 0 to 256 [ 109.069270][ T4529] 9pnet: p9_fd_create_tcp (4529): problem connecting socket to 127.0.0.1 [ 109.095262][ T4523] exfat: Deprecated parameter 'utf8' [ 109.100589][ T4523] exfat: Deprecated parameter 'namecase' [ 109.123299][ T4523] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 109.709871][ T4541] Restarting kernel threads ... done. [ 109.762863][ T4543] loop4: detected capacity change from 0 to 512 [ 109.843994][ T4543] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 110.052678][ T4543] EXT4-fs error (device loop4): ext4_do_update_inode:5160: inode #16: comm syz.4.252: corrupted inode contents [ 110.163733][ T4543] EXT4-fs error (device loop4): ext4_dirty_inode:5993: inode #16: comm syz.4.252: mark_inode_dirty error [ 110.175502][ T3598] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.194395][ T4543] EXT4-fs error (device loop4): ext4_do_update_inode:5160: inode #16: comm syz.4.252: corrupted inode contents [ 110.271123][ T4543] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.252: mark_inode_dirty error [ 110.300688][ T4543] EXT4-fs error (device loop4): ext4_do_update_inode:5160: inode #16: comm syz.4.252: corrupted inode contents [ 110.343146][ T4543] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 110.358956][ T4568] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 110.374320][ T4543] EXT4-fs error (device loop4): ext4_do_update_inode:5160: inode #16: comm syz.4.252: corrupted inode contents [ 110.390571][ T3810] Bluetooth: hci5: Frame reassembly failed (-84) [ 110.391948][ T4543] EXT4-fs error (device loop4): ext4_truncate:4261: inode #16: comm syz.4.252: mark_inode_dirty error [ 110.410597][ T4543] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 110.431493][ T4543] EXT4-fs (loop4): 1 truncate cleaned up [ 110.437847][ T4543] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.454641][ T4543] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff) [ 110.514991][ T1069] usb 1-1: USB disconnect, device number 4 [ 110.656516][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 110.656531][ T26] audit: type=1800 audit(1720748418.144:59): pid=4543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.252" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 110.715437][ T4572] process 'syz.0.259' launched '/dev/fd/3' with NULL argv: empty string added [ 110.744790][ T3598] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 110.769626][ T3598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.792642][ T3598] usb 3-1: Product: syz [ 110.806596][ T3598] usb 3-1: Manufacturer: syz [ 110.821557][ T3598] usb 3-1: SerialNumber: syz [ 110.833403][ T3598] usb 3-1: config 0 descriptor?? [ 110.896783][ T3598] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 110.903941][ T3598] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 110.922563][ T3598] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 111.033255][ T4575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.261'. [ 111.103854][ T4549] loop2: detected capacity change from 0 to 1024 [ 111.198540][ T4577] loop4: detected capacity change from 0 to 256 [ 111.268777][ T4577] exfat: Deprecated parameter 'utf8' [ 111.284614][ T4577] exfat: Deprecated parameter 'namecase' [ 111.317181][ T3598] usb 3-1: USB disconnect, device number 6 [ 111.362815][ T4577] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 111.417702][ T4585] syz.1.263 uses obsolete (PF_INET,SOCK_PACKET) [ 112.013535][ T4603] loop0: detected capacity change from 0 to 8 [ 112.620696][ T3550] Bluetooth: hci5: command 0x1003 tx timeout [ 112.671816][ T3506] Bluetooth: hci5: sending frame failed (-49) [ 113.049696][ T1069] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 113.324536][ T1069] usb 3-1: Using ep0 maxpacket: 32 [ 114.095722][ T4625] loop1: detected capacity change from 0 to 256 [ 114.198246][ T4625] exfat: Deprecated parameter 'utf8' [ 114.221585][ T4625] exfat: Deprecated parameter 'namecase' [ 114.244623][ T1069] usb 3-1: config 0 has no interfaces? [ 114.284151][ T4625] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 114.424701][ T1069] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 114.434971][ T1069] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.555782][ T1069] usb 3-1: Product: syz [ 114.559966][ T1069] usb 3-1: Manufacturer: syz [ 114.564847][ T1069] usb 3-1: SerialNumber: syz [ 114.571121][ T1069] usb 3-1: config 0 descriptor?? [ 114.665857][ T4636] loop4: detected capacity change from 0 to 8 [ 114.754666][ T3547] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 115.374167][ T2924] Bluetooth: hci5: command 0x1001 tx timeout [ 115.382076][ T3506] Bluetooth: hci5: sending frame failed (-49) [ 115.614758][ T3547] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 115.629692][ T3547] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.652491][ T3547] usb 1-1: Product: syz [ 115.661172][ T3547] usb 1-1: Manufacturer: syz [ 115.676765][ T3547] usb 1-1: SerialNumber: syz [ 115.697209][ T3547] usb 1-1: config 0 descriptor?? [ 115.756694][ T3547] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 115.773749][ T3547] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 115.818854][ T3547] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 115.880667][ T4647] loop4: detected capacity change from 0 to 512 [ 115.961871][ T4647] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.018952][ T4629] loop0: detected capacity change from 0 to 1024 [ 116.048992][ T4647] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 116.082079][ T4647] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 116.197830][ T4647] System zones: 0-2, 18-18, 34-34 [ 116.224677][ T4647] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.285: bad orphan inode 15 [ 116.277895][ T4647] ext4_test_bit(bit=14, block=18) = 1 [ 116.283511][ T4647] is_bad_inode(inode)=0 [ 116.291641][ T4647] NEXT_ORPHAN(inode)=2264924160 [ 116.297139][ T4647] max_ino=32 [ 116.300428][ T4647] i_nlink=0 [ 116.304184][ T4647] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 116.319891][ T3598] usb 1-1: USB disconnect, device number 5 [ 116.332441][ T4653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.287'. [ 116.346581][ T4647] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.285: bg 0: block 80: padding at end of block bitmap is not set [ 116.370622][ T4647] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6186: Corrupt filesystem [ 116.381754][ T4653] loop1: detected capacity change from 0 to 512 [ 116.381926][ T4647] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 116.428759][ T3547] usb 3-1: USB disconnect, device number 7 [ 116.559920][ T4653] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.287: casefold flag without casefold feature [ 116.599432][ T4653] EXT4-fs (loop1): Remounting filesystem read-only [ 116.606062][ T4653] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.287: bad orphan inode 15 [ 116.616726][ T4653] ext4_test_bit(bit=14, block=18) = 1 [ 116.622221][ T4653] is_bad_inode(inode)=0 [ 116.626787][ T4653] NEXT_ORPHAN(inode)=1023 [ 116.631241][ T4653] max_ino=32 [ 116.637806][ T4653] i_nlink=0 [ 116.641369][ T4653] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 116.659335][ T4653] ext4 filesystem being mounted at /54/bus supports timestamps until 2038 (0x7fffffff) [ 117.917228][ T2924] Bluetooth: hci5: command 0x1009 tx timeout [ 118.093829][ T4674] loop2: detected capacity change from 0 to 256 [ 118.145032][ T4674] exfat: Deprecated parameter 'utf8' [ 118.150376][ T4674] exfat: Deprecated parameter 'namecase' [ 118.166584][ T4674] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 118.566562][ T4694] loop0: detected capacity change from 0 to 512 [ 118.643281][ T4694] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.302: casefold flag without casefold feature [ 118.684343][ T4694] EXT4-fs (loop0): Remounting filesystem read-only [ 118.698286][ T4694] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.302: bad orphan inode 15 [ 118.719278][ T4694] ext4_test_bit(bit=14, block=18) = 1 [ 118.729889][ T4694] is_bad_inode(inode)=0 [ 118.734340][ T4694] NEXT_ORPHAN(inode)=1023 [ 118.739494][ T4694] max_ino=32 [ 118.761101][ T4694] i_nlink=0 [ 118.764304][ T4694] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 118.780926][ T4694] ext4 filesystem being mounted at /68/bus supports timestamps