last executing test programs: 16.495297631s ago: executing program 2 (id=1135): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@noquota}, {@nodiscard}, {@noquota}, {@init_itable}, {@oldalloc}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4dc, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x409, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000240)=0x5, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 14.82870955s ago: executing program 2 (id=1143): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001040)="f5e0", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000f00)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c432193989489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d40004000043b682d653bcf35d53fd33489a3a405042c0de04c24504000031e1d76db8609d0bf66d8d723a6c28a50d42ab169de383345fbee97bea33e8bfb5d705852d360ab703fc952fd91d2b4066fdc167ae016c1ea8", 0xc5}], 0x1}}], 0x2, 0x4004880) sendto$inet(r0, &(0x7f0000000480)="09268a927f8960fcfaf65ac618eaf4b4834ff922b3f1e0b02b7aa03059bcec6d40c7a95425a3a07e758044ab4ea6f0ae5566ba00d972baed7ad5d769e9544b6e4aa279cbc63ca7bf", 0x48, 0x11, 0x0, 0x0) 14.603899299s ago: executing program 2 (id=1144): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000940)={0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x401, 0x40000000}, {0x0, 0x8}, {}, {0x0, 0x100}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x3}) 14.550865324s ago: executing program 2 (id=1145): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x38, 0x36, 0xe, 0x40, 0x2100, 0x9e55, 0x2f67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x47, 0x5, 0x20, 0x10, [{{0x9, 0x4, 0x47, 0x3, 0x0, 0xc7, 0x38, 0xc, 0x8}}]}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008000b010000000008003f"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 13.979306931s ago: executing program 2 (id=1149): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40142, 0x1ee) syz_usb_connect(0x2, 0x36, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0x40, 0xd0, 0x7d, 0x40, 0x1286, 0x1fa4, 0xfb16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x70, 0x0, 0x2, 0xee, 0x67, 0x8, 0x0, [], [{{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x1, 0x6, 0x2}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffe3ffffffffffff86dd600111fa00101100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22"], 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000005a00010026bd7000000000000a0000003200010066"], 0x48}}, 0x0) syz_open_procfs(0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x1000) r1 = socket$unix(0x1, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x97a9) bind$unix(r1, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1}) 13.416335158s ago: executing program 2 (id=1150): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14, 0x10}}, 0xa0}}, 0x0) write$binfmt_elf64(r2, 0x0, 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 6.231551789s ago: executing program 0 (id=1183): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000140)=ANY=[], 0x9, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) 5.428861276s ago: executing program 0 (id=1189): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}}, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fcntl$addseals(r2, 0x409, 0x9) io_setup(0x6, &(0x7f0000002140)=0x0) io_submit(r3, 0x1, &(0x7f0000002340)=[&(0x7f0000002180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r4, 0x5) openat$cgroup_ro(r4, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000005c0)=""/151, 0x84}, {&(0x7f00000003c0)=""/114}, {&(0x7f0000000240)=""/22}], 0x1, &(0x7f0000002f40)=""/244, 0x17}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000040)=0x5f, 0x4) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000100"/20, @ANYBLOB], 0x48}}, 0x0) ftruncate(r0, 0x5) 5.110692652s ago: executing program 1 (id=1192): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x50, 0xc, 0x4, 0x801, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x3}, [@generic="b20541acd4e74e4c864efc97d14aa5656fbd7dddbf69bcdd49b37836a0fc23b762713885bc2417b0ebf7c10b62b76067957c1b07cbc6", @nested={0x4, 0x10d, 0x0, 0x1, [@generic]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4890}, 0x20008001) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000080)) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x47}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r4) r6 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) 4.469853966s ago: executing program 0 (id=1198): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="02"], 0x80}}, 0x0) 4.331543148s ago: executing program 0 (id=1199): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ec, &(0x7f0000000380)="$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") dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB]) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5463, 0x0) syz_io_uring_complete(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r2, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGABS3F(r2, 0x8018457f, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 4.197011449s ago: executing program 1 (id=1200): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)="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", 0x2f5}, {&(0x7f0000000fc0)="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"/807, 0x327}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d0", 0x1b}], 0x3, 0x0, 0x0, 0x900}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="fa06a87e28e73d9b468084f879f1", 0xe}, {&(0x7f0000000480)="86c96f9217ef7eda926fdbcdd453df02cf29f0e95b5d0d44603f34b69f04d0e3b9ad2feaf9e06258453edd8d9e8a7eb7f718ac5a3cbf3beb80c9b94f86385811171cc8e2a80169c44376f23b680cb2ad208e2019ff87294c625b5cc8651c92d1139f8695ade6b2e5b18bc878ad847e326bfb427ed71efcff3a4d9b7522a428f2b869e872542401e84dfe350e3557", 0x8e}, {&(0x7f0000000200)}, {&(0x7f0000000240)}, {&(0x7f0000000540)="cd7b0bda0876a5226dea83d85835fd9b3c451e2ba27d3ff92c96ef3657940422b6b05d047189ef25e4e9b8e2de89509b1a7049310b56a4cf77d7bfde4ae4152f9570161a2c615bac25f34e3f77e691697819d36d655dd71bc4a8a96a0a5db7d1c360bc3dc7281e0f432945b988a0fcd68022aef48ace", 0x76}], 0x5}}, {{&(0x7f0000000400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000700)="7a2b16163fbf8309c10216441477ee6c589422450c1fe6bd11730f1b3a93480e462cd21c8dff174c6c84009549607c8b67c4b55d555ddecd452bf054746ba11e8f87e377feec3fac094cc73c81f3ad8fe24f4ea15b418c2d71a4c1a6be5c9846bbd194ee1454b8bd8da8173b47d5ae9abf5804140ef90eedd1655912a8133994f44f42d4634e4840166bd7b1f50a8a77f27ea87ae030335f8bffff60255052027c7fbcee7f2faecf4c8495001ab7e7c0cc985b2e778b88ec31918735f8770886fe2896582bc7f1dc2f0d1281532f4808d640e572450d8f66cdc1f5ee5a07e5c7a571f13eb3923a", 0xe7}, {&(0x7f0000001300)="bae048b4dabc46709c76b751e4b7ac7ee36ab88d9b649a951de271044c8f807ef6aeff78bcb49ed7acf9b3a0f90ded3927b2c16a65932cc1b3bcc4af0b98f8b4304c0a45fca66c9151122d1b86e0bcfe9bf01323f2ec673499083c572c07bd2e864e61b9cce1524627e848e2a6ecdcf446a89fda38ec6d70eed8201339a5d9cbe080e2aadd61ff0a57cc4725", 0x8c}], 0x2, &(0x7f0000001480)=[@ip_retopts={{0x40, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4, 0x37, 0x1, 0xa}, @noop, @timestamp_addr={0x44, 0x24, 0x88, 0x1, 0x9, [{@loopback, 0x9}, {@local, 0x57}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @generic={0x88, 0x2}, @end, @generic={0x0, 0x3, "13"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @empty}}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x98, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xf6, 0x0, 0x6, [0x4, 0x7, 0x9eb, 0x5]}, @rr={0x7, 0x1b, 0x78, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x41}, @broadcast]}, @ssrr={0x89, 0x7, 0x73, [@rand_addr=0x64010100]}, @lsrr={0x83, 0x23, 0x42, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3d}, @local, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast]}, @ssrr={0x89, 0x13, 0xb6, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @local]}, @timestamp={0x44, 0x4, 0x7b, 0x0, 0x2}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x31, 0x3, 0x0, [{@loopback}, {@local}]}]}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x9a, 0x3, 0x6, [{@local, 0x8}, {@rand_addr=0x64010102, 0x10000}, {@private=0xa010100, 0x7}]}, @cipso={0x86, 0x2b, 0x0, [{0x7, 0xd, "79c0a81c8effe8f757022d"}, {0x1, 0x4, "1a56"}, {0x6, 0xa, "1db9631006a0d9d8"}, {0x5, 0xa, "7352344c7aa9029f"}]}, @timestamp_prespec={0x44, 0x14, 0x18, 0x3, 0x9, [{@local, 0x9060}, {@rand_addr=0x64010101, 0x1}]}, @timestamp_addr={0x44, 0x44, 0x6d, 0x1, 0x7, [{@local, 0xb5}, {@private=0xa010100, 0x3b4}, {@loopback, 0x57d5}, {@empty, 0x6}, {@broadcast, 0x1}, {@private=0xa010100, 0x2}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xc5}]}]}}}], 0x1c0}}], 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) set_mempolicy(0x3, &(0x7f0000000040)=0x10000000005, 0x7) set_mempolicy(0x8000, &(0x7f0000000000)=0x1, 0x26d5) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x4e20, 0x2, @remote, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, 0x0, 0x0) userfaultfd(0x80001) 4.069849049s ago: executing program 1 (id=1202): setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000a80)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @private1}}]}, 0x110) 4.013314555s ago: executing program 1 (id=1203): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = msgget$private(0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0xffffffffffffffff, 0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x40) 4.011508074s ago: executing program 0 (id=1204): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0x2) userfaultfd(0x801) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) socket$kcm(0x10, 0x400000002, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e4"], 0x20) 3.031399776s ago: executing program 1 (id=1209): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x9, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0x6, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$eJzs3Au4TtX2MPAx5pyLTdKb5D7HHIs3bUyXJLkkySVJkiNJbgkhSZKQ3G9JSELuSe4huYXkfr/lniRJkiQkJJnf45zO1zmn8//39f/3fZ7vv8fvedbzzvGud8w15h5773ettZ93f9NhSOW6VSrUZmb4b8G/PXQHgBQA6A8A1wFABAAlspTIcmV/Bo3d/3sHEX+uh6Zf7QrE1ST9T9uk/2mb9D9tk/6nbdL/tE36n7ZJ/9M26b8Qadn2GTmvly3tbnL/Py2T9///QY4WHvvFxsI3dvwDKdL/tE36n7ZJ/9M26X/aJv1P26T/aZv0P22T/guRlv3X7x3L3w7+J2xX+/tPCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIUTacCH8ygDA38dXuy4hhBBCCCGEEEL8eUL6q12BEEIIIYQQQggh/u9DUKDBQATpID2kQAbICNdAJrgWMsN1kIDrIQvcAFnhRsgG2SEH5IRckBvygAUCBwwx5IV8kISbID/cDKlQAApCIfBQGIpAUSgGt0BxuBVKwG1QEm6HUlAaykBZuAPKwZ1QHu6CCnA3VIRKUBmqwD1QFe6FanAfVIf7oQY8ADXhQagFf4Ha8BDUgYehLjwC9eBRqA8NoCE0gsb/pfwXoAu8CF2hG3SHHtATekFv6AN9oR/0h5dgALwMA+EVGASDYQi8CkPhNRgGr8NwGAEj4Q0YBaNhDIyFcTAeJsCbMBHegknwNkyGKTAVpsF0mAEz4R2YBbNhDrwLc+E9mAfzYQEshEXwPiyGJbAUPoBl8CEshxWwElbBalgDa2EdrIcNsBE2wWbYAlthG2yHj2AH7IRdsBv2wF7YBx/DfvgEDsCncBA++4P55/8lvyMCAipUaNBgOkyHKZiCGTEjZsJMmBkzYwITmAWzYFbMitkwG+bAHJgLc2EezIOEhIyMeTEvJjGJ+TE/pmIqFsSC6NFjESyCxfAWLI7FsQSWwJJYEkthaSyNZbEslsNyWB7LYwWsgBWxIlbGyngP3oP3YjWshtWxOtbAGlgTa2ItrIW1sTbWwTpYF+tiPayH9bE+NsSG2BgbYxNsgk2xKTbH5tgCW2ArbIWtsTW2wTbYFttiO2yH7bE9dsAO2BE7YSd8AV/AF/FF7IYVVQ/siT2xN/bGvtgP++FLOABfxpfxFRyEg3EIvoqv4ms4DM/hcByBI3EkllOjcQyORVbjcQJOwIk4ESfhJJyMU3AKTsPpOANn4kychbNxNr6Lc/E9fA/n43xciItwES7GJbgUl+IyPI/LcQWuxFW4GtfgalyH63EdbsRNuBG34BbchtvwI/wId+JO3I27cS8aAPwYP8FPcBAexIN4CA/hYTyMR/AIHsWjeAyP4XE8jifwBJ7Ek3gKT+MZPI1n8Syew/N4AS/gRbyIl/C5XF/V2VtgwyBQVxhlVDqVTqWoFJVRZVSZVCaVWWVWCZVQWVQWlVVlVdlUNpVD5VC5VC6VR+VRpEixilVelVclVVLlV/lVqkpVBVVB5ZVXRVQRVUwVU8VVcVVC3aZKqttVKVVaNfNlVVlVTjX35dVdqoKqoCqqSqqyqqKqqKqqqqqmqqnqqrqqoWqomupBVUv1wL74kLrSmbpqMNZTQ7C+aqAaqkbqNXxMNVHDsKlqppqrJ9QIHI6tVBPfWj2l2qgx2FY9o8bis6q9Go8d1POqo+qkOqsXVBfV1HdV3dRk7KF6qmnYW/VRfVU/NQsrqSsdq6xeUYPUYDVEvaoW4mtqmHpdDVcj1Ej1hhqlRqsxaqwap8arCepNNVG9pSapt9VkNUVNVdPUdDVDzVTvqFlqtpqj3lVz1XtqnpqvFqiFapF6Xy1WS9RS9YFapj5Uy9UKtVKtUqvVGrVWrVPr1Qa1UW1Sm9UWtVVtU9vVR2qH2ql2qd1qj9qr9qmP1X71iTqgPlUH1WfqkPpcHVZfqCPqS3VUfaWOqa/VcfWNOqG+VSfVd+qUOq3OqO/VWfWDOqfOqwvqR3VR/aQuqZ/VZRUUaNRKa210pNPp9DpFZ9AZ9TU6k75WZ9bX6YS+XmfRN+is+kadTWfXOXROnUvn1nm01aSdZh3rvDqfTuqbdH59s07VBXRBXUh7XVgX0UV1MX2LLq5v1SX0bbqkvl2X0qV1GV1W36HL6Tt1eX2XrqDv1hV1JV1ZV9H36Kr6Xl1N36er6/t1Df2Arqkf1LX0X3Rt/ZCuox/WdfUjup5+VNfXDXRD3Ug31o/pJvpx3VQ30831E7qFbqlb6Sd1a/2UbqOf1m31M7qdfla318/pDvp53VF30p31z/qyDrqr7qa76x66p+6le+s+uq/up/vrl/QA/bIeqF/Rg/RgPUS/qofq1/Qw/boerkfokfoNPUqP1mP0WD1Oj9cT9Jt6on5LT9Jv68l6ip6qp+npeobu+8tMc/4P8t/6N/kD/3r0bXq7/kjv0Dv1Lr1b79F79T69T+/X+/UBfUAf1Af1IX1IH9aH9RF9RB/VR/UxfUwf18f1CX1Cn9Qn9Sl9Wv+ov9dn9Q/6nD6vz+sf9UV9UV/65WsABo0y2hgTmXQmvUkxGUxGc43JZK41mc11JmGuN1nMDSarudFkM9lNDpPT5DK5TR5jDRln2MQmr8lnkuYm/OWEwhQ0hYw3hU0RU/SP5Jv85maTagr8U/7v1dfYNDZNTBPT1DQ1zU1z08K0MK1MK9PatDZtTBvT1rQ17Uw70960Nx1MB9PRdDSdTWfTxXQxXU1X0910Nz1NL9Pb9DF9TT/T37xkBpgBZqAZaAaZQWaIGWKGmqFmmBlmhpvhZqQZaUaZUWaMGWPGmXFmgplgJpqJZpKZZCabyWaqmWqmm+lmpplpZplZZo6ZY+aauWaemWcWmAVmkVlkFpvFZqlZapaZZWa5WWFWmFVmlVlj1ph1Zp3ZYDaYTWaT2WK2mOVmu9ludpgdZpfZZfaYPWaf2Wf2m/3mgDlgDpqD5pA5ZA6bw+aIOWKOmqPmmDlmjpvj5oQ5YU6ak+aUOWXOmDPmrDlrzplz5oK5YC6ai+aSuWQum8tXTvsiFanIRCZKF6WLUqKUKGOUMcoUZYoyR5mjRJSIskRZoqzRjVG2KHuUI8oZ5YpyR3kiG1HkIo7iKG+UL0pGN0X5o5uj1KhAVDAqFPmocFQkKhoVi26Jike3RiWi26KS0e1Rqah0VCYqG90RlYvujMpHd0UVorujilGlqHJUJbonqhrdG1WL7ouqR/dHNaIHoprRg1Gt6C9R7eihqE70cFQ3eiSqFz0a1Y8aRA2jRlHjP3X+EM5lf9x3td1sd9vD9rS9bG/bx/a1/Wx/+5IdYF+2A+0rdpAdbIfYV+1Q+5odZl+3w+0IO9K+YUfZ0XaMHWvH2fF2gn3TTrRv2Un2bTvZTrFT7TQ73c6wM+07dpadbefYd+1c+56dZ+fbBXahXWTft4vtErvUfmCX2Q/tcrvCrrSr7Gq7xq616+x6u8FutJvsZrvFbrXb7Hb7kd1hd9pddrfdY/faffZju99+Yg/YT+1B+5k9ZD+3h+0X9oj90h61X9lj9mt73H5jT9hv7Un7nT1lT9sz9nt71v5gz9nz9oL90V60P9lL9md72YYrJ/dX3t7JkKF0lI5SKIUyUkbKRJkoM2WmBCUoC2WhrJSVslE2ykE5KBflojyUh65gYspLeSlJScpP+SmVUqkgFSRPnopQESpGxag4FacSVIJKUkkqRaWoDJWhO+gOupPupLvoLrqb7qZKVImqUBWqSlWpGlWj6lSdalANqkk1qRbVotpUm+pQHapLdake1aP6VJ8aUkNqTI2pCTWhptSUmlNzakEtqBW1otbUmtpQG2pLbakdtaP21J46UAfqSB2pM3WmLtSFulJX6k7dqSf1pN7Um/pSX+pP/WkADaCBNJAG0SAaQkNoKA2lYTSMhtMIGklv0CgaTWNoLI2j8TSBJtBEmkiTaBJNpsk0labSdJpOM2kmzaJZNIfm0FyaS/NoHi2gBbSIFtFiWkxLaSkto2W0nJbTSlpJq2k1raW1tJ7W00baSJtpM22lrbSdttMO2kG7aBftoT20j/bRftpPB+gAHaSDdIgOBQSgI3SEjtJROkbH6DgdpxN0gk7SSTpFp+gMnaGzdJbO0Tm6QBfoIv1El+hnukyBUlwGl9Fd4zK5a11md5371ziHy+lyudwuj7Mum8v+TzE551JdAVfw75eYrqhLTbnyWMh5V9gVcUVdKVfalXFl3R2unLvTlf9NXNXd66q5+1x1d7+r4u75p7iGe8DVdI+4Wu5RV9s1cHVcI1fXPeLquUddfdfANXSNXAvX0rVyT7rW7inXxj39m3ixW+LWuw1uo9vk9rtP3AX3ozvuvnEX3U+uq+vm+ruX3AD3shvoXnGD3ODfxCPdG26UG+3GuLFunBv/m3iqm+amuxlupnvHzXKzfxMvcu+7uW6pm+fmuwVu4V/jKzUtdR+4Ze5Dt9ytcCvdKrfarXFr3br/Xesqt8VtddvcPvex2+F2ul1ut9vj9v41vrKOA+5Td9B95o65r91h94U74k64o+6rv8ZX1nfCfetOuu/cKXfanXHfu7PuB3fOnb+y/nBl7d+7n91lFxwwsmLNhiNOx+k5hTNwRr6GM/G1nJmv4wRfz1n4Bs7KN3I2zs45OCfn4tychy0TO2aOOS/n4yTfxPn5Zk7lAlyQC7HnwlyEi3IxvoWL861cgm/jknw7l+LSXIbL8h1cju/k8nwXV+C7uSJX4spche/hqnwvV+P7uDrfzzX4Aa7JD3It/gvX5oe4Dj/MdfkRrsePcn1uwA25ETfmx7gJP85NuRk35ye4BbfkVvwkt+anuA0/zW35GW7Hz3J7fo478PPckTtxZ36Bu/CL3JW7cXfuwT25F/fmPtyX+3F/fokH8Ms8kF/hQTyYh/CrPJRf42H8Og/nETyS3+BRPJrH8Fgex+N5Ar/JE/ktnsRv82SewlN5Gk/nGTyT3+FZPJvn8Ls8l9/jeTyfF/BCXsTv82Jewkv5A17GH/JyXsEreRWv5jW8ltfxet7AG3kTb+YtvJW38Xb+iHfwTt7Fu3kP7+V9/DHv5wy//MB9xof4cz7MX/AR/pKP8ld8jL/m4/wNn+Bv+SR/x6f4NJ/h7/ks/8Dn+Dxf4B/5Iv/El/hnvsyBIcZYxTo2cRSni9PHKXGGOGN8TZwpvjbOHF8XJ+Lr4yzxDXHW+MY4W5w9zhHnjHPFueM8sY0pdjHHcZw3zhcn45vi/PHNcWpcIC4YF4p9XDguEheNi8W3xMXjW+MS8W1xyfj2uFRcOn7k/rLxHXG5+M64fHxXXCG+O64YV4orx1Xie+Kq8b1xtfi+uHp8f1w8fiCuGT8Ywy+fV6kTPxzXjR+J68WPxvXjBnHDuFHcOH4sbhI/HjeNm8XN4yfiFnHLuFX8ZNw6fipuEz/9u/u7xz3innGvuFccwn16QXJhclHy/eTi5JLk0uQHyWXJD5PLkyuSK5OrkquTa5Jrk+uS65MbkhuTm5Kbk1uSW5PbkiFUSQ8evfLaGx/5dD69T/EZfEZ/jc/kr/WZ/XU+4a/3WfwNPqu/0Wfz2X0On9Pn8rl9Hm89eefZxz6vz+eT/iaf39/sU30BX9AX8t4X9kV8I9/YN/ZN/OO+qW/mm/sn/BO+pW/pn/RP+qd8G/+0b+uf8e38s769f84/55/3HX0n39m/4Lv4F31X38139919T9/T9/a9fV/f1/f3/f0AP8AP9AP9ID/ID/FD/FA/1A/zw/xwP9yP9CP9KD/Kj/Fj/Dg/zk/wE/xEP9FP8pN8BABT/VQ/3U/3M/1MP8vP8nP8HD83da6f5+f5BX6BX+QX+cV+sV/ql/plfplf7pf7lX6lX+1X+7V+rV/v1/uNfqPf7Df7rX6r3+63+x1+h9/ld/k9fo/f5/f5/X6/P+AP+IP+oD/kD/nD/rA/4r/0R/1X/pj/2h/33/gT/lt/0n/nT/nT/oz/3p/1P/hz/ry/4H/0F/1P/pL/2V/2wU9IvJmYmHgrMSnxdmJyYkpiamJaYnpiRmJm4p3ErMTsxJzEu4m5ifcS8xLzEwsSCxOLEu8nFieWJJYmPkgsS3yYWJ5YkViZWJVYnVhjIOTeEYe8IV9IhptC/nBzSA0FQsFQKPhQOBQJRUOxcEsoHm4NJcJtoWS4PZQKpUOZ8GioHxqEhqFRaBweC03C46FpaBaahydCi9AytApPhtbhqdAmPB3ahmdCu/BsaB+eCx3C86Fj6BQ6hxdCl/Bi6Bq6he6hR+gZeoXeoU/oG/qF/uGlMCC8HAaGV8KgMDgMCa+GoeG1MCy8HoaHEWFkeCOMCqPDmDA2jAvjw4TwZpgY3gqTwtthcpgSpoZpYXqYEWaGd8KsMDvMCe+GueG9MC/MDwvCwrAovB8WhyVhafggLAsfhuVhRVgZVoXVYU1YG9aF9WFD2Bg2hc1hS9gatoXt4aOwI+wMu8LusCfsDfvCx2F/+CQcCJ+Gg+GzcCh8Hg6HL8KR8GU4Gr4Kx8LX4Xj4JpwI34aT4btwKpwOZ8L34Wz4IZwL58OF8GO4GH4Kl8LP4fIf/MxapT/zFroQQgghxP9Hev3O/h7/5jkDAOqX8U8hhGt35jz6j/s1AGzO9rdxH5WrRQIAnurW4aG/bxUrdu/e/ZfXLtcQ5ZsPAIl/OcAv8QpoDi2hNTSDYv+2vj6q00X+nfmTtwFk/IecFPg1/nX+z/+D+R97YuTikvGFLP/J/PMBUvP9mnPlKvzv8QpofmU10AyK/wfzZ2/yO/Vn+GICQNN/yMkEAE0z/Gv9ReBxeBpa/9MrhRBCCCGEEEKIv+mjyrT7vevnK9fnucyvOenh1/j3rs+FEEIIIYQQQghx9T3bqfOTj7Vu3aydDGQggzQ2aPmfvOZq/2YSQgghhBBC/Nl+Pen/9bkMV7MgIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBAiDfp/8Z/GrvYahRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiKvtfwUAAP//D5g3fQ==") bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 1.658014281s ago: executing program 3 (id=1213): setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000a80)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @private1}}]}, 0x110) 1.591857767s ago: executing program 3 (id=1214): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x402c5839, 0x0) 1.591552897s ago: executing program 3 (id=1215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x18}}}}}, 0x36) 1.512590633s ago: executing program 0 (id=1216): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14, 0x10}}, 0xa0}}, 0x0) write$binfmt_elf64(r2, 0x0, 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1.291534852s ago: executing program 3 (id=1217): r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) keyctl$set_timeout(0xf, r0, 0x10000) 841.19485ms ago: executing program 4 (id=1219): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feff", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001bc0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x5a6e, 0x0, 0x30, 0x2, 0x2, 0x8, 0x98, 0x81, 0x3, 0xa8, 0x0, 0xc9, 0x3, 0x9, 0xb, 0x0, 0x9, 0x0, 0x8000, 0x8001, 0x3, 0x400, 0x0, 0x2, 0x0, 0x0, 0x6b93, 0x9, 0x400, 0x1, 0x0, 0x55f8, 0x35, 0x7ff, 0x0, 0x1, 0x2, 0x4, 0x1ff, 0x9, 0x1, 0x3ff, 0xc83, 0x48, 0x9, 0xed1, 0x100, 0x2c, 0x8, 0xf, 0x3, 0x5, 0xfffffff1, 0x3, 0x0, 0x5, 0x2, 0x3e, 0x100, 0x9, 0x8000, 0x26, 0x5, 0x4, 0x8, 0x9, 0x4, 0x10001, 0x3, 0x53, 0x800, 0x4e675094, 0x2, 0x4, 0x6, 0x8, 0x7, 0xd5, 0x400, 0x5, 0x7, 0x4, 0x2, 0x5, 0x9, 0x5, 0x2, 0x3482, 0x401, 0x6, 0x2, 0x4, 0x5, 0x7, 0xe, 0x1b4, 0x8, 0x2, 0x2, 0x1000, 0x1, 0x8, 0xf0d, 0x7f, 0xa3, 0x0, 0xffffff7f, 0x7fffffff, 0x8, 0x5, 0x8, 0x2, 0x1, 0x80000001, 0x81, 0x5e90, 0x7f, 0x6538, 0x95d, 0xe, 0x8, 0x4, 0x1000, 0x4, 0xfffff365, 0x6, 0x7, 0x5bf5faf9, 0x0, 0x1, 0x4, 0x4, 0x0, 0x7, 0x2d, 0x7, 0x4, 0x3, 0x216f, 0x6, 0x3, 0x4, 0x7f, 0xb, 0x63b, 0x1, 0x1, 0x8, 0x10000000, 0x7, 0x37e0, 0x7225e242, 0xffffffff, 0xaf3d, 0x200, 0x8000, 0x3ea, 0xfffffff9, 0xe, 0x2, 0x5, 0x1, 0x8000, 0x4, 0xa, 0x0, 0x7ff, 0x2, 0x9, 0x1, 0x1, 0x0, 0x4, 0xfffffbff, 0x3, 0xbe2, 0x1, 0x0, 0x5, 0x6, 0x6, 0x1bc6, 0x400, 0x6ee9b696, 0x2, 0x100, 0x1, 0x7, 0xa2ae, 0x7, 0x8, 0x7, 0x2, 0xffffffce, 0x1, 0x4, 0x6, 0x81, 0x3, 0x1ff, 0x9, 0x0, 0x1, 0x100, 0x7ff, 0x7, 0x33dd, 0xb, 0x70, 0x6, 0x6, 0x8000, 0xed, 0xfffffff8, 0x80, 0xb4, 0x8, 0x8, 0xe50c, 0x5, 0x7, 0x1, 0x3, 0x4, 0xa9, 0x5, 0x9, 0x2, 0x2, 0xffffff34, 0x9, 0x4, 0x2, 0x2fce5f46, 0x40, 0x8, 0x0, 0x2, 0x5, 0xd, 0x7, 0x2, 0x9, 0xff, 0x9, 0x3, 0x9, 0x1, 0x43, 0x7, 0x1, 0x5, 0xa154, 0x4, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x8000, 0x8, 0xb7d, {0xc8, 0x1, 0x2000, 0x9, 0x7, 0x400}, {0x5, 0x0, 0x1, 0x9, 0xb563, 0x3}, 0x7fffffff, 0xc41, 0x970}}]}]}}]}, 0x478}}, 0x0) 800.305843ms ago: executing program 3 (id=1220): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000240)={[{@lazytime}, {}, {@filestreams}, {@uqnoenforce}, {@prjquota}]}, 0x4, 0x9647, &(0x7f0000012cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000480)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000003, 0x9}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4040c405}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x401c5820, &(0x7f0000000080)={@desc={0xd32780, 0x0, @desc2}}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 643.664426ms ago: executing program 4 (id=1221): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f00000003c0), &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x3f70, 0x0, 0x0, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(0xffffffffffffffff, 0x0) connect$unix(r6, &(0x7f0000000640)=@file={0x1}, 0x6e) connect$unix(r6, &(0x7f0000000280)=@file={0x1}, 0x6e) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) tgkill(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000791090000000000063"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r10, 0xab19}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r10, 0x6, 0x6}, &(0x7f00000000c0)=0x8) 351.373991ms ago: executing program 4 (id=1222): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)="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", 0x2f5}, {&(0x7f0000000fc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369b93d78e6e99ed492e7bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e5f011c00d215ff2249901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf1119305f0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef09000000000000007d1fea33bf2acfb7630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b1574826727f5f62f842a3bedb18ec4aa931dfa0fc47e4dca15ec180d04cfdfff82fd9c6066fe65322c8c019dd09c32d60cb5e1b60f6c37ef36acd509dec18fcc274d0334c8fa81809a5dd93396bf972ffd3013add7b197e6cbf06237757ae14f2eaabfcdf934749424c8250eb4ae6d5dd57b192825821fce610cbba1932ea796429f6a37e3e201c762a91cfa73f9be510c7ec44617a93327c7a3eb96149002dd53aae59748df921404f4373b845f6e793fce38e235d027e7cfb9c0db2464000928b80e8827249391270adaa4ba2baaf00563827476fe025e59235450acd9707bfff75c48658074dfd3f98901645972b827842c9518f00689eb7db0b9434deda68be1db940daac02474f2ff3a319ebe25f9fbab2250855e7591b968b14135545b86d946705195a62c0fed40c22c56218cc07c7be3b556838b2a15e12c6244dc221ed502b1f249dd000"/807, 0x327}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d0", 0x1b}], 0x3, 0x0, 0x0, 0x900}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="fa06a87e28e73d9b468084f879f1", 0xe}, {&(0x7f0000000480)="86c96f9217ef7eda926fdbcdd453df02cf29f0e95b5d0d44603f34b69f04d0e3b9ad2feaf9e06258453edd8d9e8a7eb7f718ac5a3cbf3beb80c9b94f86385811171cc8e2a80169c44376f23b680cb2ad208e2019ff87294c625b5cc8651c92d1139f8695ade6b2e5b18bc878ad847e326bfb427ed71efcff3a4d9b7522a428f2b869e872542401e84dfe350e3557", 0x8e}, {&(0x7f0000000200)}, {&(0x7f0000000240)}, {&(0x7f0000000540)="cd7b0bda0876a5226dea83d85835fd9b3c451e2ba27d3ff92c96ef3657940422b6b05d047189ef25e4e9b8e2de89509b1a7049310b56a4cf77d7bfde4ae4152f9570161a2c615bac25f34e3f77e691697819d36d655dd71bc4a8a96a0a5db7d1c360bc3dc7281e0f432945b988a0fcd68022aef48ace", 0x76}], 0x5}}, {{&(0x7f0000000400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000700)="7a2b16163fbf8309c10216441477ee6c589422450c1fe6bd11730f1b3a93480e462cd21c8dff174c6c84009549607c8b67c4b55d555ddecd452bf054746ba11e8f87e377feec3fac094cc73c81f3ad8fe24f4ea15b418c2d71a4c1a6be5c9846bbd194ee1454b8bd8da8173b47d5ae9abf5804140ef90eedd1655912a8133994f44f42d4634e4840166bd7b1f50a8a77f27ea87ae030335f8bffff60255052027c7fbcee7f2faecf4c8495001ab7e7c0cc985b2e778b88ec31918735f8770886fe2896582bc7f1dc2f0d1281532f4808d640e572450d8f66cdc1f5ee5a07e5c7a571f13eb3923a", 0xe7}, {&(0x7f0000001300)="bae048b4dabc46709c76b751e4b7ac7ee36ab88d9b649a951de271044c8f807ef6aeff78bcb49ed7acf9b3a0f90ded3927b2c16a65932cc1b3bcc4af0b98f8b4304c0a45fca66c9151122d1b86e0bcfe9bf01323f2ec673499083c572c07bd2e864e61b9cce1524627e848e2a6ecdcf446a89fda38ec6d70eed8201339a5d9cbe080e2aadd61ff0a57cc47256c", 0x8d}], 0x2, &(0x7f0000001480)=[@ip_retopts={{0x40, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4, 0x37, 0x1, 0xa}, @noop, @timestamp_addr={0x44, 0x24, 0x88, 0x1, 0x9, [{@loopback, 0x9}, {@local, 0x57}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @generic={0x88, 0x2}, @end, @generic={0x0, 0x3, "13"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @empty}}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x98, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xf6, 0x0, 0x6, [0x4, 0x7, 0x9eb, 0x5]}, @rr={0x7, 0x1b, 0x78, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x41}, @broadcast]}, @ssrr={0x89, 0x7, 0x73, [@rand_addr=0x64010100]}, @lsrr={0x83, 0x23, 0x42, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3d}, @local, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast]}, @ssrr={0x89, 0x13, 0xb6, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @local]}, @timestamp={0x44, 0x4, 0x7b, 0x0, 0x2}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x31, 0x3, 0x0, [{@loopback}, {@local}]}]}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x9a, 0x3, 0x6, [{@local, 0x8}, {@rand_addr=0x64010102, 0x10000}, {@private=0xa010100, 0x7}]}, @cipso={0x86, 0x2b, 0x0, [{0x7, 0xd, "79c0a81c8effe8f757022d"}, {0x1, 0x4, "1a56"}, {0x6, 0xa, "1db9631006a0d9d8"}, {0x5, 0xa, "7352344c7aa9029f"}]}, @timestamp_prespec={0x44, 0x14, 0x18, 0x3, 0x9, [{@local, 0x9060}, {@rand_addr=0x64010101, 0x1}]}, @timestamp_addr={0x44, 0x44, 0x6d, 0x1, 0x7, [{@local, 0xb5}, {@private=0xa010100, 0x3b4}, {@loopback, 0x57d5}, {@empty, 0x6}, {@broadcast, 0x1}, {@private=0xa010100, 0x2}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xc5}]}]}}}], 0x1c0}}], 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) set_mempolicy(0x3, &(0x7f0000000040)=0x10000000005, 0x7) set_mempolicy(0x8000, &(0x7f0000000000)=0x1, 0x26d5) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x4e20, 0x2, @remote, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, 0x0, 0x0) userfaultfd(0x80001) 229.142781ms ago: executing program 4 (id=1223): setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000a80)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @private1}}]}, 0x110) 135.506759ms ago: executing program 4 (id=1224): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') lseek(r0, 0x4, 0x0) 126.188769ms ago: executing program 4 (id=1225): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_sigqueueinfo(r0, 0xd, &(0x7f0000000200)={0x22, 0x3a, 0xfffffffe}) 2.32473ms ago: executing program 3 (id=1226): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x7, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x100) r2 = syz_open_dev$video(0x0, 0x6b23, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) recvmmsg(r3, 0x0, 0x0, 0x20000002, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$full(0xffffff9c, 0x0, 0x2040c0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, 0x0, 0x0) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) 0s ago: executing program 1 (id=1227): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004340)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): enamed from eth3 [ 318.792963][ T4315] Bluetooth: hci4: command 0x040f tx timeout [ 318.816428][ T6912] loop4: detected capacity change from 0 to 512 [ 318.820873][ T6912] EXT4-fs (loop4): Ignoring removed oldalloc option [ 318.911196][ T6916] udc-core: couldn't find an available UDC or it's busy [ 318.913178][ T6916] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 318.945351][ T6912] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.701: Parent and EA inode have the same ino 15 [ 318.970730][ T6912] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.701: Parent and EA inode have the same ino 15 [ 318.974757][ T6912] EXT4-fs (loop4): 1 orphan inode deleted [ 318.976272][ T6912] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 319.037658][ T6922] binder: 6918:6922 got transaction to invalid handle, 2 [ 319.039357][ T6922] binder: 6918:6922 transaction failed 29201/-22, size 80-24 line 2917 [ 319.776442][ T6833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.839167][ T6833] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.843438][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.846347][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.874022][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 319.876919][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.879491][ T5355] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.881316][ T5355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.884386][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.887085][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.889549][ T5355] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.891434][ T5355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.908941][ T6926] udc-core: couldn't find an available UDC or it's busy [ 319.917081][ T6926] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 320.984471][ T4315] Bluetooth: hci4: command 0x0419 tx timeout [ 320.990378][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.992005][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.103885][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.132745][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.143155][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 321.164773][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 323.419953][ T6942] loop4: detected capacity change from 0 to 256 [ 323.499608][ T6944] loop2: detected capacity change from 0 to 512 [ 323.580991][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 323.583875][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 323.586546][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 323.589273][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 323.629895][ T6942] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 323.769603][ T6944] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 326.682388][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 326.685266][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 326.702325][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 326.707941][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 326.777800][ T6953] loop3: detected capacity change from 0 to 512 [ 326.854168][ T6953] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 326.874800][ T6953] EXT4-fs error (device loop3): __ext4_iget:4872: inode #11: block 1: comm syz.3.712: invalid block [ 326.877949][ T6953] EXT4-fs (loop3): Remounting filesystem read-only [ 326.879534][ T6953] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.712: couldn't read orphan inode 11 (err -117) [ 326.886124][ T6953] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 327.510500][ T6833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 328.726680][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 328.728840][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 328.763662][ T6833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.889472][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 328.894006][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 329.018427][ T6833] device veth0_vlan entered promiscuous mode [ 329.059335][ T6833] device veth1_vlan entered promiscuous mode [ 329.211264][ T6973] binder: 6968:6973 got transaction to invalid handle, 2 [ 329.213047][ T6973] binder: 6968:6973 transaction failed 29201/-22, size 80-24 line 2917 [ 331.502888][ T6981] loop2: detected capacity change from 0 to 512 [ 331.593986][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 331.596845][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 331.599585][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 331.601950][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 331.626088][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 331.646862][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 331.665706][ T6981] EXT4-fs (loop2): Ignoring removed oldalloc option [ 331.675506][ T6833] device veth0_macvtap entered promiscuous mode [ 331.700655][ T6833] device veth1_macvtap entered promiscuous mode [ 331.751618][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.813086][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.851009][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.881142][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.901526][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.912696][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.925493][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.928082][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.930536][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.940233][ T6981] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.717: Parent and EA inode have the same ino 15 [ 331.963932][ T6981] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.717: Parent and EA inode have the same ino 15 [ 331.969296][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.972900][ T6981] EXT4-fs (loop2): 1 orphan inode deleted [ 331.974459][ T6981] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 331.985119][ T6833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.397889][ T6991] 9pnet: Insufficient options for proto=fd [ 333.458183][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 333.462789][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 333.467235][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 333.476716][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 333.479486][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.514199][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.516705][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.518964][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.521358][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.614108][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.616606][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.618868][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.621423][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.636270][ T6998] loop4: detected capacity change from 0 to 256 [ 333.672723][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.675230][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.678886][ T6833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.695611][ T6833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.697895][ T6833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.699994][ T6833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.712363][ T6833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.930090][ T7002] udc-core: couldn't find an available UDC or it's busy [ 333.931961][ T7002] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 335.294140][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.297025][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.312877][ T5352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.316159][ T5352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.355636][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 335.448788][ T4106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.450976][ T4106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.456983][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 335.870531][ T6995] loop3: detected capacity change from 0 to 40427 [ 339.839997][ T7036] loop4: detected capacity change from 0 to 512 [ 339.930625][ T7036] EXT4-fs (loop4): Ignoring removed oldalloc option [ 339.958775][ T7036] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.733: Parent and EA inode have the same ino 15 [ 339.963304][ T7036] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.733: Parent and EA inode have the same ino 15 [ 340.150420][ T7036] EXT4-fs (loop4): 1 orphan inode deleted [ 340.151991][ T7036] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 340.238889][ T7050] netlink: 'syz.0.735': attribute type 27 has an invalid length. [ 340.785688][ T7057] loop2: detected capacity change from 0 to 2048 [ 340.879561][ T7059] loop3: detected capacity change from 0 to 16 [ 341.090461][ T7059] erofs: (device loop3): mounted with root inode @ nid 36. [ 341.107056][ T7057] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 341.335190][ T7067] udc-core: couldn't find an available UDC or it's busy [ 341.336966][ T7067] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 341.530708][ T7050] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.532834][ T7050] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.377113][ T7080] loop2: detected capacity change from 0 to 512 [ 343.470247][ T7050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.494065][ T7080] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 343.529057][ T7050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.754287][ T7086] loop3: detected capacity change from 0 to 1024 [ 344.900517][ T7086] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 345.824750][ T7089] loop4: detected capacity change from 0 to 40427 [ 345.930286][ T7089] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 345.932538][ T7089] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 345.966893][ T7089] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 345.995990][ T7089] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 345.997767][ T7089] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 346.032403][ T7050] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.034828][ T7050] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.037184][ T7050] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.039455][ T7050] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.492815][ T7051] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 346.495747][ T7051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.498411][ T7051] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.523633][ T7051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 346.864151][ T7112] loop3: detected capacity change from 0 to 512 [ 348.187972][ T7112] EXT4-fs (loop3): Ignoring removed oldalloc option [ 348.208585][ T7112] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.747: Parent and EA inode have the same ino 15 [ 348.230324][ T7112] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.747: Parent and EA inode have the same ino 15 [ 348.250720][ T7112] EXT4-fs (loop3): 1 orphan inode deleted [ 348.260695][ T7112] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 348.793279][ T7120] fuse: Unknown parameter 'yh"}|6AC|uO!îTyl4s{uW7#ӾW@"vD7'PpL:;~Sf"PAuTQ݆KøpRjyRv98ʷWEzh' [ 348.815192][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 348.815205][ T26] audit: type=1326 audit(348.770:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7119 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df9e9a8 code=0x7ffc0000 [ 348.839945][ T26] audit: type=1326 audit(348.790:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7119 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9df9e9a8 code=0x7ffc0000 [ 348.859914][ T26] audit: type=1326 audit(348.790:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7119 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df9e9a8 code=0x7ffc0000 [ 348.866309][ T7120] Process accounting resumed [ 348.879584][ T26] audit: type=1326 audit(348.790:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7119 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9df9e9a8 code=0x7ffc0000 [ 348.909983][ T26] audit: type=1326 audit(348.790:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7119 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df9e9a8 code=0x7ffc0000 [ 348.936726][ T26] audit: type=1326 audit(348.800:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7119 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9df9e9a8 code=0x7ffc0000 [ 348.965341][ T26] audit: type=1326 audit(348.810:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7119 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df9e9a8 code=0x7ffc0000 [ 348.970718][ T26] audit: type=1326 audit(348.810:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7119 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9df9e9a8 code=0x7ffc0000 [ 349.007131][ T26] audit: type=1326 audit(348.810:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7119 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df9e9a8 code=0x7ffc0000 [ 349.024298][ T7125] binder: 7124:7125 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 349.027382][ T26] audit: type=1326 audit(348.810:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7119 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffff9df9e9a8 code=0x7ffc0000 [ 350.326991][ T300] device hsr_slave_0 left promiscuous mode [ 350.912550][ T300] device hsr_slave_1 left promiscuous mode [ 351.032401][ T300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.034637][ T300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.037355][ T300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.041580][ T300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.051034][ T300] device bridge_slave_1 left promiscuous mode [ 351.053734][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.196382][ T300] device bridge_slave_0 left promiscuous mode [ 351.198173][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.160922][ T7144] loop3: detected capacity change from 0 to 40427 [ 352.560275][ T7144] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 352.562523][ T7144] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 352.596037][ T7144] F2FS-fs (loop3): invalid crc value [ 352.651945][ T7144] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 352.768821][ T7144] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 352.770575][ T7144] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 353.209585][ T300] device veth1_macvtap left promiscuous mode [ 353.223652][ T300] device veth0_macvtap left promiscuous mode [ 353.226254][ T300] device veth1_vlan left promiscuous mode [ 353.233064][ T300] device veth0_vlan left promiscuous mode [ 353.272369][ T7159] loop4: detected capacity change from 0 to 512 [ 353.383977][ T7159] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 353.797197][ T7167] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.758: Directory hole found for htree leaf block 0 [ 354.311768][ T7170] loop4: detected capacity change from 0 to 512 [ 354.355582][ T7170] EXT4-fs (loop4): Ignoring removed oldalloc option [ 354.371226][ T7170] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.763: Parent and EA inode have the same ino 15 [ 354.386910][ T7170] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.763: Parent and EA inode have the same ino 15 [ 354.392766][ T7170] EXT4-fs (loop4): 1 orphan inode deleted [ 354.394441][ T7170] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 354.584599][ T300] team0 (unregistering): Port device team_slave_1 removed [ 354.614569][ T300] team0 (unregistering): Port device team_slave_0 removed [ 354.701145][ T300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.846270][ T300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.916990][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 354.917005][ T26] audit: type=1326 audit(354.870:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.4.764" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb47529a8 code=0x7ffc0000 [ 354.943247][ T26] audit: type=1326 audit(354.870:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.4.764" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb47529a8 code=0x7ffc0000 [ 354.972209][ T26] audit: type=1326 audit(354.870:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.4.764" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb47529a8 code=0x7ffc0000 [ 354.978166][ T26] audit: type=1326 audit(354.870:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.4.764" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb47529a8 code=0x7ffc0000 [ 354.984061][ T26] audit: type=1326 audit(354.870:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.4.764" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb47529a8 code=0x7ffc0000 [ 354.992562][ T26] audit: type=1326 audit(354.870:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.4.764" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb47529a8 code=0x7ffc0000 [ 354.999748][ T26] audit: type=1326 audit(354.870:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.4.764" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb47529a8 code=0x7ffc0000 [ 355.012269][ T26] audit: type=1326 audit(354.870:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.4.764" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb47529a8 code=0x7ffc0000 [ 355.017454][ T26] audit: type=1326 audit(354.870:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.4.764" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb47529a8 code=0x7ffc0000 [ 355.040647][ T26] audit: type=1326 audit(354.870:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.4.764" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffffb47529a8 code=0x7ffc0000 [ 355.272007][ T300] bond0 (unregistering): Released all slaves [ 356.256667][ T7188] loop3: detected capacity change from 0 to 1024 [ 356.410368][ T7188] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c02c, mo2=0003] [ 356.418063][ T7188] System zones: 0-1, 3-36 [ 356.427694][ T7188] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,data_err=ignore,discard,max_batch_time=0x0000000000000003,resuid=0x0000000000000000,max_batch_time=0x0000000000000006,delalloc,nodelalloc,errors=remount-ro,bsddf,debug,. Quota mode: writeback. [ 357.498748][ T7196] loop4: detected capacity change from 0 to 128 [ 359.488025][ T7209] loop3: detected capacity change from 0 to 512 [ 359.523576][ T7209] EXT4-fs (loop3): Ignoring removed oldalloc option [ 360.462725][ T7214] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 360.465268][ T7214] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 360.565820][ T7209] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.774: Parent and EA inode have the same ino 15 [ 360.571570][ T7209] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.774: Parent and EA inode have the same ino 15 [ 360.581637][ T7209] EXT4-fs (loop3): 1 orphan inode deleted [ 360.589637][ T7209] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 361.053311][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 361.053325][ T26] audit: type=1326 audit(360.990:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb47529a8 code=0x7ffc0000 [ 361.060380][ T26] audit: type=1326 audit(360.990:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb47529a8 code=0x7ffc0000 [ 361.109120][ T26] audit: type=1326 audit(360.990:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb47529a8 code=0x7ffc0000 [ 361.140674][ T26] audit: type=1326 audit(360.990:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb47529a8 code=0x7ffc0000 [ 361.165761][ T26] audit: type=1326 audit(360.990:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb47529a8 code=0x7ffc0000 [ 361.236675][ T26] audit: type=1326 audit(360.990:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb47529a8 code=0x7ffc0000 [ 361.241873][ T26] audit: type=1326 audit(360.990:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb47529a8 code=0x7ffc0000 [ 361.290476][ T7231] loop4: detected capacity change from 0 to 512 [ 361.347796][ T26] audit: type=1326 audit(360.990:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb47529a8 code=0x7ffc0000 [ 361.373798][ T7234] loop2: detected capacity change from 0 to 128 [ 361.375549][ T26] audit: type=1326 audit(360.990:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb47529a8 code=0x7ffc0000 [ 361.389985][ T26] audit: type=1326 audit(360.990:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb47529a8 code=0x7ffc0000 [ 362.528762][ T7238] loop3: detected capacity change from 0 to 512 [ 362.677180][ T7231] EXT4-fs (loop4): Test dummy encryption mode enabled [ 362.691514][ T7231] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.781: inline data xattr refers to an external xattr inode [ 362.701928][ T7231] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.781: couldn't read orphan inode 12 (err -117) [ 362.712008][ T7231] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 362.735531][ T7234] udc-core: couldn't find an available UDC or it's busy [ 362.737454][ T7234] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 362.897198][ T7247] udc-core: couldn't find an available UDC or it's busy [ 362.898984][ T7247] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 364.095941][ T7238] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 364.751741][ T7253] Invalid ELF header magic: != ELF [ 365.688049][ T7264] loop2: detected capacity change from 0 to 512 [ 365.776067][ T7266] hub 6-0:1.0: USB hub found [ 365.780342][ T7266] hub 6-0:1.0: 8 ports detected [ 365.790210][ T7264] EXT4-fs (loop2): Ignoring removed oldalloc option [ 365.823467][ T7264] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.789: Parent and EA inode have the same ino 15 [ 365.840244][ T7264] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.789: Parent and EA inode have the same ino 15 [ 365.866666][ T7264] EXT4-fs (loop2): 1 orphan inode deleted [ 365.868392][ T7264] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 367.204846][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.207024][ T7276] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.342260][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 367.342275][ T26] audit: type=1326 audit(367.290:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.2.791" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d5f9a8 code=0x7ffc0000 [ 367.411268][ T26] audit: type=1326 audit(367.360:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.2.791" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff94d5f9a8 code=0x7ffc0000 [ 367.418603][ T26] audit: type=1326 audit(367.370:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.2.791" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d5f9a8 code=0x7ffc0000 [ 367.444553][ T26] audit: type=1326 audit(367.370:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.2.791" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff94d5f9a8 code=0x7ffc0000 [ 367.449849][ T26] audit: type=1326 audit(367.370:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.2.791" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d5f9a8 code=0x7ffc0000 [ 367.488089][ T26] audit: type=1326 audit(367.370:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.2.791" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff94d5f9a8 code=0x7ffc0000 [ 367.514518][ T26] audit: type=1326 audit(367.380:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.2.791" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d5f9a8 code=0x7ffc0000 [ 367.596622][ T26] audit: type=1326 audit(367.380:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.2.791" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff94d5f9a8 code=0x7ffc0000 [ 368.469238][ T26] audit: type=1326 audit(367.380:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.2.791" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d5f9a8 code=0x7ffc0000 [ 368.486138][ T26] audit: type=1326 audit(367.380:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.2.791" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffff94d5f9a8 code=0x7ffc0000 [ 370.539801][ T7300] netlink: 60 bytes leftover after parsing attributes in process `syz.1.798'. [ 370.738573][ T7305] cgroup: Unknown subsys name 'favordynmods' [ 370.878764][ T7306] loop2: detected capacity change from 0 to 256 [ 371.688141][ T7308] loop3: detected capacity change from 0 to 512 [ 371.786046][ T7308] EXT4-fs (loop3): Ignoring removed oldalloc option [ 371.821312][ T7308] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.801: Parent and EA inode have the same ino 15 [ 371.842264][ T7308] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.801: Parent and EA inode have the same ino 15 [ 371.903217][ T7316] fuse: Unknown parameter 'yh"}|6AC|uO!