last executing test programs: 8.018042798s ago: executing program 2 (id=66): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xdf) pwrite64(r0, &(0x7f0000000140)='2:', 0x2, 0x7ff) 7.909633019s ago: executing program 2 (id=69): r0 = socket(0x22, 0x2, 0x4) accept4$bt_l2cap(r0, 0x0, 0x0, 0x80800) 7.342224443s ago: executing program 2 (id=70): pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) dup(0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x3c}, 0x2, @in=@multicast1, 0x0, 0x1}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) 7.254675613s ago: executing program 2 (id=71): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)={[{@umask}, {}, {@nls={'nls', 0x3d, 'cp865'}}, {@uid={'uid', 0x3d, 0xee01}}, {@nobarrier}, {@uid}]}, 0x20, 0x6de, &(0x7f0000000840)="$eJzs3U9sW3cdAPDvsx0n7qTMG+1WEFKjVVSwQpvEjBYJiYIQymGCSlx2DW26RnWyKslQWiHqAYMjnFAPOwyhcNgJcUAa4oAYZyQk7r1X4sCt4oDRe34vsZ3Esds4abvPR3p+v+f3+/N9X//es/3SygF8ai28FROtSGLh/Jub6faDrUbzwVZjpShHxGRElCIqnVUkqxHJJxFXorPEZ9Mn8+6S/cZ54+HHH5y7/1Gjs1XJl6x+aVC7He0BI7TyJWYiopyvR1TZr79re/R3b6Suk+2404SdLRIHx629S2uU5kOct8DT7l5EeWKP5+sRJyJiKv8cEPnVoXTE4R26ka5yAAAA8HQqH1ThxUfxKDZj+mjCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOdD0vnNwCRfSkV5JpL89/+/n1fLVKvHG+4BvnzA/vdvHFEgAAAAAAAAAHD4JnaKZx7Fo9iM6WK7nWR/838t2ziZPb4Q78Z6LMVaXIjNWIyN2Ii1mIuYmO7qs7q5uLGxNre75W8ibdlut+/lLecjor6r5fyYjxkAAAAAAAAAnm8/jYWYPu4gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgWxJR7qyy5WRRrkepEhFTEVFN67Ui/lKUn2V/Pe4AAAAAYPxq+Xo6+V+n0E6y7/yvZN/7p+LdWI2NWI6NaMZSXM/uBXS+9Zf+2Wo0H2w1VtJld8ff+vdIcWQ9RkQ53ttn5NmsxqntFgvx3fhBnI+ZuBprsRw/isXYiKWYiVp6ELEYSdRrnbsX9SLO3njLeVdXekK52h/bmb7t01kktbgRy1lsF+JateitlNVI4nTXaH+qRvRl6L00O8k3c0Pm6HrX6/Xr/L5Mrv3ikH2MRz078ontjMymuc+z8dLeuS+MOE/6R5qL0vY9qJM7o6Sb/SMVOf/hKDk/ka/TXP+iN+eHbcRbaf2ZmI9SPvsiXunN+e0v3H+5t/GX/vW3qzdLq7du3lg/P8ZDGquJotCfiUZXJl4dPPvyTDTTTLSGz8RE/xNTT3Ach6iaZ6NzYRvuavmdrLQYr3VNwXfieizFpZiNubgcs/H1mI9Gzww71ZPXSmOlNyfZuVbafX2rDQj+7Be7Kv3ygMpHK83LS1157b7S1bN9+TNXfhWzXVl6efDse5x3gcrn8kI6xs+233GeBj2ZyK/NRXTFG9Q+mfhtO31cb67eWru5eHvI8c7l6/S0fb/32vy7Jz6YJ5LOl/SKW8m2spzUivmS7vvMdrS9+armf3HptCvt2ndqe189pmM5vrfvmVrNP8Pt7qmz79U99zWyfae79vV8yol3opl9CukzczRZBWBoJ14/Ua09rP2j9mHt57WbtTenvj15efLz1Zj4e+XP5T+Ufl/6RvJ6fBg/ienjjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4H63fu3lpsNpfWxlioPuZYUTqwztYLw3UY9YjBYyV5oTrubDwFhf9MDcxGLcY0+h8jYkCd6hMPkYx/PqcT+VA6LH44LXumXR6heaVotXedSqxP7fcKTu687lG/tdj8b7unTi26ThngOXdxY+X2xfU7d7+yvLL49tLbS6vzly9dvtT42txXL95Ybi7Ndh6PO0pgHNbv3C0fdwwAAAAAAAAAAADAaPJ//b/x2P+ZoXJAnera+t4jnznqQwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeUQtvxUQrkpibvTCbbj/YajTTpSjv1KxERCkikh9HJJ9EXInOEvWu7pL9xnnj4ccfnLv/UWOnr0pRvzSo3XBa+RIzEVHO1web3KOb3f1d6+qv9VjhJdtHmCbsbJE4OG7/DwAA//9tSfWT") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 7.176782883s ago: executing program 2 (id=72): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 6.595710917s ago: executing program 2 (id=77): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x10) 6.567121597s ago: executing program 32 (id=77): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x10) 1.843926928s ago: executing program 3 (id=148): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x8, 0xc3, 0x15c1, 0x5886, 0x805, 0x3, 0x8, 'syz1\x00'}) 1.805259548s ago: executing program 1 (id=151): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000006c80)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000001280)=""/232, 0xe8}], 0x1, &(0x7f0000001180)}}], 0x1, 0x40000100, 0x0) 1.623810929s ago: executing program 3 (id=153): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x10048, &(0x7f0000000280)={[{@dioread_nolock}, {@data_err_ignore}, {@nogrpid}, {@usrjquota}]}, 