until 2038 (0x7fffffff) [ 118.794156][ T4699] netlink: 24 bytes leftover after parsing attributes in process `syz.1.304'. [ 118.820682][ T4699] loop1: detected capacity change from 0 to 512 [ 118.827158][ T3748] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.869335][ T4699] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.304: casefold flag without casefold feature [ 118.882920][ T4699] EXT4-fs (loop1): Remounting filesystem read-only [ 118.889679][ T4699] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.304: bad orphan inode 15 [ 118.933361][ T4699] ext4_test_bit(bit=14, block=18) = 1 [ 118.941503][ T4699] is_bad_inode(inode)=0 [ 118.960473][ T4699] NEXT_ORPHAN(inode)=1023 [ 118.965704][ T4699] max_ino=32 [ 118.968911][ T4699] i_nlink=0 [ 118.972099][ T4699] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 118.984663][ T4699] ext4 filesystem being mounted at /57/bus supports timestamps until 2038 (0x7fffffff) [ 119.188429][ T4707] loop1: detected capacity change from 0 to 512 [ 119.220479][ T4707] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 119.220479][ T4707] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 119.220479][ T4707] [ 119.261165][ T4707] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #3: comm syz.1.307: corrupted inode contents [ 119.277878][ T4707] EXT4-fs error (device loop1): ext4_dirty_inode:5993: inode #3: comm syz.1.307: mark_inode_dirty error [ 119.289292][ T3550] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.291368][ T4707] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #3: comm syz.1.307: corrupted inode contents [ 119.309144][ T4707] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.307: mark_inode_dirty error [ 119.328350][ T4707] Quota error (device loop1): write_blk: dquota write failed [ 119.336445][ T4707] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 119.349675][ T4707] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.307: Failed to acquire dquot type 0 [ 119.365266][ T3748] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 119.368208][ T4707] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #16: comm syz.1.307: corrupted inode contents [ 119.374910][ T3748] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.393264][ T4707] EXT4-fs error (device loop1): ext4_dirty_inode:5993: inode #16: comm syz.1.307: mark_inode_dirty error [ 119.395007][ T3748] usb 5-1: Product: syz [ 119.410301][ T3748] usb 5-1: Manufacturer: syz [ 119.411709][ T4707] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #16: comm syz.1.307: corrupted inode contents [ 119.415297][ T3748] usb 5-1: SerialNumber: syz [ 119.427582][ T4707] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.307: mark_inode_dirty error [ 119.440724][ T3748] usb 5-1: config 0 descriptor?? [ 119.448419][ T4707] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #16: comm syz.1.307: corrupted inode contents [ 119.461676][ T4707] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 119.470659][ T4707] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #16: comm syz.1.307: corrupted inode contents [ 119.483955][ T4707] EXT4-fs error (device loop1): ext4_truncate:4261: inode #16: comm syz.1.307: mark_inode_dirty error [ 119.489669][ T3748] usb 5-1: Waiting for MOTU Microbook II to boot up... [ 119.501251][ T4707] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 119.502084][ T3748] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22 [ 119.514618][ T4707] EXT4-fs (loop1): 1 truncate cleaned up [ 119.520095][ T3748] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 119.529582][ T4707] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,nouser_xattr,,errors=continue. Quota mode: writeback. [ 119.544825][ T4707] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038 (0x7fffffff) [ 119.580592][ T4707] syz.1.307 (4707) used greatest stack depth: 18528 bytes left [ 119.665210][ T3550] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 119.677423][ T3550] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 119.711365][ T4696] loop4: detected capacity change from 0 to 1024 [ 119.834000][ T7] usb 5-1: USB disconnect, device number 2 [ 119.854663][ T3550] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 119.863883][ T3550] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.872855][ T3550] usb 1-1: Product: syz [ 119.877468][ T3550] usb 1-1: Manufacturer: syz [ 119.882054][ T3550] usb 1-1: SerialNumber: syz [ 119.889441][ T3550] usb 1-1: config 0 descriptor?? [ 119.916640][ T4703] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 119.923851][ T4703] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 120.156143][ T3550] dm9601: probe of 1-1:0.0 failed with error -71 [ 120.165830][ T3550] usb 1-1: USB disconnect, device number 6 [ 120.575109][ T4719] chnl_net:caif_netlink_parms(): no params data found [ 120.714231][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.724099][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.732505][ T4719] device bridge_slave_0 entered promiscuous mode [ 120.741129][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.748511][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.756775][ T4719] device bridge_slave_1 entered promiscuous mode [ 120.785797][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.798355][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.851053][ T4719] team0: Port device team_slave_0 added [ 120.865670][ T4719] team0: Port device team_slave_1 added [ 120.979546][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.998391][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.096643][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.122749][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.138846][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.164806][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.201526][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.319677][ T1546] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.397823][ T4719] device hsr_slave_0 entered promiscuous mode [ 121.428997][ T4719] device hsr_slave_1 entered promiscuous mode [ 121.452316][ T4719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.462365][ T4719] Cannot create hsr debugfs directory [ 121.490440][ T1546] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.557620][ T4741] loop4: detected capacity change from 0 to 512 [ 121.597504][ T4740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.317'. [ 121.667540][ T4741] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.317: casefold flag without casefold feature [ 121.738176][ T1546] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.817926][ T4741] EXT4-fs (loop4): Remounting filesystem read-only [ 121.831859][ T4741] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.317: bad orphan inode 15 [ 121.864732][ T4741] ext4_test_bit(bit=14, block=18) = 1 [ 121.883084][ T4741] is_bad_inode(inode)=0 [ 121.896112][ T4741] NEXT_ORPHAN(inode)=1023 [ 121.900476][ T4741] max_ino=32 [ 121.934392][ T4741] i_nlink=0 [ 121.937949][ T4741] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 121.958524][ T4741] ext4 filesystem being mounted at /18/bus supports timestamps until 2038 (0x7fffffff) [ 121.978156][ T1546] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.255270][ T3748] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 122.464643][ T2924] Bluetooth: hci6: command 0x0409 tx timeout [ 122.784842][ T3748] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 122.796853][ T3748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.810407][ T3748] usb 1-1: Product: syz [ 122.819292][ T3748] usb 1-1: Manufacturer: syz [ 122.825240][ T3748] usb 1-1: SerialNumber: syz [ 122.842283][ T3748] usb 1-1: config 0 descriptor?? [ 122.887361][ T3748] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 122.898566][ T3748] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 122.911591][ T3748] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 122.974593][ T1069] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.157289][ T4752] loop0: detected capacity change from 0 to 1024 [ 123.245683][ T1546] device hsr_slave_0 left promiscuous mode [ 123.284162][ T1546] device hsr_slave_1 left promiscuous mode [ 123.315972][ T1546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.323437][ T1546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.324272][ T3598] usb 1-1: USB disconnect, device number 7 [ 123.342618][ T1546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.361927][ T1546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.373564][ T1546] device bridge_slave_1 left promiscuous mode [ 123.384061][ T1546] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.397223][ T1546] device bridge_slave_0 left promiscuous mode [ 123.403679][ T1546] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.414670][ T1069] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 123.422765][ T1069] usb 5-1: config 0 has no interface number 0 [ 123.429584][ T1069] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 123.442930][ T1069] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 123.461105][ T1546] device veth1_macvtap left promiscuous mode [ 123.467583][ T1546] device veth0_macvtap left promiscuous mode [ 123.473678][ T1546] device veth1_vlan left promiscuous mode [ 123.480187][ T1546] device veth0_vlan left promiscuous mode [ 123.554755][ T1069] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 123.573789][ T1069] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 123.582732][ T1069] usb 5-1: Manufacturer: syz [ 123.596693][ T1069] usb 5-1: config 0 descriptor?? [ 123.820123][ T1546] team0 (unregistering): Port device team_slave_1 removed [ 123.837891][ T1546] team0 (unregistering): Port device team_slave_0 removed [ 123.865265][ T1546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.907078][ T1546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.970765][ T4810] loop0: detected capacity change from 0 to 512 [ 124.027591][ T4810] EXT4-fs (loop0): Unrecognized mount option "fsname=" or missing value [ 124.045544][ T1546] bond0 (unregistering): Released all slaves [ 124.083387][ T1069] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.18/0003:054C:03D5.0002/input/input6 [ 124.097745][ T1069] sony 0003:054C:03D5.0002: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.4-1/input18 [ 124.212341][ T4810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.334'. [ 124.259449][ T4719] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 124.287815][ T4719] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 124.358607][ T4719] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 124.370503][ T4810] loop0: detected capacity change from 0 to 512 [ 124.394166][ T4719] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 124.405369][ T3598] usb 5-1: USB disconnect, device number 3 [ 124.427966][ T4810] EXT4-fs (loop0): Ignoring removed oldalloc option [ 124.451816][ T4810] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 124.467691][ T4814] loop1: detected capacity change from 0 to 2048 [ 124.537112][ T4814] EXT4-fs (loop1): Ignoring removed bh option [ 124.543319][ T4814] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 124.544582][ T2924] Bluetooth: hci6: command 0x041b tx timeout [ 124.560408][ T4814] EXT4-fs (loop1): Ignoring removed nobh option [ 124.582967][ T4810] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,oldalloc,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback. [ 124.609500][ T4810] ext4 filesystem being mounted at /73/bus supports timestamps until 2038 (0x7fffffff) [ 124.679259][ T4814] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,bh,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,minixdf,nobh,,errors=continue. Quota mode: none. [ 124.680814][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.714544][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.722487][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.779816][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.842689][ T3748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.862606][ T3748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.864227][ T4814] EXT4-fs (loop1): shut down requested (2) [ 124.883931][ T3748] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.891087][ T3748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.913603][ T4822] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.335: bg 0: block 2: invalid block bitmap [ 