îTyl4s{uW7#ӾW@"vD7'PpL:;~Sf"PAuTQ݆KøpRjyRv98ʷWEzh' [ 371.952286][ T7308] EXT4-fs (loop3): 1 orphan inode deleted [ 371.953673][ T7308] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 371.964502][ T7312] Process accounting resumed [ 372.939296][ T7324] loop2: detected capacity change from 0 to 16 [ 372.962459][ T7324] erofs: (device loop2): mounted with root inode @ nid 36. [ 373.498441][ T7324] attempt to access beyond end of device [ 373.498441][ T7324] loop2: rw=0, want=24, limit=16 [ 373.996676][ T7332] raw_sendmsg: syz.3.807 forgot to set AF_INET. Fix it! [ 374.121746][ T7334] udc-core: couldn't find an available UDC or it's busy [ 374.162133][ T7334] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 374.192734][ T7336] udc-core: couldn't find an available UDC or it's busy [ 374.212257][ T7336] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 376.654961][ T7346] fuse: Unknown parameter 'yh"}|6AC|uO!îTyl4s{uW7#ӾW@"vD7'PpL:;~Sf"PAuTQ݆KøpRjyRv98ʷWEzh' [ 377.886391][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 377.886403][ T26] audit: type=1326 audit(377.840:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe42b9a8 code=0x7ffc0000 [ 377.905590][ T26] audit: type=1326 audit(377.850:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbe42b9a8 code=0x7ffc0000 [ 378.032764][ T7346] Process accounting resumed [ 378.041817][ T26] audit: type=1326 audit(377.850:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe42b9a8 code=0x7ffc0000 [ 378.245861][ T26] audit: type=1326 audit(377.960:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbe42b9a8 code=0x7ffc0000 [ 378.300466][ T26] audit: type=1326 audit(377.960:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe42b9a8 code=0x7ffc0000 [ 378.306718][ T26] audit: type=1326 audit(377.960:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffffbe42b9a8 code=0x7ffc0000 [ 378.312558][ T26] audit: type=1326 audit(377.960:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe42b9a8 code=0x7ffc0000 [ 378.318444][ T26] audit: type=1326 audit(377.990:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe42b9a8 code=0x7ffc0000 [ 380.100720][ T7380] loop3: detected capacity change from 0 to 512 [ 380.675937][ T7380] EXT4-fs (loop3): 1 orphan inode deleted [ 380.677404][ T7380] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,errors=remount-ro,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 382.077843][ T7393] loop2: detected capacity change from 0 to 2048 [ 382.212689][ T7393] EXT4-fs (loop2): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 382.485386][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.487227][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.516178][ T7404] loop3: detected capacity change from 0 to 256 [ 383.635876][ T7404] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 385.042502][ T7417] fuse: Unknown parameter 'yh"}|6AC|uO!îTyl4s{uW7#ӾW@"vD7'PpL:;~Sf"PAuTQ݆KøpRjyRv98ʷWEzh' [ 385.120654][ T26] audit: type=1326 audit(2000000003.690:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.3.832" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb8b9a8 code=0x7ffc0000 [ 385.149211][ T26] audit: type=1326 audit(2000000003.720:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.3.832" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbbb8b9a8 code=0x7ffc0000 [ 386.068070][ T26] audit: type=1326 audit(2000000003.730:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.3.832" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb8b9a8 code=0x7ffc0000 [ 386.128284][ T26] audit: type=1326 audit(2000000003.730:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.3.832" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbbb8b9a8 code=0x7ffc0000 [ 386.146610][ T7417] Process accounting resumed [ 386.163406][ T26] audit: type=1326 audit(2000000003.730:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.3.832" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb8b9a8 code=0x7ffc0000 [ 386.168969][ T26] audit: type=1326 audit(2000000003.730:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.3.832" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbbb8b9a8 code=0x7ffc0000 [ 386.210735][ T26] audit: type=1326 audit(2000000004.700:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.3.832" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb8b9a8 code=0x7ffc0000 [ 386.236344][ T26] audit: type=1326 audit(2000000004.700:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.3.832" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb8b9a8 code=0x7ffc0000 [ 386.262734][ T26] audit: type=1326 audit(2000000004.700:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.3.832" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffffbbb8b9a8 code=0x7ffc0000 [ 386.268085][ T26] audit: type=1326 audit(2000000004.700:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.3.832" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb8b9a8 code=0x7ffc0000 [ 386.495786][ T4106] Bluetooth: hci1: Frame reassembly failed (-84) [ 387.859021][ T7441] loop3: detected capacity change from 0 to 512 [ 387.926615][ T7441] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 387.929344][ T7441] EXT4-fs (loop3): orphan cleanup on readonly fs [ 387.946442][ T7441] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 387.949862][ T7441] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 388.129439][ T7441] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.840: bg 0: block 40: padding at end of block bitmap is not set [ 388.207208][ T7441] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 388.231041][ T7441] EXT4-fs (loop3): 1 truncate cleaned up [ 388.251612][ T7441] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 388.512235][ T13] Bluetooth: hci1: command 0x1003 tx timeout [ 388.514122][ T4031] Bluetooth: hci1: sending frame failed (-49) [ 390.592206][ T13] Bluetooth: hci1: command 0x1001 tx timeout [ 390.593896][ T4031] Bluetooth: hci1: sending frame failed (-49) [ 390.656731][ T7471] fuse: Unknown parameter 'yh"}|6AC|uO!îTyl4s{uW7#ӾW@"vD7'PpL:;~Sf"PAuTQ݆KøpRjyRv98ʷWEzh' [ 390.752299][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 390.752316][ T26] audit: type=1326 audit(2000000009.280:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb8b9a8 code=0x7ffc0000 [ 390.793803][ T26] audit: type=1326 audit(2000000009.370:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbbb8b9a8 code=0x7ffc0000 [ 390.804229][ T26] audit: type=1326 audit(2000000009.380:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb8b9a8 code=0x7ffc0000 [ 390.809488][ T26] audit: type=1326 audit(2000000009.380:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbbb8b9a8 code=0x7ffc0000 [ 391.525623][ T7469] Process accounting resumed [ 391.610909][ T26] audit: type=1326 audit(2000000009.380:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb8b9a8 code=0x7ffc0000 [ 391.654570][ T26] audit: type=1326 audit(2000000009.380:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbbb8b9a8 code=0x7ffc0000 [ 391.723815][ T26] audit: type=1326 audit(2000000010.070:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb8b9a8 code=0x7ffc0000 [ 391.729463][ T26] audit: type=1326 audit(2000000010.070:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb8b9a8 code=0x7ffc0000 [ 391.745191][ T26] audit: type=1326 audit(2000000010.100:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffffbbb8b9a8 code=0x7ffc0000 [ 391.750604][ T26] audit: type=1326 audit(2000000010.100:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb8b9a8 code=0x7ffc0000 [ 391.764571][ T7476] udc-core: couldn't find an available UDC or it's busy [ 391.766466][ T7476] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 392.599737][ T7483] loop4: detected capacity change from 0 to 32768 [ 392.664004][ T7483] XFS: ikeep mount option is deprecated. [ 392.682361][ T4315] Bluetooth: hci1: command 0x1009 tx timeout [ 392.745819][ T7483] XFS (loop4): Mounting V5 Filesystem [ 392.804309][ T7483] XFS (loop4): Ending clean mount [ 392.807490][ T7483] XFS (loop4): Quotacheck needed: Please wait. [ 392.851886][ T7483] XFS (loop4): Quotacheck: Done. [ 392.886352][ T5412] XFS (loop4): Unmounting Filesystem [ 393.576314][ T7508] fuse: Unknown parameter 'yh"}|6AC|uO!îTyl4s{uW7#ӾW@"vD7'PpL:;~Sf"PAuTQ݆KøpRjyRv98ʷWEzh' [ 393.630196][ T7508] Process accounting resumed [ 393.775173][ T7513] loop4: detected capacity change from 0 to 256 [ 396.926013][ T7523] 9pnet: Insufficient options for proto=fd [ 397.527622][ T7526] chnl_net:caif_netlink_parms(): no params data found [ 397.698306][ T7526] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.705735][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.736602][ T7526] device bridge_slave_0 entered promiscuous mode [ 397.764984][ T7526] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.775655][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.793743][ T7526] device bridge_slave_1 entered promiscuous mode [ 397.846483][ T7526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.857442][ T7526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.912733][ T7526] team0: Port device team_slave_0 added [ 397.916259][ T7526] team0: Port device team_slave_1 added [ 397.968822][ T7545] loop4: detected capacity change from 0 to 256 [ 397.984681][ T7526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.986512][ T7526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.003148][ T7526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.038422][ T7545] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 398.052460][ T4147] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 398.059137][ T7526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.060962][ T7526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.088602][ T7526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.681196][ T7526] device hsr_slave_0 entered promiscuous mode [ 398.751692][ T7542] loop3: detected capacity change from 0 to 32768 [ 398.772516][ T4147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.775160][ T4147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.778258][ T7526] device hsr_slave_1 entered promiscuous mode [ 398.780522][ T4147] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 398.796022][ T4147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.809152][ T4147] usb 1-1: config 0 descriptor?? [ 398.813188][ T7526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.815193][ T7526] Cannot create hsr debugfs directory [ 398.833015][ T7542] XFS: ikeep mount option is deprecated. [ 398.906382][ T7542] XFS (loop3): Mounting V5 Filesystem [ 398.998693][ T7542] XFS (loop3): Ending clean mount [ 399.001465][ T7542] XFS (loop3): Quotacheck needed: Please wait. [ 399.040446][ T7542] XFS (loop3): Quotacheck: Done. [ 399.145028][ T7526] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.212464][ T4636] XFS (loop3): Unmounting Filesystem [ 399.232612][ T1961] Bluetooth: hci1: command 0x0409 tx timeout [ 399.262513][ T7526] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.272895][ T4147] hid (null): bogus close delimiter [ 399.330251][ T7526] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.424774][ T7526] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.492547][ T4147] usb 1-1: language id specifier not provided by device, defaulting to English [ 399.535194][ T7558] loop4: detected capacity change from 0 to 32768 [ 399.681983][ T7558] XFS (loop4): Mounting V5 Filesystem [ 399.727439][ T7526] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 399.784003][ T7567] netlink: 'syz.3.872': attribute type 27 has an invalid length. [ 399.852544][ T7558] XFS (loop4): Ending clean mount [ 399.855736][ T7558] XFS (loop4): Quotacheck needed: Please wait. [ 399.883268][ T7571] loop3: detected capacity change from 0 to 512 [ 399.892587][ T7558] XFS (loop4): Quotacheck: Done. [ 399.935563][ T4147] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input10 [ 399.944116][ T7571] EXT4-fs (loop3): Ignoring removed bh option [ 399.976511][ T4147] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input11 [ 400.014538][ T4147] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 400.019844][ T7571] EXT4-fs (loop3): orphan cleanup on readonly fs [ 400.021946][ T7571] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 400.042721][ T7571] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.872: invalid indirect mapped block 8 (level 2) [ 400.078672][ T7571] EXT4-fs (loop3): Remounting filesystem read-only [ 400.081033][ T7571] EXT4-fs (loop3): 1 truncate cleaned up [ 400.082878][ T7571] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,errors=continue,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4. Quota mode: writeback. [ 400.105734][ T5412] XFS (loop4): Unmounting Filesystem [ 400.139103][ T4147] usb 1-1: USB disconnect, device number 7 [ 400.581990][ T7567] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.584248][ T7567] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.604182][ T4315] Bluetooth: hci1: command 0x041b tx timeout [ 403.307384][ T7567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.343103][ T7567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.638327][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 403.887910][ T7567] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.890389][ T7567] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.893176][ T7567] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.895725][ T7567] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.095658][ T7526] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 404.134219][ T7526] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 404.228668][ T7569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 404.236865][ T7569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.239764][ T7569] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.282557][ T7569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 404.352745][ T7526] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 404.468358][ T7600] loop3: detected capacity change from 0 to 512 [ 404.632375][ T7526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.648986][ T7600] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 404.659159][ T7600] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038 (0x7fffffff) [ 404.686033][ T7526] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.693080][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 404.695619][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 404.735836][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 404.738812][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 404.741351][ T5350] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.743401][ T5350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.777999][ T7526] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 404.780850][ T7526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.788822][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 404.791253][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 404.794899][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 404.797418][ T5350] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.799273][ T5350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.801657][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 404.805106][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 404.807983][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 404.811037][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 404.824109][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 404.831443][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 404.844484][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 404.860759][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 404.865176][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 404.871527][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 404.884430][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 404.887007][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 405.851427][ T1961] Bluetooth: hci1: command 0x0419 tx timeout [ 405.893056][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 405.895163][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 405.899887][ T7526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.973150][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 405.975959][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 