last executing test programs: 1.647406344s ago: executing program 3 (id=118): mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000200)={0x5}, 0x20) 1.526916046s ago: executing program 3 (id=119): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LOCAL_NAME={{0x40}, 0x6}}}, 0x7) socket$nl_route(0x10, 0x3, 0x0) 1.476861517s ago: executing program 3 (id=121): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) pwrite64(r1, &(0x7f00000003c0)='\x00\x00', 0xfffffe97, 0x1) 1.326735309s ago: executing program 3 (id=124): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000001c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@init_itable}, {@dax_inode}, {@grpjquota, 0x2e}, {@i_version}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$eJzs3M1vG0UbAPBnN02afibtW73QD6ihICIKSZMW6IEDIJB6ASHBoRxDGqrStEVNkGhV0YBQOSL+AuCIhMSJCyeQEAIugLjCHSFVqJcWDsho7d3EbmzHTpqY1r+ftPbM7uzOPrM79nrHdgA9q5Q9JBFbI+LXiBiqZusLlKpPN65dmvrr2qWpJMrll/5MKuWuX7s0VRQt1tuSZ0bSiPS9JPY2qHf2wsXTkzMz0+fz/NjcmTfGZi9cfPTUmcmT0yenz04cPXrk8PgTj0881lYcl5dZnsV1fc/b5/btPvbKh89PlePV7z/L9ndrvrw2jqrhtuptpRSlKOcW5w5UHh9c9db/W7bVpJMNXdwROtIXEdnh6q/0/6Hoi8WDNxTPvbuQ+aZLOwismey9aceSuX35c7rw/gXciRJ9HHpU8Y6fff4tpvW8/ui2q09nj9OV+G/k048vVNsmzT7LDlc/sfc1Wf//DeYNLibLQ8vUvzUijs///VE2RcP7EC0kbZcEAFjwVXb980ij67+07tpmez6GMhwRByNiZ0T8LyJ2RbpQ5q6IuLvD+ks35Zde//y8qcNNdiS7/nsyH9sqpuqSIq5kIbetEn9/8tqpmelDeZuMRP/GLD/eoo6vn/3lg2bLSjXXf9mU1V9cC+b78ceGjfXrnJicm1xFyHWuvhOxZ0Oj+JOFkYCsBXZHxJ4VbD9rs1MPf7ovS2/fsnT58vG3cAvGmcqfRDxUPf7zcVP8haRaU7PxybHBmJk+NFacFUv98NOVF2vz/TXpuvgH24tpcKXBNpAd/80Nz/88/qIbFOO1s53XceW395t+pll6/JM4Pl9bIj//Ny02W3b+DyQvV9ID+by3Jufmzo9HDOQz6uZPLG6tyBfls/hHDjTu/zsj/vk4X29vRGQn8T0RcW9E7M/3/b6IuD8iDrSI/7tnHni9dQut8Py/BbL4T7Q6/hHDSe14/QoSfae//bJZ/e29/h2ppEbyOe28/rW7g6tpOwAAALhdpJUx6CQdLdI1N6d2xeZ05tzs3MFSvHn2RHWsejj60+JO11DN/dDx/N5wkZ+4KX84InZUvmm0qZIfnTo3s62bgQOV3+rU9f9I09HR6rLfm33pBbhzdDSOVvuls8+/uPU7A6wrv9eE3qX/Q+/S/6F36f/Quxr1/8sRN7qwK8A68/4PvUv/h96l/0Pv0v+hJy39SXzxdysr+aX/YmLnsVWtvuaJ8tCabHm+87X61ijSqP3TjqaJJCJWVkWkrcsMtFF71xLpsmWeWq5Z+lf1nxhZYn+e2BgR7a51ed1atXiFSPzLJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFv7NwAA//8Aq+SG") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xd0) getdents64(r0, 0x0, 0x0) 1.29667719s ago: executing program 0 (id=125): io_setup(0x7, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x1, &(0x7f00000035c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)="01", 0x1}]) 1.058421784s ago: executing program 0 (id=129): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x2, 0x4}}, 0x9) 998.919904ms ago: executing program 2 (id=131): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xc5, 0x80012d58, 0x12d5c}}, 0x44) 902.467306ms ago: executing program 0 (id=133): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x3}, 0x10) close_range(r0, r1, 0x0) 846.975127ms ago: executing program 4 (id=134): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000001000)=ANY=[@ANYBLOB="440f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000980)={0x34, &(0x7f00000006c0)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000140)={0x0, 0x17, 0x2, "1dc4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000100)={0x20, 0x17}, 0x0, 0x0}) 834.702807ms ago: executing program 0 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000005880)='./file0\x00', &(0x7f00000058c0)='sysfs\x00', 0x18010, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='./cgroup\x00', 0x0, 0x1058, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./cgroup\x00', 0x0, 0x1058, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x2) 828.372227ms ago: executing program 2 (id=137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a300000"], 0x88}}, 0x0) 760.313378ms ago: executing program 1 (id=138): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 710.964609ms ago: executing program 3 (id=139): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) 702.054499ms ago: executing program 0 (id=140): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}}, 0x4000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TIOCL_SETSEL(r1, 0x5410, &(0x7f0000000100)) 676.420159ms ago: executing program 2 (id=141): syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x201cc42, &(0x7f0000000440)=ANY=[@ANYBLOB='iocharset=cp1250,nocompress,cruft,\x00'], 0x1, 0xab0, &(0x7f0000002e00)="$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") socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x228, &(0x7f0000000300)="$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") writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 598.829321ms ago: executing program 1 (id=142): bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x17) 549.772821ms ago: executing program 3 (id=143): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x3a, 0x0, 0x0) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0x2}, {0x7, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) 541.581871ms ago: executing program 0 (id=144): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) io_getevents(0x0, 0x5, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x20, 0xfff00002}, {0x16, 0x0, 0x0, 0x31}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$packet(r1, 0x0, 0x0, 0xffffffffffffc117, &(0x7f0000000140), 0x14) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) 474.920002ms ago: executing program 1 (id=145): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4056, &(0x7f0000000080)={[{@noload}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@dioread_nolock}]}, 0x1, 0x451, &(0x7f0000000680)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000740)=ANY=[], 0x835, 0x0) 299.455016ms ago: executing program 1 (id=146): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0xfff1, 0xfffd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc6e9f356b312f3bb}, 0x0) 282.850186ms ago: executing program 4 (id=147): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) 202.979757ms ago: executing program 2 (id=148): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 202.847177ms ago: executing program 1 (id=149): sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x39, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x80047455, 0x0) 202.740537ms ago: executing program 4 (id=150): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000640)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf3c4}, @TCA_FQ_CODEL_FLOWS={0xc, 0x5, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1e, 0x2, 0x3, 0x9, 0x2, 0xffffffff, 0x3}}, {0x4}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 122.392419ms ago: executing program 4 (id=151): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="040f04000019206831"], 0x7) 101.303089ms ago: executing program 2 (id=152): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f0000000580)='\\', 0x1, 0x8008094, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x20000000}, 0x1404c800) 30.928749ms ago: executing program 4 (id=153): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) capset(0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_open_dev$loop(0x0, 0x24d1ce23, 0x202000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, 0x0) dup(r0) madvise(&(0x7f000027e000/0x1000)=nil, 0x1000, 0x4) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 30.76697ms ago: executing program 1 (id=154): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000580)='./file0\x00', 0x2800018, &(0x7f00000024c0)={[{@codepage={'codepage', 0x3d, 'cp862'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@part={'part', 