124.943654][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.959016][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.971935][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.997511][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.004683][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.018541][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.029311][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.094662][ T26] audit: type=1326 audit(1720748432.574:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.4.337" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61649e7bd9 code=0x0 [ 125.206815][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.226389][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.257993][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.271754][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.295926][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.321533][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.350789][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.381528][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.409379][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.445600][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.546136][ T4829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.337'. [ 125.612506][ T4835] ================================================================== [ 125.621002][ T4835] BUG: KASAN: slab-out-of-bounds in cfg80211_wext_freq+0x1f1/0x230 [ 125.628927][ T4835] Read of size 2 at addr ffff888065897d40 by task syz.2.339/4835 [ 125.636654][ T4835] [ 125.638975][ T4835] CPU: 0 PID: 4835 Comm: syz.2.339 Not tainted 5.15.162-syzkaller #0 [ 125.647033][ T4835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 125.657085][ T4835] Call Trace: [ 125.660364][ T4835] [ 125.663289][ T4835] dump_stack_lvl+0x1e3/0x2d0 [ 125.667984][ T4835] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 125.673625][ T4835] ? _printk+0xd1/0x120 [ 125.677809][ T4835] ? __wake_up_klogd+0xcc/0x100 [ 125.682674][ T4835] ? panic+0x860/0x860 [ 125.686749][ T4835] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 125.692224][ T4835] print_address_description+0x63/0x3b0 [ 125.697778][ T4835] ? cfg80211_wext_freq+0x1f1/0x230 [ 125.702983][ T4835] kasan_report+0x16b/0x1c0 [ 125.707491][ T4835] ? cfg80211_wext_freq+0x1f1/0x230 [ 125.712704][ T4835] cfg80211_wext_freq+0x1f1/0x230 [ 125.717746][ T4835] cfg80211_wext_siwscan+0x4fd/0xfc0 [ 125.723075][ T4835] ioctl_standard_iw_point+0x781/0xca0 [ 125.728554][ T4835] ? cmp_bss+0xde0/0xde0 [ 125.732802][ T4835] ? iw_handler_get_iwstats+0x240/0x240 [ 125.738355][ T4835] ? wext_ioctl_dispatch+0xb9/0x460 [ 125.743564][ T4835] ? mutex_lock_io_nested+0x60/0x60 [ 125.748771][ T4835] ? apparmor_capable+0x12e/0x190 [ 125.753806][ T4835] ? full_name_hash+0x8f/0xe0 [ 125.758490][ T4835] ioctl_standard_call+0xc3/0x280 [ 125.763524][ T4835] ? cmp_bss+0xde0/0xde0 [ 125.767771][ T4835] ? cmp_bss+0xde0/0xde0 [ 125.772013][ T4835] wext_ioctl_dispatch+0x16f/0x460 [ 125.777132][ T4835] ? wext_ioctl_dispatch+0x460/0x460 [ 125.782420][ T4835] ? iw_handler_get_private+0x1e0/0x1e0 [ 125.787978][ T4835] wext_handle_ioctl+0x15b/0x260 [ 125.792924][ T4835] ? call_commit_handler+0xf0/0xf0 [ 125.798057][ T4835] sock_ioctl+0x13b/0x770 [ 125.802396][ T4835] ? sock_poll+0x410/0x410 [ 125.806821][ T4835] ? __fget_files+0x413/0x480 [ 125.811510][ T4835] ? bpf_lsm_file_ioctl+0x5/0x10 [ 125.816452][ T4835] ? security_file_ioctl+0x7d/0xa0 [ 125.821651][ T4835] ? sock_poll+0x410/0x410 [ 125.826070][ T4835] __se_sys_ioctl+0xf1/0x160 [ 125.830663][ T4835] do_syscall_64+0x3b/0xb0 [ 125.835077][ T4835] ? clear_bhb_loop+0x15/0x70 [ 125.839755][ T4835] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.845659][ T4835] RIP: 0033:0x7fb1d2789bd9 [ 125.850077][ T4835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.851366][ T4821] loop0: detected capacity change from 0 to 32768 [ 125.869678][ T4835] RSP: 002b:00007fb1d120a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.869748][ T4835] RAX: ffffffffffffffda RBX: 00007fb1d2917f60 RCX: 00007fb1d2789bd9 [ 125.869760][ T4835] RDX: 0000000020000000 RSI: 0000000000008b18 RDI: 0000000000000003 [ 