405.987684][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 405.990335][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 405.996322][ T7526] device veth0_vlan entered promiscuous mode [ 406.004070][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 406.006607][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 406.023766][ T7526] device veth1_vlan entered promiscuous mode [ 406.087606][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 406.090307][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 406.096380][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 406.098866][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 406.118982][ T7526] device veth0_macvtap entered promiscuous mode [ 406.143251][ T7526] device veth1_macvtap entered promiscuous mode [ 406.177151][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.179923][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.193154][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.196087][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.198602][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.201316][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.213896][ T7526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.216626][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 406.219359][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 406.240989][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 406.251326][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 406.258230][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.261106][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.274757][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.277402][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.279854][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.300618][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.312180][ T7526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.314691][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 406.319791][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 406.333783][ T7526] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.335893][ T7526] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.338510][ T7526] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.340639][ T7526] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.829899][ T7598] loop0: detected capacity change from 0 to 32768 [ 406.883186][ T7598] XFS: ikeep mount option is deprecated. [ 406.966470][ T7598] XFS (loop0): Mounting V5 Filesystem [ 407.069059][ T7598] XFS (loop0): Ending clean mount [ 407.072946][ T7598] XFS (loop0): Quotacheck needed: Please wait. [ 407.272285][ T7598] XFS (loop0): Quotacheck: Done. [ 407.803619][ T4027] XFS (loop0): Unmounting Filesystem [ 408.634734][ T7648] loop4: detected capacity change from 0 to 1024 [ 409.565030][ T1753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.567067][ T1753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.530968][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 410.561120][ T7650] serio: Serial port ptm0 [ 410.790718][ T7648] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 410.794538][ T7648] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038 (0x7fffffff) [ 411.214319][ T5350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.216579][ T5350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.220956][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 411.522490][ T7659] netlink: 'syz.1.893': attribute type 4 has an invalid length. [ 411.555945][ T7660] loop3: detected capacity change from 0 to 256 [ 415.393328][ T7673] device dummy0 entered promiscuous mode [ 416.115024][ T7689] hub 6-0:1.0: USB hub found [ 416.116334][ T7689] hub 6-0:1.0: 8 ports detected [ 417.647289][ T7714] loop3: detected capacity change from 0 to 4096 [ 417.723152][ T7714] EXT4-fs (loop3): Test dummy encryption mode enabled [ 417.724920][ T7714] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 417.763205][ T7714] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 419.338527][ T7721] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 420.043040][ T7715] loop2: detected capacity change from 0 to 32768 [ 420.093651][ T7715] XFS: ikeep mount option is deprecated. [ 420.159069][ T7715] XFS (loop2): Mounting V5 Filesystem [ 420.264048][ T7715] XFS (loop2): Ending clean mount [ 420.271519][ T7715] XFS (loop2): Quotacheck needed: Please wait. [ 420.339626][ T7715] XFS (loop2): Quotacheck: Done. [ 422.402513][ T7750] loop4: detected capacity change from 0 to 2048 [ 422.428852][ T7526] XFS (loop2): Unmounting Filesystem [ 422.484676][ T7750] EXT4-fs (loop4): Ignoring removed nobh option [ 422.535848][ T7750] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsdgroups,nobh,nodelalloc,nouid32,,errors=continue. Quota mode: none. [ 422.540222][ T7750] ext4 filesystem being mounted at /108/bus supports timestamps until 2038 (0x7fffffff) [ 423.567134][ T300] device hsr_slave_0 left promiscuous mode [ 423.663679][ T300] device hsr_slave_1 left promiscuous mode [ 423.728576][ T7772] loop4: detected capacity change from 0 to 2048 [ 423.792496][ T300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.794716][ T300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.803364][ T300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.805717][ T300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.821893][ T300] device bridge_slave_1 left promiscuous mode [ 423.844701][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.847747][ T7772] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 423.925726][ T300] device bridge_slave_0 left promiscuous mode [ 423.927487][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.740361][ T7782] udc-core: couldn't find an available UDC or it's busy [ 425.749981][ T7782] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 426.352716][ T300] device veth1_macvtap left promiscuous mode [ 426.354463][ T300] device veth0_macvtap left promiscuous mode [ 426.356191][ T300] device veth1_vlan left promiscuous mode [ 426.357626][ T300] device veth0_vlan left promiscuous mode [ 426.366228][ T7786] loop2: detected capacity change from 0 to 512 [ 426.500045][ T7786] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 426.503385][ T7786] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 426.994107][ T7784] loop0: detected capacity change from 0 to 32768 [ 427.026374][ T300] team0 (unregistering): Port device team_slave_1 removed [ 427.059486][ T300] team0 (unregistering): Port device team_slave_0 removed [ 427.088667][ T300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.090548][ T7784] XFS (loop0): Mounting V5 Filesystem [ 427.145093][ T300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.186356][ T7784] XFS (loop0): Ending clean mount [ 427.189398][ T7784] XFS (loop0): Quotacheck needed: Please wait. [ 427.291840][ T7784] XFS (loop0): Quotacheck: Done. [ 427.500149][ T300] bond0 (unregistering): Released all slaves [ 427.528602][ T4027] XFS (loop0): Unmounting Filesystem [ 428.628191][ T7811] fuse: Bad value for 'fd' [ 429.049871][ T7823] loop3: detected capacity change from 0 to 512 [ 429.815413][ T7827] udc-core: couldn't find an available UDC or it's busy [ 429.832626][ T7827] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 433.078759][ T7842] loop3: detected capacity change from 0 to 512 [ 433.147257][ T7842] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 433.171471][ T7844] loop4: detected capacity change from 0 to 256 [ 433.182691][ T7842] EXT4-fs error (device loop3): __ext4_iget:4872: inode #11: block 1: comm syz.3.941: invalid block [ 433.186170][ T7842] EXT4-fs (loop3): Remounting filesystem read-only [ 433.187905][ T7842] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.941: couldn't read orphan inode 11 (err -117) [ 433.191113][ T7842] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 433.260755][ T7844] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 434.499666][ T7857] loop0: detected capacity change from 0 to 32768 [ 434.532840][ T7857] XFS: ikeep mount option is deprecated. [ 435.691533][ T4315] Bluetooth: hci4: command 0x0406 tx timeout [ 435.710669][ T7857] XFS (loop0): Mounting V5 Filesystem [ 435.828725][ T7884] loop3: detected capacity change from 0 to 128 [ 435.868476][ T7857] XFS (loop0): Ending clean mount [ 435.871519][ T7857] XFS (loop0): Quotacheck needed: Please wait. [ 435.949961][ T7857] XFS (loop0): Quotacheck: Done. [ 436.018947][ T7888] netlink: 'syz.4.954': attribute type 29 has an invalid length. [ 436.050369][ T7888] netlink: 'syz.4.954': attribute type 29 has an invalid length. [ 436.061743][ T7888] netlink: 'syz.4.954': attribute type 29 has an invalid length. [ 436.070763][ T7888] netlink: 'syz.4.954': attribute type 29 has an invalid length. [ 436.084471][ T7888] netlink: 'syz.4.954': attribute type 29 has an invalid length. [ 436.091770][ T7888] netlink: 'syz.4.954': attribute type 29 has an invalid length. [ 436.843477][ T4027] XFS (loop0): Unmounting Filesystem [ 436.967547][ T7896] netlink: 'syz.4.957': attribute type 29 has an invalid length. [ 436.969769][ T7896] netlink: 'syz.4.957': attribute type 29 has an invalid length. [ 437.039033][ T7896] netlink: 'syz.4.957': attribute type 29 has an invalid length. [ 437.139604][ T7901] loop4: detected capacity change from 0 to 256 [ 437.167025][ T7903] loop3: detected capacity change from 0 to 512 [ 437.225954][ T7903] EXT4-fs (loop3): Ignoring removed oldalloc option [ 437.252872][ T7901] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 437.288166][ T7903] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.960: Parent and EA inode have the same ino 15 [ 437.299068][ T7903] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.960: Parent and EA inode have the same ino 15 [ 437.402378][ T7903] EXT4-fs (loop3): 1 orphan inode deleted [ 437.404033][ T7903] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 438.579203][ T7920] netlink: 'syz.4.965': attribute type 29 has an invalid length. [ 438.987722][ T7932] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.972'. [ 439.079329][ T7934] loop4: detected capacity change from 0 to 512 [ 439.155353][ T7934] EXT4-fs (loop4): Ignoring removed oldalloc option [ 439.243743][ T7934] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.973: Parent and EA inode have the same ino 15 [ 439.247399][ T7934] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.973: Parent and EA inode have the same ino 15 [ 439.254609][ T7934] EXT4-fs (loop4): 1 orphan inode deleted [ 439.256060][ T7934] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 439.326813][ T7918] loop0: detected capacity change from 0 to 32768 [ 439.374101][ T7922] loop2: detected capacity change from 0 to 32768 [ 439.572847][ T7922] XFS: ikeep mount option is deprecated. [ 440.515457][ T7924] loop3: detected capacity change from 0 to 40427 [ 440.550683][ T7922] XFS (loop2): Mounting V5 Filesystem [ 440.566361][ T7924] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 440.568617][ T7924] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 440.596143][ T7918] XFS (loop0): Mounting V5 Filesystem [ 440.692029][ T7924] F2FS-fs (loop3): Found nat_bits in checkpoint [ 440.730268][ T7924] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 440.734608][ T7922] XFS (loop2): Ending clean mount [ 440.735174][ T7924] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 440.750942][ T7922] XFS (loop2): Quotacheck needed: Please wait. [ 440.797764][ T7922] XFS (loop2): Quotacheck: Done. [ 440.838964][ T7918] XFS (loop0): Ending clean mount [ 440.842441][ T7918] XFS (loop0): Quotacheck needed: Please wait. [ 440.961764][ T7526] XFS (loop2): Unmounting Filesystem [ 440.963762][ T7918] XFS (loop0): Quotacheck: Done. [ 441.039140][ T7979] device syzkaller0 entered promiscuous mode [ 441.089846][ T4027] XFS (loop0): Unmounting Filesystem [ 441.123612][ T4636] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 441.123663][ T4636] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 441.125852][ T4636] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 441.127906][ T4636] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 441.151847][ T4636] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 441.154645][ T4636] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 441.156616][ T4636] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 441.761780][ T7994] loop3: detected capacity change from 0 to 256 [ 442.806855][ T8003] fuse: Bad value for 'fd' [ 442.826236][ T7994] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 443.061766][ T8018] validate_nla: 4 callbacks suppressed [ 443.061784][ T8018] netlink: 'syz.2.997': attribute type 29 has an invalid length. [ 443.397209][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.397419][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.713591][ T8018] netlink: 'syz.2.997': attribute type 29 has an invalid length. [ 443.716044][ T8021] netlink: 'syz.2.997': attribute type 29 has an invalid length. [ 443.748800][ T8018] netlink: 'syz.2.997': attribute type 29 has an invalid length. [ 443.751322][ T8018] netlink: 'syz.2.997': attribute type 29 has an invalid length. [ 443.860010][ T8023] loop4: detected capacity change from 0 to 512 [ 443.919672][ T8023] EXT4-fs (loop4): Ignoring removed oldalloc option [ 443.952446][ T8023] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.999: Parent and EA inode have the same ino 15 [ 443.967933][ T8023] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.999: Parent and EA inode have the same ino 15 [ 443.998447][ T8023] EXT4-fs (loop4): 1 orphan inode deleted [ 443.999930][ T8023] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 444.479855][ T8041] fuse: Unknown parameter 'yh"}|6AC|uO!îTyl4s{uW7#ӾW@"vD7'PpL:;~Sf"PAuTQ݆KøpRjyRv98ʷWEzh' [ 444.513741][ T6697] udevd[6697]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 444.534190][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 444.534203][ T26] audit: type=1326 audit(2000000001.130:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8036 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa687f9a8 code=0x7ffc0000 [ 444.588332][ T26] audit: type=1326 audit(2000000001.150:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8036 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa687f9a8 code=0x7ffc0000 [ 444.617412][ T26] audit: type=1326 audit(2000000001.160:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8036 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa687f9a8 code=0x7ffc0000 [ 444.628214][ T8041] Process accounting resumed [ 444.662183][ T26] audit: type=1326 audit(2000000001.160:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8036 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa687f9a8 code=0x7ffc0000 [ 444.668505][ T26] audit: type=1326 audit(2000000001.250:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8036 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa687f9a8 code=0x7ffc0000 [ 444.724822][ T26] audit: type=1326 audit(2000000001.250:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8036 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa687f9a8 code=0x7ffc0000 [ 444.842232][ T13] Bluetooth: hci0: command 0x1003 tx timeout [ 444.844481][ T4031] Bluetooth: hci0: sending frame failed (-49) [ 444.880871][ T8057] device pim6reg1 entered promiscuous mode [ 445.018014][ T8068] loop4: detected capacity change from 0 to 512 [ 445.107637][ T8068] EXT4-fs (loop4): Ignoring removed oldalloc option [ 445.119186][ T8068] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1018: Parent and EA inode have the same ino 15 [ 445.121074][ T8071] fuse: Unknown parameter 'yh"}|6AC|uO!îTyl4s{uW7#ӾW@"vD7'PpL:;~Sf"PAuTQ݆KøpRjyRv98ʷWEzh' [ 445.129310][ T26] audit: type=1326 audit(2000000001.720:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe42b9a8 code=0x7ffc0000 [ 445.140256][ T26] audit: type=1326 audit(2000000001.740:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbe42b9a8 code=0x7ffc0000 [ 445.152960][ T8068] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1018: Parent and EA inode have the same ino 15 [ 445.157643][ T8071] Process accounting resumed [ 445.180745][ T8068] EXT4-fs (loop4): 1 orphan inode deleted [ 445.186442][ T26] audit: type=1326 audit(2000000001.740:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe42b9a8 code=0x7ffc0000 [ 445.203227][ T8068] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 445.238798][ T26] audit: type=1326 audit(2000000001.740:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbe42b9a8 code=0x7ffc0000 [ 445.921834][ T8105] fuse: Unknown parameter 'yh"}|6AC|uO!