0x3d, 0x2}}, {@gid}, {@gid}]}, 0x1, 0x306, &(0x7f0000000240)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 30.665629ms ago: executing program 2 (id=155): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d", @ANYRES16], 0xf8) 0s ago: executing program 4 (id=156): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/consoles\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002180)=[{&(0x7f0000002200)=""/104, 0x68}], 0x1, 0xe20, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts. [ 39.068150][ T4012] cgroup: Unknown subsys name 'net' [ 39.362867][ T4012] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 39.718417][ T4012] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 41.302084][ T4022] chnl_net:caif_netlink_parms(): no params data found [ 41.419870][ T4024] chnl_net:caif_netlink_parms(): no params data found [ 41.427971][ T4023] chnl_net:caif_netlink_parms(): no params data found [ 41.456686][ T4026] chnl_net:caif_netlink_parms(): no params data found [ 41.477097][ T4022] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.479241][ T4022] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.481798][ T4022] device bridge_slave_0 entered promiscuous mode [ 41.497031][ T4025] chnl_net:caif_netlink_parms(): no params data found [ 41.503620][ T4022] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.505369][ T4022] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.508274][ T4022] device bridge_slave_1 entered promiscuous mode [ 41.614965][ T4022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.621295][ T4023] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.623037][ T4023] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.625639][ T4023] device bridge_slave_0 entered promiscuous mode [ 41.630257][ T4023] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.632141][ T4023] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.634954][ T4023] device bridge_slave_1 entered promiscuous mode [ 41.643797][ T4024] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.645773][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.654612][ T4024] device bridge_slave_0 entered promiscuous mode [ 41.659813][ T4022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.671469][ T4026] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.673330][ T4026] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.675925][ T4026] device bridge_slave_0 entered promiscuous mode [ 41.685432][ T4024] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.687485][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.690149][ T4024] device bridge_slave_1 entered promiscuous mode [ 41.714678][ T4026] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.716802][ T4026] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.719380][ T4026] device bridge_slave_1 entered promiscuous mode [ 41.733639][ T4022] team0: Port device team_slave_0 added [ 41.750088][ T4023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.752692][ T4025] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.754554][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.761012][ T4025] device bridge_slave_0 entered promiscuous mode [ 41.778730][ T4022] team0: Port device team_slave_1 added [ 41.783345][ T4024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.788229][ T4023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.792207][ T4024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.794772][ T4025] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.797245][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.799849][ T4025] device bridge_slave_1 entered promiscuous mode [ 41.821831][ T4026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.863556][ T4026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.877251][ T4024] team0: Port device team_slave_0 added [ 41.881697][ T4024] team0: Port device team_slave_1 added [ 41.890524][ T4022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.892376][ T4022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.903226][ T4022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.915196][ T4023] team0: Port device team_slave_0 added [ 41.940293][ T4025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.943192][ T4022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.945088][ T4022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.953371][ T4022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.964244][ T4023] team0: Port device team_slave_1 added [ 41.967023][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.969040][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.975781][ T4024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.981190][ T4025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.984048][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.985845][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.992802][ T4024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.002376][ T4026] team0: Port device team_slave_0 added [ 42.037962][ T4026] team0: Port device team_slave_1 added [ 42.054964][ T4025] team0: Port device team_slave_0 added [ 42.119406][ T4022] device hsr_slave_0 entered promiscuous mode [ 42.156672][ T4022] device hsr_slave_1 entered promiscuous mode [ 42.202898][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.204709][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.211814][ T4023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.223011][ T4025] team0: Port device team_slave_1 added [ 42.239126][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.241020][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.247973][ T4026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.251681][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.253611][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.260721][ T4023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.277557][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.279437][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.285923][ T4025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.290725][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.292600][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.299890][ T4026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.378268][ T4024] device hsr_slave_0 entered promiscuous mode [ 42.416600][ T4024] device hsr_slave_1 entered promiscuous mode [ 42.456329][ T4024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.458616][ T4024] Cannot create hsr debugfs directory [ 42.460650][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.462486][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.469325][ T4025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.578716][ T4023] device hsr_slave_0 entered promiscuous mode [ 42.616558][ T4023] device hsr_slave_1 entered promiscuous mode [ 42.686260][ T4023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.688223][ T4023] Cannot create hsr debugfs directory [ 42.748356][ T4026] device hsr_slave_0 entered promiscuous mode [ 42.786656][ T4026] device hsr_slave_1 entered promiscuous mode [ 42.836395][ T4026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.838037][ T4026] Cannot create hsr debugfs directory [ 42.888317][ T4025] device hsr_slave_0 entered promiscuous mode [ 42.926701][ T4025] device hsr_slave_1 entered promiscuous mode [ 42.966313][ T4025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.968186][ T4025] Cannot create hsr debugfs directory [ 