125.869771][ T4835] RBP: 00007fb1d27f8e60 R08: 0000000000000000 R09: 0000000000000000 [ 125.869780][ T4835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.869790][ T4835] R13: 000000000000000b R14: 00007fb1d2917f60 R15: 00007ffcbcab9e28 [ 125.869815][ T4835] [ 125.869822][ T4835] [ 125.869826][ T4835] Allocated by task 4835: [ 125.869834][ T4835] ____kasan_kmalloc+0xba/0xf0 [ 125.869853][ T4835] __kmalloc+0x168/0x300 [ 125.869869][ T4835] ioctl_standard_iw_point+0x4aa/0xca0 [ 125.869889][ T4835] ioctl_standard_call+0xc3/0x280 [ 125.869906][ T4835] wext_ioctl_dispatch+0x16f/0x460 [ 125.869922][ T4835] wext_handle_ioctl+0x15b/0x260 [ 125.869939][ T4835] sock_ioctl+0x13b/0x770 [ 125.869956][ T4835] __se_sys_ioctl+0xf1/0x160 [ 125.869973][ T4835] do_syscall_64+0x3b/0xb0 [ 125.869987][ T4835] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.870003][ T4835] [ 125.870007][ T4835] Last potentially related work creation: [ 125.870013][ T4835] kasan_save_stack+0x36/0x60 [ 125.870029][ T4835] kasan_record_aux_stack+0xba/0x100 [ 125.870044][ T4835] call_rcu+0x1c4/0xa70 [ 125.870058][ T4835] assoc_array_gc+0x1533/0x17c0 [ 125.870073][ T4835] keyring_gc+0x232/0x280 [ 125.870087][ T4835] key_garbage_collector+0x46f/0xa00 [ 125.870102][ T4835] process_one_work+0x8a1/0x10c0 [ 125.870119][ T4835] worker_thread+0xaca/0x1280 [ 125.870134][ T4835] kthread+0x3f6/0x4f0 [ 126.033252][ T4835] ret_from_fork+0x1f/0x30 [ 126.037676][ T4835] [ 126.039995][ T4835] The buggy address belongs to the object at ffff888065897c00 [ 126.039995][ T4835] which belongs to the cache kmalloc-512 of size 512 [ 126.054046][ T4835] The buggy address is located 320 bytes inside of [ 126.054046][ T4835] 512-byte region [ffff888065897c00, ffff888065897e00) [ 126.067670][ T4835] The buggy address belongs to the page: [ 126.073311][ T4835] page:ffffea0001962500 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888065897800 pfn:0x65894 [ 126.084780][ T4835] head:ffffea0001962500 order:2 compound_mapcount:0 compound_pincount:0 [ 126.093116][ T4835] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 126.101112][ T4835] raw: 00fff00000010200 ffffea000075b100 0000000300000003 ffff888011c41c80 [ 126.109714][ T4835] raw: ffff888065897800 0000000080100007 00000001ffffffff 0000000000000000 [ 126.118299][ T4835] page dumped because: kasan: bad access detected [ 126.124721][ T4835] page_owner tracks the page as allocated [ 126.130429][ T4835] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3503, ts 45847407047, free_ts 45847229278 [ 126.149528][ T4835] get_page_from_freelist+0x322a/0x33c0 [ 126.155085][ T4835] __alloc_pages+0x272/0x700 [ 126.159673][ T4835] new_slab+0xbb/0x4b0 [ 126.163740][ T4835] ___slab_alloc+0x6f6/0xe10 [ 126.168324][ T4835] kmem_cache_alloc_trace+0x1a0/0x290 [ 126.173695][ T4835] __ipv6_dev_mc_inc+0x426/0xa80 [ 126.178631][ T4835] ipv6_add_dev+0xd44/0x1180 [ 126.183216][ T4835] addrconf_notify+0x671/0xf30 [ 126.187976][ T4835] raw_notifier_call_chain+0xd0/0x170 [ 126.193346][ T4835] call_netdevice_notifiers+0x145/0x1b0 [ 126.198888][ T4835] register_netdevice+0x12e8/0x1720 [ 126.204083][ T4835] veth_newlink+0x94f/0xe20 [ 126.208584][ T4835] rtnl_newlink+0x14bd/0x2070 [ 126.213260][ T4835] rtnetlink_rcv_msg+0x993/0xee0 [ 126.218203][ T4835] netlink_rcv_skb+0x1cf/0x410 [ 126.222965][ T4835] netlink_unicast+0x7b6/0x980 [ 126.227734][ T4835] page last free stack trace: [ 126.232396][ T4835] free_unref_page_prepare+0xc34/0xcf0 [ 126.237848][ T4835] free_unref_page+0x95/0x2d0 [ 126.242525][ T4835] stack_depot_save+0x3ef/0x440 [ 126.247375][ T4835] __kasan_slab_alloc+0xa5/0xc0 [ 126.252222][ T4835] slab_post_alloc_hook+0x53/0x380 [ 126.257358][ T4835] kmem_cache_alloc+0xf3/0x280 [ 126.262121][ T4835] __debug_object_init+0xa0a/0xd30 [ 126.267234][ T4835] init_timer_key+0x3e/0x2d0 [ 126.271828][ T4835] ipv6_mc_init_dev+0x119/0x900 [ 126.276672][ T4835] ipv6_add_dev+0xc48/0x1180 [ 126.281258][ T4835] addrconf_notify+0x671/0xf30 [ 126.286023][ T4835] raw_notifier_call_chain+0xd0/0x170 [ 126.291392][ T4835] call_netdevice_notifiers+0x145/0x1b0 [ 126.296937][ T4835] register_netdevice+0x12e8/0x1720 [ 126.302133][ T4835] veth_newlink+0x94f/0xe20 [ 126.306635][ T4835] rtnl_newlink+0x14bd/0x2070 [ 126.311315][ T4835] [ 126.313628][ T4835] Memory state around the buggy address: [ 126.319249][ T4835] ffff888065897c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 126.327315][ T4835] ffff888065897c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 126.335379][ T4835] >ffff888065897d00: 00 00 00 00 00 00 00 04 fc fc fc fc fc fc fc fc [ 126.343434][ T4835] ^ [ 126.349591][ T4835] ffff888065897d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 126.357652][ T4835] ffff888065897e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 126.365706][ T4835] ================================================================== [ 126.373758][ T4835] Disabling lock debugging due to kernel taint [ 126.379959][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.389882][ T4835] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 126.397092][ T4835] CPU: 0 PID: 4835 Comm: syz.2.339 Tainted: G B 5.15.162-syzkaller #0 [ 126.406554][ T4835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 126.416606][ T4835] Call Trace: [ 126.419883][ T4835] [ 126.422809][ T4835] dump_stack_lvl+0x1e3/0x2d0 [ 126.427486][ T4835] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 126.433102][ T4835] ? panic+0x860/0x860 [ 126.437601][ T4835] ? preempt_schedule_common+0xa6/0xd0 [ 126.443044][ T4835] ? preempt_schedule+0xd9/0xe0 [ 126.447879][ T4835] panic+0x318/0x860 [ 126.451760][ T4835] ? check_panic_on_warn+0x1d/0xa0 [ 126.456872][ T4835] ? fb_is_primary_device+0xd0/0xd0 [ 126.462055][ T4835] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 126.468020][ T4835] ? _raw_spin_unlock+0x40/0x40 [ 126.472858][ T4835] ? print_memory_metadata+0xe2/0x140 [ 126.478219][ T4835] check_panic_on_warn+0x7e/0xa0 [ 126.483146][ T4835] ? cfg80211_wext_freq+0x1f1/0x230 [ 126.488331][ T4835] end_report+0x6d/0xf0 [ 126.492476][ T4835] kasan_report+0x18e/0x1c0 [ 126.496960][ T4835] ? cfg80211_wext_freq+0x1f1/0x230 [ 126.502157][ T4835] cfg80211_wext_freq+0x1f1/0x230 [ 126.507191][ T4835] cfg80211_wext_siwscan+0x4fd/0xfc0 [ 126.512473][ T4835] ioctl_standard_iw_point+0x781/0xca0 [ 126.517920][ T4835] ? cmp_bss+0xde0/0xde0 [ 126.522143][ T4835] ? iw_handler_get_iwstats+0x240/0x240 [ 126.527691][ T4835] ? wext_ioctl_dispatch+0xb9/0x460 [ 126.532873][ T4835] ? mutex_lock_io_nested+0x60/0x60 [ 126.538056][ T4835] ? apparmor_capable+0x12e/0x190 [ 126.543062][ T4835] ? full_name_hash+0x8f/0xe0 [ 126.547738][ T4835] ioctl_standard_call+0xc3/0x280 [ 126.552749][ T4835] ? cmp_bss+0xde0/0xde0 [ 126.556970][ T4835] ? cmp_bss+0xde0/0xde0 [ 126.561214][ T4835] wext_ioctl_dispatch+0x16f/0x460 [ 126.566314][ T4835] ? wext_ioctl_dispatch+0x460/0x460 [ 126.571578][ T4835] ? iw_handler_get_private+0x1e0/0x1e0 [ 126.577110][ T4835] wext_handle_ioctl+0x15b/0x260 [ 126.582026][ T4835] ? call_commit_handler+0xf0/0xf0 [ 126.587156][ T4835] sock_ioctl+0x13b/0x770 [ 126.591468][ T4835] ? sock_poll+0x410/0x410 [ 126.595868][ T4835] ? __fget_files+0x413/0x480 [ 126.600544][ T4835] ? bpf_lsm_file_ioctl+0x5/0x10 [ 126.605485][ T4835] ? security_file_ioctl+0x7d/0xa0 [ 126.610585][ T4835] ? sock_poll+0x410/0x410 [ 126.614995][ T4835] __se_sys_ioctl+0xf1/0x160 [ 126.619588][ T4835] do_syscall_64+0x3b/0xb0 [ 126.624001][ T4835] ? clear_bhb_loop+0x15/0x70 [ 126.624532][ T3549] Bluetooth: hci6: command 0x040f tx timeout [ 126.628657][ T4835] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.628679][ T4835] RIP: 0033:0x7fb1d2789bd9 [ 126.628694][ T4835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.628706][ T4835] RSP: 002b:00007fb1d120a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.628723][ T4835] RAX: ffffffffffffffda RBX: 00007fb1d2917f60 RCX: 00007fb1d2789bd9 [ 126.628734][ T4835] RDX: 0000000020000000 RSI: 0000000000008b18 RDI: 0000000000000003 [ 126.628744][ T4835] RBP: 00007fb1d27f8e60 R08: 0000000000000000 R09: 0000000000000000 [ 126.628754][ T4835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.628763][ T4835] R13: 000000000000000b R14: 00007fb1d2917f60 R15: 00007ffcbcab9e28 [ 126.628780][ T4835] [ 126.628972][ T4835] Kernel Offset: disabled [ 126.720586][ T4835] Rebooting in 86400 seconds..