îTyl4s{uW7#ӾW@"vD7'PpL:;~Sf"PAuTQ݆KøpRjyRv98ʷWEzh' [ 445.970130][ T8105] Process accounting resumed [ 446.161095][ T8117] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.163448][ T8117] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.450896][ T8125] loop2: detected capacity change from 0 to 512 [ 446.496888][ T8129] input: syz0 as /devices/virtual/input/input12 [ 446.548628][ T8125] EXT4-fs (loop2): Ignoring removed oldalloc option [ 446.559193][ T8125] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1044: Parent and EA inode have the same ino 15 [ 446.564715][ T8125] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1044: Parent and EA inode have the same ino 15 [ 446.570057][ T8125] EXT4-fs (loop2): 1 orphan inode deleted [ 446.572471][ T8125] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 446.912424][ T4083] Bluetooth: hci0: command 0x1001 tx timeout [ 446.914109][ T4031] Bluetooth: hci0: sending frame failed (-49) [ 446.938961][ T8137] fuse: Unknown parameter 'yh"}|6AC|uO!îTyl4s{uW7#ӾW@"vD7'PpL:;~Sf"PAuTQ݆KøpRjyRv98ʷWEzh' [ 446.977275][ T8137] Process accounting resumed [ 447.069122][ T8140] netlink: 'syz.3.1049': attribute type 29 has an invalid length. [ 447.075788][ T8140] netlink: 'syz.3.1049': attribute type 29 has an invalid length. [ 447.088785][ T8140] netlink: 'syz.3.1049': attribute type 29 has an invalid length. [ 447.235916][ T8148] udc-core: couldn't find an available UDC or it's busy [ 447.237764][ T8148] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 447.463867][ T8161] fuse: Unknown parameter 'yh"}|6AC|uO!îTyl4s{uW7#ӾW@"vD7'PpL:;~Sf"PAuTQ݆KøpRjyRv98ʷWEzh' [ 447.488587][ T8161] Process accounting resumed [ 447.550402][ T8168] loop4: detected capacity change from 0 to 512 [ 447.638572][ T8168] EXT4-fs (loop4): Ignoring removed oldalloc option [ 447.651116][ T8168] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1061: Parent and EA inode have the same ino 15 [ 447.655661][ T8168] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1061: Parent and EA inode have the same ino 15 [ 447.659504][ T8168] EXT4-fs (loop4): 1 orphan inode deleted [ 447.661162][ T8168] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 448.323595][ T8183] loop2: detected capacity change from 0 to 16 [ 448.339554][ T8184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.357152][ T8188] ALSA: mixer_oss: invalid OSS volume 'D n*@\%΂`.%plÄ/Დ' [ 448.402351][ T8183] erofs: (device loop2): mounted with root inode @ nid 36. [ 448.407335][ T8183] input: syz0 as /devices/virtual/input/input14 [ 448.416462][ T8184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.481221][ T8184] bond0 (unregistering): Released all slaves [ 448.511637][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1069'. [ 448.992203][ T13] Bluetooth: hci0: command 0x1009 tx timeout [ 449.119914][ T8197] fuse: Unknown parameter 'yh"}|6AC|uO!îTyl4s{uW7#ӾW@"vD7'PpL:;~Sf"PAuTQ݆KøpRjyRv98ʷWEzh' [ 449.158078][ T8197] Process accounting resumed [ 449.312405][ T4315] Bluetooth: hci1: command 0x0405 tx timeout [ 449.701204][ T8220] device syz_tun entered promiscuous mode [ 450.173550][ T8227] udc-core: couldn't find an available UDC or it's busy [ 450.175317][ T8227] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 450.214855][ T8231] syz.0.1085 uses obsolete (PF_INET,SOCK_PACKET) [ 450.371056][ T8234] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 450.377918][ T8234] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 450.380154][ T8234] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 450.388827][ T8234] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 450.391839][ T8234] device geneve2 entered promiscuous mode [ 450.492332][ T8234] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 450.494409][ T8234] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 450.496645][ T8234] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 450.498846][ T8234] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 450.845666][ T8245] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1091'. [ 451.529144][ T8258] input: syz0 as /devices/virtual/input/input15 [ 451.670521][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1097'. [ 451.772254][ T1534] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 451.907260][ T8264] chnl_net:caif_netlink_parms(): no params data found [ 451.960650][ T8264] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.962844][ T8264] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.965734][ T8264] device bridge_slave_0 entered promiscuous mode [ 451.970007][ T8264] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.972009][ T8264] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.975488][ T8264] device bridge_slave_1 entered promiscuous mode [ 451.992635][ T8264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.997908][ T8264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.021993][ T8264] team0: Port device team_slave_0 added [ 452.022958][ T8274] binder: 8273:8274 Acquire 1 refcount change on invalid ref 0 ret -22 [ 452.026706][ T8264] team0: Port device team_slave_1 added [ 452.039998][ T1534] usb 1-1: Using ep0 maxpacket: 8 [ 452.042860][ T8274] binder: 8273:8274 ERROR: BC_REGISTER_LOOPER called without request [ 452.045292][ T8274] binder: 8273:8274 BC_FREE_BUFFER u0000000020ffd000 no match [ 452.047375][ T8274] binder: 8273:8274 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 452.049370][ T8274] binder: 8273:8274 BC_INCREFS_DONE u0000000000000003 no match [ 452.053598][ T8264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.055671][ T8264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.062422][ T8264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.066902][ T8264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.068843][ T8264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.076028][ T8264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.134316][ T8264] device hsr_slave_0 entered promiscuous mode [ 452.160109][ T8282] loop3: detected capacity change from 0 to 512 [ 452.172943][ T8264] device hsr_slave_1 entered promiscuous mode [ 452.182578][ T1534] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 452.184747][ T1534] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.187333][ T1534] usb 1-1: config 0 has no interface number 0 [ 452.188878][ T1534] usb 1-1: config 0 interface 52 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 452.191534][ T1534] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 452.196433][ T1534] usb 1-1: config 0 interface 52 has no altsetting 0 [ 452.198262][ T1534] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 452.200607][ T1534] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.212203][ T8282] EXT4-fs (loop3): Ignoring removed oldalloc option [ 452.220924][ T1534] usb 1-1: config 0 descriptor?? [ 452.237734][ T8282] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.1102: Parent and EA inode have the same ino 15 [ 452.243576][ T8282] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.1102: Parent and EA inode have the same ino 15 [ 452.247589][ T8282] EXT4-fs (loop3): 1 orphan inode deleted [ 452.249324][ T8282] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 452.338260][ T8264] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.424489][ T8264] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.585752][ T8264] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.644362][ T8264] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.234500][ T1534] usb 1-1: USB disconnect, device number 8 [ 453.370290][ T8264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 453.464662][ T8264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 454.423388][ T4315] Bluetooth: hci5: command 0x0409 tx timeout [ 454.431803][ T8264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 454.485011][ T8264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 454.884841][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1108'. [ 455.931065][ T8264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.946753][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 455.949426][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 455.955184][ T8264] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.961124][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 455.964904][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 455.967889][ T5350] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.969728][ T5350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.990464][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 456.000438][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 456.003622][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 456.006110][ T5350] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.007951][ T5350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.010512][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 456.023704][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 456.026657][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 456.030151][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 456.033429][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 456.036228][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 456.039368][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 456.041948][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 456.045639][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 456.075043][ T8307] team0: Port device veth0_to_team added [ 456.081007][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 456.085488][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 456.095905][ T8264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 456.177306][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 456.179361][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 456.185917][ T8264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.199951][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 456.204101][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 456.227874][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 456.234462][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 456.237642][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 456.240173][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 456.245077][ T8264] device veth0_vlan entered promiscuous mode [ 456.253657][ T8264] device veth1_vlan entered promiscuous mode [ 456.276697][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 456.279347][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 456.282040][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 456.290087][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 456.295914][ T8264] device veth0_macvtap entered promiscuous mode [ 456.301315][ T8264] device veth1_macvtap entered promiscuous mode [ 456.320441][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.323600][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.326250][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.328933][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.331389][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.334230][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.338595][ T8264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.340756][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 456.344741][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 456.353931][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 456.356605][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 456.376982][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.379787][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.382559][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.385305][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.387799][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.390519][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.394314][ T8264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.396660][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 456.399370][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 456.416568][ T8264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.419004][ T8264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.421474][ T8264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.425424][ T8264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.432204][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 456.489826][ T300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.499407][ T300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.508138][ T4854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.510380][ T4854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.514770][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 456.517618][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 456.706593][ T8323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.998568][ T136] device hsr_slave_0 left promiscuous mode [ 457.042803][ T136] device hsr_slave_1 left promiscuous mode [ 457.054780][ T8328] binder: 8327:8328 Acquire 1 refcount change on invalid ref 0 ret -22 [ 457.059469][ T8328] binder: 8327:8328 ERROR: BC_REGISTER_LOOPER called without request [ 457.061860][ T8328] binder: 8327:8328 BC_FREE_BUFFER u0000000020ffd000 no match [ 457.064055][ T8328] binder: 8327:8328 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 457.066161][ T8328] binder: 8327:8328 BC_INCREFS_DONE u0000000000000003 no match [ 457.122664][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.124635][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.133062][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.134935][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.140605][ T136] device bridge_slave_1 left promiscuous mode [ 457.146710][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.215874][ T136] device bridge_slave_0 left promiscuous mode [ 457.218138][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.317540][ T8332] input: syz0 as /devices/virtual/input/input16 [ 457.372682][ T136] device veth1_macvtap left promiscuous mode [ 457.374620][ T136] device veth0_macvtap left promiscuous mode [ 457.376352][ T136] device veth1_vlan left promiscuous mode [ 457.378076][ T136] device veth0_vlan left promiscuous mode [ 457.792194][ T4083] Bluetooth: hci0: command 0x1003 tx timeout [ 457.794194][ T4031] Bluetooth: hci0: sending frame failed (-49) [ 457.811907][ T136] team0 (unregistering): Port device team_slave_1 removed [ 457.827048][ T136] team0 (unregistering): Port device team_slave_0 removed [ 457.836980][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.893033][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.141495][ T136] bond0 (unregistering): Released all slaves [ 458.244312][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1119'. [ 458.512239][ T4315] Bluetooth: hci5: command 0x040f tx timeout [ 459.878937][ T4083] Bluetooth: hci0: command 0x1001 tx timeout [ 459.880734][ T4031] Bluetooth: hci0: sending frame failed (-49) [ 460.971361][ T4315] Bluetooth: hci5: command 0x0419 tx timeout [ 461.219840][ T8373] loop2: detected capacity change from 0 to 512 [ 461.240889][ T8373] EXT4-fs (loop2): Ignoring removed oldalloc option [ 461.283300][ T8373] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1135: Parent and EA inode have the same ino 15 [ 461.293040][ T8373] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1135: Parent and EA inode have the same ino 15 [ 461.298013][ T8373] EXT4-fs (loop2): 1 orphan inode deleted [ 461.299694][ T8373] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 462.548252][ T7] Bluetooth: hci0: command 0x1009 tx timeout [ 462.785127][ T8396] input: syz0 as /devices/virtual/input/input17 [ 462.794109][ T8394] udc-core: couldn't find an available UDC or it's busy [ 462.795985][ T8394] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 463.176975][ T8409] udc-core: couldn't find an available UDC or it's busy [ 463.189186][ T8409] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 463.214833][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'. [ 463.346331][ T8398] chnl_net:caif_netlink_parms(): no params data found [ 463.423741][ T8398] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.425693][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.428312][ T8398] device bridge_slave_0 entered promiscuous mode [ 463.431719][ T8398] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.434009][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.436499][ T8398] device bridge_slave_1 entered promiscuous mode [ 463.471859][ T8398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.485409][ T8398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.505914][ T8398] team0: Port device team_slave_0 added [ 463.511265][ T8398] team0: Port device team_slave_1 added [ 463.525229][ T8398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.526941][ T8398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.534506][ T8398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.538780][ T8398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.540543][ T8398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.548012][ T8398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.605579][ T8398] device hsr_slave_0 entered promiscuous mode [ 463.652596][ T8398] device hsr_slave_1 entered promiscuous mode [ 463.712435][ T8398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.714310][ T8398] Cannot create hsr debugfs directory [ 