42.997270][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 42.999542][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 43.076569][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 43.078164][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 43.079941][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 43.228569][ T4022] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 43.279352][ T4022] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 43.324767][ T4022] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 43.378196][ T4022] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 43.462522][ T4024] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 43.527498][ T4024] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 43.568392][ T4024] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 43.618426][ T4024] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 43.683899][ T4026] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 43.720904][ T4026] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 43.758330][ T4026] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 43.822075][ T4026] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 43.947587][ T4025] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 43.969215][ T4025] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 44.026937][ T4025] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 44.068595][ T4025] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 44.126979][ T4022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.184190][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.189179][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.194650][ T4023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.249192][ T4023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.303780][ T4022] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.309360][ T4026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.314441][ T4023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.355931][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.363918][ T4023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.400011][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.403227][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.406490][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.408508][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.411782][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.420780][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.424469][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.428595][ T1601] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.430549][ T1601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.442628][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.445956][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.458724][ T4026] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.473351][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.475990][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.481051][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.483818][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.487762][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.489769][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.492561][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.495579][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.504093][ T4024] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.524585][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.541565][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.545406][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.548612][ T1601] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.550477][ T1601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.552783][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.559937][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.565510][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.569305][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.571927][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.574485][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.577958][ T1601] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.579663][ T1601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.594221][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.597620][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.601232][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.604008][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.607928][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.609806][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.612199][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.641381][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.644049][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.654417][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.674586][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.678061][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.680796][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.683504][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.686783][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.691023][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.694143][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.699156][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.702200][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.718657][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.721452][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.724161][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.728499][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.731116][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.734526][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.737952][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.743492][ T4025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.746726][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.757349][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.761154][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.764135][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.767707][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.771454][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.785189][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.794280][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.802470][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.858491][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.861116][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.870569][ T4025] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.907816][ T4023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.911117][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.914074][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.925327][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.927277][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.943715][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.947700][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.950347][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.952803][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.954664][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.983156][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.018394][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.021147][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.023679][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.025949][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.030883][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.040473][ T4022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.043343][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.045453][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.054370][ T4023] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.069112][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.071826][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.074446][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.076355][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.079385][ T4073] Bluetooth: hci1: command 0x041b tx timeout [ 45.081109][ T4073] Bluetooth: hci2: command 0x041b tx timeout [ 45.083372][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.085509][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.088262][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.091131][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.099094][ T4026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.102481][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.105130][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.120208][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.122884][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.125395][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.127343][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.144089][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.153792][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.156438][ T3605] Bluetooth: hci3: command 0x041b tx timeout [ 45.159691][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.163120][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.164681][ T3605] Bluetooth: hci4: command 0x041b tx timeout [ 45.167340][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.167790][ T3605] Bluetooth: hci0: command 0x041b tx timeout [ 45.172780][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.175560][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.198526][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.201626][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.204636][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.216933][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.220306][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.238685][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.242348][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.245687][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.250287][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.253086][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.256853][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.272056][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.290303][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.293075][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.295835][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.299948][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.303677][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.308019][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.343232][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.353260][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.357939][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.361051][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.371736][ T4022] device veth0_vlan entered promiscuous mode [ 45.381397][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.385675][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.391067][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.403238][ T4024] device veth0_vlan entered promiscuous mode [ 45.416998][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.419537][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.422888][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.425791][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.443935][ T4026] device veth0_vlan entered promiscuous mode [ 45.453079][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.458772][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.482163][ T4024] device veth1_vlan entered promiscuous mode [ 45.494104][ T4022] device veth1_vlan entered promiscuous mode [ 45.497849][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.499943][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.505115][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.561084][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.563419][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.568576][ T4026] device veth1_vlan entered promiscuous mode [ 45.612729][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.640478][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.643392][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.650998][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.654153][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.669248][ T4022] device veth0_macvtap entered promiscuous mode [ 45.679290][ T4024] device veth0_macvtap entered promiscuous mode [ 45.690113][ T4022] device veth1_macvtap entered promiscuous mode [ 45.694786][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.699717][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.702399][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.705037][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.708765][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.714952][ T4026] device veth0_macvtap entered promiscuous mode [ 45.741658][ T4024] device veth1_macvtap entered promiscuous mode [ 45.745025][ T4026] device veth1_macvtap entered promiscuous mode [ 45.762546][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.765283][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.772422][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.775164][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.778971][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.783427][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.786908][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.813810][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.818259][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.821121][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.825133][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.831766][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.840833][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.843639][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.848254][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.851129][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.853939][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.858620][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.861775][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.864470][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.867205][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.869859][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.873676][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.878293][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.881006][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.884681][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.892554][ T4026] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.894903][ T4026] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.898020][ T4026] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.900302][ T4026] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.911851][ T4023] device veth0_vlan entered promiscuous mode [ 45.914177][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.917876][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.920801][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.923511][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.926647][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.929339][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.932204][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.934746][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.955337][ T4022] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.959173][ T4022] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.961038][ T4022] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.963199][ T4022] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.977193][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.979720][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.982088][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.984496][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.989953][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.998330][ T4024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.000527][ T4024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.002817][ T4024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.005031][ T4024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.017729][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.020692][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.062736][ T4023] device veth1_vlan entered promiscuous mode [ 46.065336][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.070491][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.073173][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.076774][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.079222][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.083795][ T4025] device veth0_vlan entered promiscuous mode [ 46.164983][ T4025] device veth1_vlan entered promiscuous mode [ 46.239118][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.241884][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.244608][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.249228][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.251740][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.258850][ T4023] device veth0_macvtap entered promiscuous mode [ 46.297385][ T4023] device veth1_macvtap entered promiscuous mode [ 46.304016][ T1601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.318803][ T1601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.329314][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.331998][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.332442][ T1601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.334554][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.335827][ T1601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.352098][ T4025] device veth0_macvtap entered promiscuous mode [ 46.371093][ T1601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.373203][ T1601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.379519][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.382341][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.385528][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.390155][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.392935][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.419707][ T4025] device veth1_macvtap entered promiscuous mode [ 46.441732][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.444561][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.447738][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.450314][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.452736][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.455365][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.460766][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.473721][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.476579][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.477921][ T293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.479338][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.480626][ T293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.499885][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.502739][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.505301][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.509592][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.512273][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.514984][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.527761][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.531315][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.534793][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.538123][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.546533][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.549114][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.563553][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.566351][ T372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.568472][ T372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.571489][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.583282][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.585827][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.589804][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.592526][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.594970][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.605535][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.610589][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.613382][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.618688][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.632424][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.635580][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.654752][ T4023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.662756][ T4023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.664970][ T4023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.681303][ T4023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.716920][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.719710][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.722174][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.724927][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.743012][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.745781][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.759840][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.762620][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.764423][ T4103] udc-core: couldn't find an available UDC or it's busy [ 46.769919][ T4103] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 46.777548][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.817174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.820506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.877757][ T4025] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.881794][ T4025] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.884366][ T4025] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.887365][ T4025] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.943674][ T4107] loop1: detected capacity change from 0 to 8192 [ 47.025131][ T372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.027733][ T372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.030905][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.040897][ T4107] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.156896][ T25] Bluetooth: hci2: command 0x040f tx timeout [ 47.160875][ T25] Bluetooth: hci1: command 0x040f tx timeout [ 47.163404][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.165665][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.198821][ T372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.201068][ T372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.203275][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.223064][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.237893][ T4073] Bluetooth: hci0: command 0x040f tx timeout [ 47.240022][ T4073] Bluetooth: hci4: command 0x040f tx timeout [ 47.252355][ T4073] Bluetooth: hci3: command 0x040f tx timeout [ 47.324409][ T372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.331835][ T372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.335441][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.590156][ T4126] udc-core: couldn't find an available UDC or it's busy [ 47.602907][ T4126] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 47.610747][ T4127] loop4: detected capacity change from 0 to 512 [ 47.760458][ T4127] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.948982][ T4133] Zero length message leads to an empty skb [ 48.306583][ T4145] futex_wake_op: syz.0.14 tries to shift op by 32; fix this program [ 48.401486][ T4148] loop0: detected capacity change from 0 to 128 [ 48.516699][ T4148] FAT-fs (loop0): Directory bread(block 32) failed [ 48.518495][ T4148] FAT-fs (loop0): Directory bread(block 33) failed [ 48.520280][ T4148] FAT-fs (loop0): Directory bread(block 34) failed [ 48.522057][ T4148] FAT-fs (loop0): Directory bread(block 35) failed [ 48.523690][ T4148] FAT-fs (loop0): Directory bread(block 36) failed [ 48.525359][ T4148] FAT-fs (loop0): Directory bread(block 37) failed [ 48.559082][ T4148] FAT-fs (loop0): Directory bread(block 38) failed [ 48.560733][ T4148] FAT-fs (loop0): Directory bread(block 39) failed [ 48.562422][ T4148] FAT-fs (loop0): Directory bread(block 40) failed [ 48.563980][ T4148] FAT-fs (loop0): Directory bread(block 41) failed [ 48.581988][ T4151] loop3: detected capacity change from 0 to 1024 [ 48.650355][ T4153] udc-core: couldn't find an available UDC or it's busy [ 48.652115][ T4153] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.720392][ T4151] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 48.724247][ T4151] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 48.779742][ T4151] EXT4-fs error (device loop3): ext4_get_journal_inode:5160: inode #5: comm syz.3.17: unexpected bad inode w/o EXT4_IGET_BAD [ 48.804504][ T4151] EXT4-fs (loop3): no journal found [ 48.806018][ T4151] EXT4-fs (loop3): can't get journal size [ 48.806996][ T4148] process 'syz.0.16' launched './file2' with NULL argv: empty string added [ 48.811984][ T4148] attempt to access beyond end of device [ 48.811984][ T4148] loop0: rw=0, want=4116, limit=128 [ 48.815142][ T4148] Buffer I/O error on dev loop0, logical block 1028, async page read [ 48.826513][ T4151] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11c, mo2=0002] [ 48.828884][ T4151] EXT4-fs (loop3): failed to initialize system zone (-117) [ 48.831434][ T4151] EXT4-fs (loop3): mount failed [ 48.842737][ T4148] attempt to access beyond end of device [ 48.842737][ T4148] loop0: rw=0, want=167968, limit=128 [ 48.845443][ T4148] Buffer I/O error on dev loop0, logical block 41991, async page read [ 48.858174][ T4148] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000a009) [ 48.860170][ T4148] FAT-fs (loop0): Filesystem has been set read-only [ 48.861900][ T4148] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000a009) [ 48.863864][ T4148] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000a009) [ 48.865761][ T4148] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000a009) [ 48.887757][ T4148] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000a009) [ 48.889715][ T4148] attempt to access beyond end of device [ 48.889715][ T4148] loop0: rw=0, want=4116, limit=128 [ 48.897157][ T4148] Buffer I/O error on dev loop0, logical block 1028, async page read [ 48.899423][ T4148] attempt to access beyond end of device [ 48.899423][ T4148] loop0: rw=0, want=167968, limit=128 [ 48.926838][ T4148] Buffer I/O error on dev loop0, logical block 41991, async page read [ 49.175320][ T4161] loop0: detected capacity change from 0 to 2048 [ 49.193675][ T4164] loop3: detected capacity change from 0 to 16 [ 49.234441][ T4161] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 49.236726][ T25] Bluetooth: hci1: command 0x0419 tx timeout [ 49.239031][ T25] Bluetooth: hci2: command 0x0419 tx timeout [ 49.281677][ T4164] erofs: (device loop3): mounted with root inode @ nid 36. [ 49.290641][ T4167] loop2: detected capacity change from 0 to 512 [ 49.312191][ T4164] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 49.316731][ T25] Bluetooth: hci3: command 0x0419 tx timeout [ 49.322850][ T25] Bluetooth: hci4: command 0x0419 tx timeout [ 49.324715][ T25] Bluetooth: hci0: command 0x0419 tx timeout [ 49.333127][ T4164] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -24 in[52, 4044] out[1851] [ 49.342047][ T4161] UDF-fs: unknown compression code (0) [ 49.364350][ T4167] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 49.374553][ T4164] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 49.828889][ T4186] loop2: detected capacity change from 0 to 512 [ 49.969058][ T4186] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 50.504832][ T4209] udc-core: couldn't find an available UDC or it's busy [ 50.574535][ T4209] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 50.644070][ T4213] loop0: detected capacity change from 0 to 256 [ 50.672981][ T4032] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 50.675431][ T4032] CPU: 1 PID: 4032 Comm: kworker/u5:3 Not tainted 5.15.179-syzkaller #0 [ 50.677682][ T4032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.680294][ T4032] Workqueue: hci1 hci_rx_work [ 50.681664][ T4032] Call trace: [ 50.682540][ T4032] dump_backtrace+0x0/0x530 [ 50.683756][ T4032] show_stack+0x2c/0x3c [ 50.684887][ T4032] dump_stack_lvl+0x108/0x170 [ 50.686170][ T4032] dump_stack+0x1c/0x58 [ 50.687282][ T4032] sysfs_create_dir_ns+0x278/0x318 [ 50.688598][ T4032] kobject_add_internal+0x384/0x8f0 [ 50.690062][ T4032] kobject_add+0x14c/0x21c [ 50.691188][ T4032] device_add+0x400/0xef4 [ 50.692310][ T4032] hci_conn_add_sysfs+0xc4/0x1cc [ 50.693570][ T4032] le_conn_complete_evt+0x954/0x1228 [ 50.694962][ T4032] hci_le_meta_evt+0x234/0x31c0 [ 50.696246][ T4032] hci_event_packet+0xd34/0x12b4 [ 50.697525][ T4032] hci_rx_work+0x1d0/0x830 [ 50.698675][ T4032] process_one_work+0x790/0x11b8 [ 50.700032][ T4032] worker_thread+0x910/0x1034 [ 50.701273][ T4032] kthread+0x37c/0x45c [ 50.702363][ T4032] ret_from_fork+0x10/0x20 [ 50.703333][ T4218] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 50.707052][ T4032] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 50.710495][ T4032] Bluetooth: hci1: failed to register connection device [ 50.766028][ T4218] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 