463.760830][ T8424] udc-core: couldn't find an available UDC or it's busy [ 463.765608][ T8424] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 463.769722][ T8424] netlink: 'syz.2.1149': attribute type 1 has an invalid length. [ 463.773697][ T8424] process 'syz.2.1149' launched './file1' with NULL argv: empty string added [ 463.814771][ T8398] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.869782][ T8398] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.933943][ T8398] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.991877][ T8398] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.196535][ T8398] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 464.244483][ T8398] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 464.285069][ T8398] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 464.325392][ T8398] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 464.504012][ T8398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.523654][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 464.526627][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 464.539689][ T8398] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.550753][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 464.561183][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 464.570225][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.572171][ T4170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.591564][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 464.596245][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 464.598989][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 464.601498][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.603428][ T4170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.619428][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 464.647429][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 464.651470][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 464.677183][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 464.685438][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 464.695723][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 464.713857][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 464.723657][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 464.732015][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 464.743282][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 464.750393][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 464.766301][ T8398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 464.992587][ T4315] Bluetooth: hci4: command 0x0409 tx timeout [ 465.004632][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 465.006746][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 465.030268][ T8398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.221317][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 465.224606][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 465.246482][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 465.249132][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 465.253562][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 465.256643][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 465.261411][ T8398] device veth0_vlan entered promiscuous mode [ 465.269297][ T8398] device veth1_vlan entered promiscuous mode [ 465.294356][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 465.297142][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 465.300174][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 465.308772][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 465.314848][ T8398] device veth0_macvtap entered promiscuous mode [ 465.321344][ T8398] device veth1_macvtap entered promiscuous mode [ 465.341907][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.353092][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.355403][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.357983][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.360310][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.369964][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.375133][ T8398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.377490][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 465.380260][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 465.383579][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 465.386383][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 465.417313][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.420002][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.425054][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.427842][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.430423][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.434826][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.451834][ T8398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.454836][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 465.457715][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 465.471285][ T8398] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.482307][ T8398] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.484722][ T8398] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.488807][ T8398] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.490464][ T8447] fuse: Unknown parameter 'yh"}|6AC|uO!îTyl4s{uW7#ӾW@"vD7'PpL:;~Sf"PAuTQ݆KøpRjyRv98ʷWEzh' [ 465.500638][ T26] kauditd_printk_skb: 135 callbacks suppressed [ 465.500650][ T26] audit: type=1326 audit(2000000003.540:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.1.1152" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc1379a8 code=0x7ffc0000 [ 465.506808][ T8447] Process accounting resumed [ 465.512619][ T26] audit: type=1326 audit(2000000003.540:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.1.1152" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbc1379a8 code=0x7ffc0000 [ 465.524930][ T26] audit: type=1326 audit(2000000003.540:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.1.1152" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc1379a8 code=0x7ffc0000 [ 465.542776][ T26] audit: type=1326 audit(2000000003.540:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.1.1152" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbc1379a8 code=0x7ffc0000 [ 465.548301][ T26] audit: type=1326 audit(2000000003.540:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.1.1152" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc1379a8 code=0x7ffc0000 [ 465.557201][ T26] audit: type=1326 audit(2000000003.550:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.1.1152" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbc1379a8 code=0x7ffc0000 [ 465.563807][ T26] audit: type=1326 audit(2000000003.550:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.1.1152" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc1379a8 code=0x7ffc0000 [ 465.569583][ T26] audit: type=1326 audit(2000000003.550:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.1.1152" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbc1379a8 code=0x7ffc0000 [ 465.596540][ T26] audit: type=1326 audit(2000000003.550:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.1.1152" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc1379a8 code=0x7ffc0000 [ 465.615223][ T26] audit: type=1326 audit(2000000003.550:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.1.1152" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffffbc1379a8 code=0x7ffc0000 [ 465.641435][ T5355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.643881][ T5355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.648166][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 465.708270][ T4170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.711310][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1156'. [ 465.711565][ T4170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.720988][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 465.762250][ T21] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 465.840978][ T8454] chnl_net:caif_netlink_parms(): no params data found [ 465.939123][ T8465] binder: 8464:8465 tried to acquire reference to desc 0, got 1 instead [ 465.948711][ T8468] udc-core: couldn't find an available UDC or it's busy [ 465.951039][ T8468] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 465.979105][ T8454] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.981280][ T8454] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.986077][ T8454] device bridge_slave_0 entered promiscuous mode [ 465.990477][ T8454] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.992827][ T8454] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.995251][ T8454] device bridge_slave_1 entered promiscuous mode [ 466.015189][ T8454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.020019][ T8454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.043392][ T8454] team0: Port device team_slave_0 added [ 466.048221][ T8454] team0: Port device team_slave_1 added [ 466.075638][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.082273][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.106190][ T8454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.138191][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.139918][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.147837][ T8454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.194635][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 467.073442][ T4147] Bluetooth: hci4: command 0x041b tx timeout [ 467.093207][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 467.096197][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 467.104806][ T8454] device hsr_slave_0 entered promiscuous mode [ 467.152899][ T8454] device hsr_slave_1 entered promiscuous mode [ 467.192349][ T8454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.194491][ T8454] Cannot create hsr debugfs directory [ 467.312456][ T21] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 467.315117][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.317124][ T21] usb 1-1: Product: syz [ 467.318247][ T21] usb 1-1: Manufacturer: syz [ 467.319392][ T21] usb 1-1: SerialNumber: syz [ 467.605577][ T21] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 467.723391][ T21] Bluetooth: hci6: command 0x0409 tx timeout [ 467.766572][ T8494] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 468.341543][ T21] usb 1-1: USB disconnect, device number 9 [ 468.346665][ T21] usblp0: removed [ 468.376072][ T8517] fuse: Unknown parameter 'use00000000000000000000' [ 468.826251][ T8454] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 468.894686][ T8454] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 468.995027][ T8454] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 469.055142][ T8454] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 469.171272][ T4069] Bluetooth: hci4: command 0x040f tx timeout [ 469.217211][ T4854] device hsr_slave_0 left promiscuous mode [ 469.272532][ T4854] device hsr_slave_1 left promiscuous mode [ 469.362691][ T4854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.365580][ T4854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.368351][ T4854] device bridge_slave_1 left promiscuous mode [ 469.371410][ T4854] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.425988][ T4854] device bridge_slave_0 left promiscuous mode [ 469.429377][ T4854] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.607459][ T4315] Bluetooth: hci6: command 0x041b tx timeout [ 470.755182][ T8545] fuse: Unknown parameter 'use00000000000000000000' [ 470.835205][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 470.835218][ T26] audit: type=1326 audit(2000000008.880:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.4.1176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa52b79a8 code=0x7ffc0000 [ 470.845930][ T4854] team0 (unregistering): Port device team_slave_1 removed [ 470.855978][ T26] audit: type=1326 audit(2000000008.900:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.4.1176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=14 compat=0 ip=0xffffa52b79a8 code=0x7ffc0000 [ 470.866902][ T4854] team0 (unregistering): Port device team_slave_0 removed [ 470.869063][ T26] audit: type=1326 audit(2000000008.900:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.4.1176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa52b79a8 code=0x7ffc0000 [ 470.886188][ T4854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.935625][ T8549] binder: 8548:8549 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 470.942407][ T8549] binder: 8549 RLIMIT_NICE not set [ 470.959392][ T4854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.987027][ T8550] binder: 8548:8550 tried to acquire reference to desc 0, got 1 instead [ 470.991764][ T8549] binder: 8549 RLIMIT_NICE not set [ 471.017479][ T5026] binder: release 8548:8550 transaction 32 out, still active [ 471.022767][ T5026] binder: undelivered TRANSACTION_COMPLETE [ 471.041669][ T5026] binder: release 8548:8549 transaction 32 in, still active [ 471.044546][ T5026] binder: send failed reply for transaction 32, target dead [ 471.161179][ T4854] bond0 (unregistering): Released all slaves [ 471.370480][ T8454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.379151][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 471.381666][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 471.394261][ T8454] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.406771][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 471.409629][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 471.430802][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.432742][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.446285][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 471.448898][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 471.451931][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 471.458290][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.460100][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.480423][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 471.483730][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 471.537107][ T8454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 471.540049][ T8454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.575018][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 471.579860][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 471.593764][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 471.597349][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 471.600439][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 471.604064][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 471.613196][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 471.615982][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 471.627589][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 471.630449][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 471.780584][ T8572] fuse: Unknown parameter 'user_i00000000000000000000' [ 471.833690][ T8454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.847439][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 471.849498][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 471.868932][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 471.873058][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 471.884598][ T8575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1186'. [ 471.935896][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 471.938888][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 471.956738][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 471.959923][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 471.973648][ T8454] device veth0_vlan entered promiscuous mode [ 471.984146][ T8454] device veth1_vlan entered promiscuous mode [ 471.991101][ T8577] sctp: [Deprecated]: syz.1.1187 (pid 8577) Use of struct sctp_assoc_value in delayed_ack socket option. [ 471.991101][ T8577] Use struct sctp_sack_info instead [ 472.034816][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 472.037718][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 472.040458][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 472.061991][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 472.075631][ T8454] device veth0_macvtap entered promiscuous mode [ 472.080346][ T8454] device veth1_macvtap entered promiscuous mode [ 472.113345][ T8579] debugfs: Directory 'netdev:nicvf0' with parent 'phy33' already present! [ 472.121767][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.125660][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.128368][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.131068][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.133939][ T8564] loop4: detected capacity change from 0 to 32768 [ 472.144793][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.147706][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.150274][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.153368][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.157611][ T8454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.159539][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 472.165653][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 472.168550][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 472.171281][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 472.179343][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.181918][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.185055][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.188034][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.190471][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.198771][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.201683][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.234992][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.245608][ T8454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.267379][ T8564] XFS (loop4): Mounting V5 Filesystem [ 472.299665][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 472.303187][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 472.309371][ T8454] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.311781][ T8454] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.315245][ T8454] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.317562][ T8454] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.386423][ T363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.388808][ T363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.414645][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.425582][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 472.429826][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.437279][ T8564] XFS (loop4): Ending clean mount [ 472.440038][ T8564] XFS (loop4): Quotacheck needed: Please wait. [ 472.474698][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 472.488255][ T8589] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1189'. [ 472.520114][ T8564] XFS (loop4): Quotacheck: Done. [ 472.647367][ T8398] XFS (loop4): Unmounting Filesystem [ 472.685020][ T7] Bluetooth: hci6: command 0x040f tx timeout [ 472.757542][ T8603] fuse: Unknown parameter 'user_i00000000000000000000' [ 472.783688][ T8604] tipc: Failed to remove unknown binding: 66,1,1/0:172327024/172327026 [ 472.791428][ T8604] tipc: Failed to remove unknown binding: 66,1,1/0:172327024/172327026 [ 472.854973][ T8606] udc-core: couldn't find an available UDC or it's busy [ 472.856801][ T8606] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 473.313680][ T7] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 473.316400][ T7] Bluetooth: hci4: Injecting HCI hardware error event [ 473.318704][ T4034] Bluetooth: hci4: hardware error 0x00 [ 473.992166][ T1534] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 474.358105][ T1534] usb 1-1: config 0 has no interfaces? [ 474.359873][ T1534] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 474.362008][ T1534] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.370130][ T1534] usb 1-1: config 0 descriptor?? [ 474.389292][ T8636] loop4: detected capacity change from 0 to 32768 [ 474.566176][ T8636] XFS (loop4): Mounting V5 Filesystem [ 474.616905][ T1534] usb 1-1: USB disconnect, device number 10 [ 474.707843][ T8636] XFS (loop4): Ending clean mount [ 474.718956][ T8636] XFS (loop4): Quotacheck needed: Please wait. [ 474.756304][ T4069] Bluetooth: hci6: command 0x0419 tx timeout [ 474.758326][ T8636] XFS (loop4): Quotacheck: Done. [ 474.976971][ T8398] XFS (loop4): Unmounting Filesystem [ 475.948343][ T8648] chnl_net:caif_netlink_parms(): no params data found [ 475.950781][ T8655] overlayfs: failed to resolve './file1': -2 [ 476.055933][ T8648] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.057908][ T8648] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.061790][ T8648] device bridge_slave_0 entered promiscuous mode [ 476.081111][ T8648] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.083766][ T8648] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.086379][ T8648] device bridge_slave_1 entered promiscuous mode [ 476.128527][ T8648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.143518][ T8648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.178948][ T8648] team0: Port device team_slave_0 added [ 476.184419][ T8648] team0: Port device team_slave_1 added [ 476.199201][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.201422][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.208663][ T8648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.213133][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.215360][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.221462][ T8648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.324473][ T8648] device hsr_slave_0 entered promiscuous mode [ 476.362767][ T8648] device hsr_slave_1 entered promiscuous mode [ 476.402336][ T8648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.404517][ T8648] Cannot create hsr debugfs directory [ 476.559075][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1218'. [ 476.778824][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 476.843878][ T8648] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.945581][ T8648] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.954894][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1219'. [ 476.969550][ T8682] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1219'. [ 477.024674][ T8648] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.091370][ T8648] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.253538][ T8684] loop3: detected capacity change from 0 to 32768 [ 477.260603][ T8648] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 477.306822][ T8648] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 477.344708][ T8648] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 477.355754][ T8684] XFS (loop3): Mounting V5 Filesystem [ 477.403719][ T8648] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 477.525804][ T8684] XFS (loop3): Ending clean mount [ 477.529000][ T8684] XFS (loop3): Quotacheck needed: Please wait. [ 477.587999][ T8684] XFS (loop3): Quotacheck: Done. [ 477.688616][ T8454] XFS (loop3): Unmounting Filesystem [ 477.699572][ T8648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.716153][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 477.719574][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 477.725239][ T8648] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.734108][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 477.736963][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 477.739289][ T5352] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.741027][ T5352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.762850][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 477.765683][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 477.768254][ T5352] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.769979][ T5352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.777113][ T8705] ------------[ cut here ]------------ [ 477.778883][ T8705] WARNING: CPU: 1 PID: 8705 at net/wireless/core.h:220 cfg80211_wireless_stats+0x510/0x5ec [ 477.781642][ T8705] Modules linked in: [ 477.782777][ T8705] CPU: 1 PID: 8705 Comm: syz.1.1227 Not tainted 5.15.167-syzkaller #0 [ 477.784849][ T8705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 477.787392][ T8705] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 477.789510][ T8705] pc : cfg80211_wireless_stats+0x510/0x5ec [ 477.791126][ T8705] lr : cfg80211_wireless_stats+0x510/0x5ec [ 477.792636][ T8705] sp : ffff800020e375e0 [ 477.793628][ T8705] x29: ffff800020e37670 x28: 1fffe0001b9fca00 x27: 1ffff00002958069 [ 477.795710][ T8705] x26: dfff800000000000 x25: ffff800020e37600 x24: 1ffff000041c6ec0 [ 477.797803][ T8705] x23: 0000000000000000 x22: ffff0000ce33c000 x21: ffff0000dcfe5000 [ 477.799737][ T8705] x20: ffff0000ce33c5c0 x19: ffff0000c12c2000 x18: 0000000000000000 [ 477.801691][ T8705] x17: 0000000000000002 x16: ffff8000084c5eb8 x15: 0000000000000012 [ 477.803581][ T8705] x14: 0000000000000000 x13: 0000000000ff0100 x12: 0000000000040000 [ 477.805640][ T8705] x11: 0000000000002b06 x10: ffff800024a5b000 x9 : 0000000000002b07 [ 477.807849][ T8705] x8 : ffff8000113e5e10 x7 : 0000000000000000 x6 : 000000000000000a [ 477.809906][ T8705] x5 : ffff0000d93ea0a2 x4 : ffff8000137a8122 x3 : ffff80000ab8b98c [ 477.811920][ T8705] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 477.814055][ T8705] Call trace: [ 477.814903][ T8705] cfg80211_wireless_stats+0x510/0x5ec [ 477.816202][ T8705] get_wireless_stats+0x70/0x138 [ 477.817444][ T8705] wireless_dev_seq_show+0x5c/0x3e0 [ 477.818754][ T8705] seq_read_iter+0x894/0xc44 [ 477.819856][ T8705] seq_read+0x388/0x4ec [ 477.821006][ T8705] proc_reg_read+0x1a4/0x314 [ 477.822175][ T8705] vfs_read+0x278/0xb18 [ 477.823357][ T8705] ksys_read+0x15c/0x26c [ 477.824554][ T8705] __arm64_sys_read+0x7c/0x90 [ 477.825648][ T8705] invoke_syscall+0x98/0x2b8 [ 477.826891][ T8705] el0_svc_common+0x138/0x258 [ 477.828156][ T8705] do_el0_svc+0x58/0x14c [ 477.829194][ T8705] el0_svc+0x7c/0x1f0 [ 477.830273][ T8705] el0t_64_sync_handler+0x84/0xe4 [ 477.831580][ T8705] el0t_64_sync+0x1a0/0x1a4 [ 477.832700][ T8705] irq event stamp: 242 [ 477.833695][ T8705] hardirqs last enabled at (241): [] finish_lock_switch+0xbc/0x1e8 [ 477.836101][ T8705] hardirqs last disabled at (242): [] el1_dbg+0x24/0x80 [ 477.838242][ T8705] softirqs last enabled at (226): [] local_bh_enable+0x10/0x34 [ 477.840376][ T8705] softirqs last disabled at (224): [] local_bh_disable+0x10/0x34 [ 477.842688][ T8705] ---[ end trace 16109b3cd5476610 ]--- [ 477.849069][ T8705] ------------[ cut here ]------------ [ 477.850836][ T8705] WARNING: CPU: 1 PID: 8705 at net/wireless/core.h:228 cfg80211_wireless_stats+0x528/0x5ec [ 477.853337][ T8705] Modules linked in: [ 477.854296][ T8705] CPU: 1 PID: 8705 Comm: syz.1.1227 Tainted: G W 5.15.167-syzkaller #0 [ 477.856733][ T8705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 477.859162][ T8705] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 477.861278][ T8705] pc : cfg80211_wireless_stats+0x528/0x5ec [ 477.862731][ T8705] lr : cfg80211_wireless_stats+0x528/0x5ec [ 477.864256][ T8705] sp : ffff800020e375e0 [ 477.865394][ T8705] x29: ffff800020e37670 x28: 1fffe0001b9fca00 x27: 1ffff00002958069 [ 477.867381][ T8705] x26: dfff800000000000 x25: ffff800020e37600 x24: 1ffff000041c6ec0 [ 477.869337][ T8705] x23: ffff0000dcfe5048 x22: ffff0000ce33c000 x21: ffff0000dcfe5000 [ 477.871337][ T8705] x20: ffff0000ce33c5c0 x19: 0000000000000000 x18: ffff800020e370e0 [ 477.873573][ T8705] x17: 0000000000000002 x16: ffff8000084c5eb8 x15: 0000000000000004 [ 477.875719][ T8705] x14: 00000000170abc09 x13: dfff800000000000 x12: 0000000000040000 [ 477.877836][ T8705] x11: 000000000002267e x10: ffff800024a5b000 x9 : 000000000002267f [ 477.879818][ T8705] x8 : ffff8000113e5e28 x7 : 0000000000000000 x6 : 0000000000000000 [ 477.881761][ T8705] x5 : ffff80001799a9e8 x4 : 0000000000000008 x3 : ffff8000082e1cb8 [ 477.883879][ T8705] x2 : ffff0000f36fd1c0 x1 : 0000000000000000 x0 : 0000000000000000 [ 477.885998][ T8705] Call trace: [ 477.886857][ T8705] cfg80211_wireless_stats+0x528/0x5ec [ 477.888408][ T8705] get_wireless_stats+0x70/0x138 [ 477.889597][ T8705] wireless_dev_seq_show+0x5c/0x3e0 [ 477.890931][ T8705] seq_read_iter+0x894/0xc44 [ 477.892067][ T8705] seq_read+0x388/0x4ec [ 477.893153][ T8705] proc_reg_read+0x1a4/0x314 [ 477.894376][ T8705] vfs_read+0x278/0xb18 [ 477.895375][ T8705] ksys_read+0x15c/0x26c [ 477.896460][ T8705] __arm64_sys_read+0x7c/0x90 [ 477.897654][ T8705] invoke_syscall+0x98/0x2b8 [ 477.898877][ T8705] el0_svc_common+0x138/0x258 [ 477.900115][ T8705] do_el0_svc+0x58/0x14c [ 477.901244][ T8705] el0_svc+0x7c/0x1f0 [ 477.902349][ T8705] el0t_64_sync_handler+0x84/0xe4 [ 477.903612][ T8705] el0t_64_sync+0x1a0/0x1a4 [ 477.904669][ T8705] irq event stamp: 904 [ 477.905568][ T8705] hardirqs last enabled at (903): [] exit_to_kernel_mode+0x100/0x178 [ 477.908057][ T8705] hardirqs last disabled at (904): [] el1_dbg+0x24/0x80 [ 477.910369][ T8705] softirqs last enabled at (898): [] handle_softirqs+0xb88/0xdbc [ 477.912954][ T8705] softirqs last disabled at (245): [] __irq_exit_rcu+0x268/0x4d8 [ 477.915403][ T8705] ---[ end trace 16109b3cd5476611 ]--- [ 477.929026][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 477.932220][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 477.936556][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 477.944912][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 477.957116][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 477.975680][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 477.979506][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 477.984586][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 477.987249][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 477.990060][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 477.997015][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 477.999799][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 478.004890][ T8648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 478.110758][ T8707] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 478.132713][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 478.134777][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 478.152628][ T8648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.168935][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 478.171622][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 478.196314][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 478.199160][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 478.201996][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 478.204897][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 478.210913][ T8648] device veth0_vlan entered promiscuous mode [ 478.247889][ T8648] device veth1_vlan entered promiscuous mode [ 478.282957][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 478.285568][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 478.288737][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 478.291599][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 478.297321][ T8648] device veth0_macvtap entered promiscuous mode [ 478.303100][ T8648] device veth1_macvtap entered promiscuous mode [ 478.314035][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.316655][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.319141][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.321819][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.325516][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.328288][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.330730][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.334369][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.336773][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.348395][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.358784][ T8648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.361068][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 478.364393][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 478.366964][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 478.372398][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 478.378742][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.381478][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.397713][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.400661][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.407946][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.410476][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.414273][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.416895][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.419345][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.421875][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.427593][ T8648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.429497][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 478.433412][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 478.444747][ T8648] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.447249][ T8648] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.449588][ T8648] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.451718][ T8648] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.513990][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.515986][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.523921][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 478.545392][ T4170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.548046][ T4170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.554761][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 478.832360][ T1961] Bluetooth: hci0: command 0x041b tx timeout [ 480.912566][ T1961] Bluetooth: hci0: command 0x040f tx timeout [ 482.992432][ T4069] Bluetooth: hci0: command 0x0419 tx timeout