50.768285][ T4218] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 50.787739][ T4218] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 50.797452][ T4213] ======================================================= [ 50.797452][ T4213] WARNING: The mand mount option has been deprecated and [ 50.797452][ T4213] and is ignored by this kernel. Remove the mand [ 50.797452][ T4213] option from the mount to silence this warning. [ 50.797452][ T4213] ======================================================= [ 50.888347][ T4213] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.891270][ T4213] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 50.937219][ T4213] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 51.022594][ T4222] loop4: detected capacity change from 0 to 4096 [ 51.054447][ T26] audit: type=1326 audit(2629.000:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4220 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba44b028 code=0x7fc00000 [ 51.064868][ T26] audit: type=1326 audit(2629.020:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4220 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffba44b028 code=0x7fc00000 [ 51.116843][ T26] audit: type=1326 audit(2629.020:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4220 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba44b028 code=0x7fc00000 [ 51.169493][ T4226] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 51.226442][ T4227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'. [ 51.352028][ T4232] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 51.469695][ T26] audit: type=1326 audit(2629.420:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4235 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcbed028 code=0x7ffc0000 [ 51.494162][ T26] audit: type=1326 audit(2629.440:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4235 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffbcbed028 code=0x7ffc0000 [ 51.516545][ T26] audit: type=1326 audit(2629.460:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4235 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcbed028 code=0x7ffc0000 [ 51.551038][ T26] audit: type=1326 audit(2629.460:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4235 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcbed028 code=0x7ffc0000 [ 51.585493][ T26] audit: type=1326 audit(2629.460:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4235 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=108 compat=0 ip=0xffffbcbed028 code=0x7ffc0000 [ 51.601053][ T4245] udc-core: couldn't find an available UDC or it's busy [ 51.610333][ T4245] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 51.613204][ T26] audit: type=1326 audit(2629.460:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4235 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcbed028 code=0x7ffc0000 [ 51.639607][ T26] audit: type=1326 audit(2629.460:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4235 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcbed028 code=0x7ffc0000 [ 51.668512][ T4249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.58'. [ 51.700562][ T4251] dccp_invalid_packet: P.Data Offset(0) too small [ 51.908105][ T4265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 51.974643][ T4265] bond0: (slave bond_slave_0): Releasing backup interface [ 52.339555][ T4290] loop0: detected capacity change from 0 to 8 [ 52.347231][ T4290] squashfs: Bad value for 'errors' [ 52.429119][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.446932][ T4293] udc-core: couldn't find an available UDC or it's busy [ 52.448217][ T4293] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 52.450694][ T21] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 52.778659][ T4308] loop0: detected capacity change from 0 to 512 [ 52.827055][ T4308] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 52.845843][ T4308] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 52.857890][ T4308] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.83: corrupted in-inode xattr [ 52.862682][ T4308] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.83: couldn't read orphan inode 15 (err -117) [ 52.876673][ T4308] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,jqfmt=vfsv1,noblock_validity,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000002,usrjquota=,,errors=continue. Quota mode: none. [ 53.088177][ T4312] capability: warning: `syz.0.84' uses deprecated v2 capabilities in a way that may be insecure [ 53.205116][ T4316] loop2: detected capacity change from 0 to 512 [ 53.234666][ T4318] input: syz1 as /devices/virtual/input/input2 [ 53.253805][ T4316] EXT4-fs (loop2): fragment/cluster size (262144) != block size (2048) [ 53.643346][ T4334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.95'. [ 53.734170][ T4342] loop2: detected capacity change from 0 to 128 [ 53.881297][ T4349] loop4: detected capacity change from 0 to 1024 [ 53.990102][ T4349] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.112916][ T4359] udc-core: couldn't find an available UDC or it's busy [ 54.114641][ T4359] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.618913][ T9] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:0: bg 0: block 393: padding at end of block bitmap is not set [ 54.673945][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 54.702954][ T9] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.702954][ T9] [ 54.824686][ T4362] loop2: detected capacity change from 0 to 512 [ 54.942842][ T4362] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,,errors=continue. Quota mode: writeback. [ 55.111866][ T4375] loop0: detected capacity change from 0 to 256 [ 55.181489][ T4375] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 55.218571][ T4071] hid-generic 0005:10CF:5703.0002: unknown main item tag 0x0 [ 55.220500][ T4071] hid-generic 0005:10CF:5703.0002: unknown main item tag 0x2 [ 55.227954][ T4071] hid-generic 0005:10CF:5703.0002: unknown main item tag 0x1 [ 55.231104][ T4071] hid-generic 0005:10CF:5703.0002: item fetching failed at offset 10/14 [ 55.235373][ T4071] hid-generic: probe of 0005:10CF:5703.0002 failed with error -22 [ 55.281203][ T4382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.360426][ T4384] loop2: detected capacity change from 0 to 1024 [ 55.364478][ T4384] EXT4-fs (loop2): Invalid want_extra_isize 7 [ 55.366199][ T4389] netlink: 'syz.3.115': attribute type 4 has an invalid length. [ 55.498262][ T4391] loop0: detected capacity change from 0 to 2048 [ 55.593028][ T4391] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 55.758063][ T4404] loop3: detected capacity change from 0 to 256 [ 55.927630][ T4410] loop3: detected capacity change from 0 to 512 [ 56.030906][ T4410] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 56.041420][ T4410] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 56.063448][ T4410] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.124: Corrupt directory, running e2fsck is recommended [ 56.100652][ T4410] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 56.102953][ T4410] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.124: corrupted in-inode xattr [ 56.148319][ T4410] EXT4-fs (loop3): Remounting filesystem read-only [ 56.150123][ T4410] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.124: couldn't read orphan inode 15 (err -117) [ 56.160931][ T4410] EXT4-fs (loop3): Remounting filesystem read-only [ 56.162527][ T4410] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,dax=inode,grpjquota=.i_version,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 56.234580][ T4027] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 56.243343][ T4410] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 56.276133][ T4410] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 56.278708][ T4410] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.124: Corrupt directory, running e2fsck is recommended [ 56.311786][ T4410] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz.3.124: path /26/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 56.344404][ T4431] udc-core: couldn't find an available UDC or it's busy [ 56.360766][ T4431] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 56.365813][ T4410] EXT4-fs (loop3): Remounting filesystem read-only [ 56.369428][ T4410] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 8: comm syz.3.124: path /26/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 56.392090][ T4410] EXT4-fs (loop3): Remounting filesystem read-only [ 56.399045][ T4437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.137'. [ 56.652765][ T4447] loop2: detected capacity change from 0 to 1764 [ 56.699797][ T4452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 56.727652][ T4455] loop1: detected capacity change from 0 to 512 [ 56.761016][ T4455] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 56.764263][ T4455] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 56.773364][ T4455] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.794322][ T4455] EXT4-fs (loop1): 1 truncate cleaned up [ 56.796250][ T4455] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,nombcache,journal_ioprio=0x0000000000000003,errors=remount-ro,lazytime,minixdf,noquota,dioread_nolock,. Quota mode: none. [ 56.817872][ T4455] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.145: bg 0: block 256: padding at end of block bitmap is not set [ 56.837507][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 56.841171][ T4455] EXT4-fs (loop1): Remounting filesystem read-only [ 57.015339][ T4071] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 57.024144][ T4464] netlink: 'syz.4.150': attribute type 5 has an invalid length. [ 57.043332][ T4464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.150'. [ 57.142426][ T4474] loop1: detected capacity change from 0 to 64 [ 57.186604][ T4027] Bluetooth: hci1: Unknown advertising packet type: 0xff [ 57.186726][ T4027] ================================================================== [ 57.190790][ T4027] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0xdd0/0x31c0 [ 57.192688][ T4027] Read of size 1 at addr ffff0000d1b5a40a by task kworker/u5:1/4027 [ 57.194584][ T4027] [ 57.195205][ T4027] CPU: 1 PID: 4027 Comm: kworker/u5:1 Not tainted 5.15.179-syzkaller #0 [ 57.197365][ T4027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 57.199990][ T4027] Workqueue: hci1 hci_rx_work [ 57.201234][ T4027] Call trace: [ 57.202103][ T4027] dump_backtrace+0x0/0x530 [ 57.203274][ T4027] show_stack+0x2c/0x3c [ 57.204334][ T4027] dump_stack_lvl+0x108/0x170 [ 57.205533][ T4027] print_address_description+0x7c/0x3f0 [ 57.207020][ T4027] kasan_report+0x174/0x1e4 [ 57.208716][ T4027] __asan_report_load1_noabort+0x44/0x50 [ 57.208753][ T4027] hci_le_meta_evt+0xdd0/0x31c0 [ 57.208773][ T4027] hci_event_packet+0xd34/0x12b4 [ 57.208784][ T4027] hci_rx_work+0x1d0/0x830 [ 57.208794][ T4027] process_one_work+0x790/0x11b8 [ 57.208806][ T4027] worker_thread+0x910/0x1034 [ 57.208816][ T4027] kthread+0x37c/0x45c [ 57.208826][ T4027] ret_from_fork+0x10/0x20 [ 57.208838][ T4027] [ 57.208842][ T4027] Allocated by task 4477: [ 57.208849][ T4027] ____kasan_kmalloc+0xbc/0xfc [ 57.208859][ T4027] __kasan_kmalloc+0x10/0x1c [ 57.208869][ T4027] __kmalloc_node_track_caller+0x234/0x448 [ 57.208880][ T4027] kmalloc_reserve+0xe8/0x270 [ 57.208891][ T4027] __alloc_skb+0x1a4/0x584 [ 57.208900][ T4027] vhci_write+0xb8/0x3b8 [ 57.208912][ T4027] vfs_write+0x884/0xb44 [ 57.208921][ T4027] ksys_write+0x15c/0x26c [ 57.208929][ T4027] __arm64_sys_write+0x7c/0x90 [ 57.208938][ T4027] invoke_syscall+0x98/0x2b8 [ 57.208948][ T4027] el0_svc_common+0x138/0x258 [ 57.208959][ T4027] do_el0_svc+0x58/0x14c [ 57.208968][ T4027] el0_svc+0x7c/0x1f0 [ 57.208979][ T4027] el0t_64_sync_handler+0x84/0xe4 [ 57.208989][ T4027] el0t_64_sync+0x1a0/0x1a4 [ 57.208998][ T4027] [ 57.209001][ T4027] The buggy address belongs to the object at ffff0000d1b5a000 [ 57.209001][ T4027] which belongs to the cache kmalloc-1k of size 1024 [ 57.209010][ T4027] The buggy address is located 10 bytes to the right of [ 57.209010][ T4027] 1024-byte region [ffff0000d1b5a000, ffff0000d1b5a400) [ 57.209022][ T4027] The buggy address belongs to the page: [ 57.209027][ T4027] page:00000000b3d275df refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000d1b58800 pfn:0x111b58 [ 57.209041][ T4027] head:00000000b3d275df order:3 compound_mapcount:0 compound_pincount:0 [ 57.209050][ T4027] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 57.209068][ T4027] raw: 05ffc00000010200 fffffc0003965200 0000000400000004 ffff0000c0002780 [ 57.209079][ T4027] raw: ffff0000d1b58800 000000008010000d 00000001ffffffff 0000000000000000 [ 57.209085][ T4027] page dumped because: kasan: bad access detected [ 57.209090][ T4027] [ 57.209092][ T4027] Memory state around the buggy address: [ 57.209098][ T4027] ffff0000d1b5a300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 57.209105][ T4027] ffff0000d1b5a380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 57.209113][ T4027] >ffff0000d1b5a400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.209119][ T4027] ^ [ 57.209124][ T4027] ffff0000d1b5a480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.209132][ T4027] ffff0000d1b5a500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.209137][ T4027] ================================================================== [ 57.209142][ T4027] Disabling lock debugging due to kernel taint [ 57.210202][ T4027] Bluetooth: hci1: Unknown advertising packet type: 0xff00 [ 57.210220][ T4027] Bluetooth: hci1: Unknown advertising packet type: 0xff00 [ 57.210292][ T4027] Bluetooth: hci1: Unknown advertising packet type: 0xff00 [ 57.210307][ T4027] Bluetooth: hci1: Unknown advertising packet type: 0xff00 [ 57.210321][ T4027] Bluetooth: hci1: Unknown advertising packet type: 0xff [ 57.210334][ T4027] Bluetooth: hci1: Unknown advertising packet type: 0xff00 [ 57.210351][ T4027] Bluetooth: hci1: Unknown advertising packet type: 0xba00 [ 57.210376][ T4027] Bluetooth: hci1: Unknown advertising packet type: 0x800 [ 57.222211][ T4474] binfmt_misc: register: failed to install interpreter file ./file2 [ 57.685280][ T4071] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 57.688092][ T4071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.690172][ T4071] usb 1-1: Product: syz [ 57.691245][ T4071] usb 1-1: Manufacturer: syz [ 57.692376][ T4071] usb 1-1: SerialNumber: syz [ 57.747730][ T4071] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 57.829115][ T4071] usb 1-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -2 [ 57.831686][ T4071] usb 1-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 59.689530][ T25] usb 1-1: USB disconnect, device number 2 [ 61.154877][ T21] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 61.157000][ T21] Bluetooth: hci3: Injecting HCI hardware error event [ 61.158800][ T4027] Bluetooth: hci3: hardware error 0x00