0x1, 0x783, &(0x7f0000002200)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwritev2(r0, &(0x7f0000000480)=[{&(0x7f0000000180)="5da2", 0x2}], 0x1, 0x285, 0x8, 0x10) 1.54765935s ago: executing program 5 (id=155): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.52654633s ago: executing program 4 (id=156): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000010, &(0x7f0000000ec0)=ANY=[], 0x1, 0xc43, &(0x7f0000000200)="$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") setrlimit(0x1, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0xb, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000), 0x0, 0x0, 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) ftruncate(r1, 0x50000000) 1.47592933s ago: executing program 1 (id=157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x20000080) 1.397100011s ago: executing program 5 (id=158): syz_mount_image$minix(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x12001a, &(0x7f0000000540)=ANY=[], 0x0, 0x1a4, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSWINSZ(r1, 0x80045440, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x2cb9c000) ftruncate(r0, 0xc17a) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x1ec, @none, 0x2}, 0xe) ioctl$NBD_DISCONNECT(r0, 0xab08) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x4, 0x0, &(0x7f0000000540)=0xfffffffffffffe6a) 1.373802321s ago: executing program 1 (id=159): getrandom(0x0, 0x0, 0x2) syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x126}, &(0x7f0000000000), &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/10, 0x21}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x1}, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$RNDGETENTCNT(r4, 0x80086c41, 0x0) socket$inet6(0xa, 0x2, 0x0) 1.251913411s ago: executing program 4 (id=160): r0 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0xb00) 1.251684752s ago: executing program 3 (id=161): socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6(0xa, 0x3, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 1.161579632s ago: executing program 1 (id=162): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000", @ANYRES32, @ANYBLOB], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) gettid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x7fffffff, 0x40372, 0x0, 0x19, "40b80000000000000000001c00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) 1.150999103s ago: executing program 4 (id=163): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000c40)={0x0, 0x0, 0x2, "87db"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.067666383s ago: executing program 5 (id=165): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x22000406, &(0x7f0000000400)={[{@data_err_abort}, {@dax_always}, {@nogrpid}, {@orlov}, {@data_err_abort}, {@grpjquota, 0x2e}, {@sb={'sb', 0x3d, 0x1}}, {@init_itable}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x10000}}], [], 0x2c}, 0x0, 0x4bf, &(0x7f0000001600)="$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") 763.884515ms ago: executing program 5 (id=167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0xb4, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}}, 0x0, 0x0, 0x38, 0x0, "0f424a2bc651a9f11381328af8daf6f4bd2827984afeb6b627cea1ba22d1af57aa193c5024c9e8b22a8796a538ed893952a1aa555418ba1b4d0bc0712c028ec32a9bc2fb29b52d39e8626bc90abcc02a"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmmsg$inet6(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000040) 659.846926ms ago: executing program 5 (id=169): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x14, 0x5a, 0x1, 0xfffffffc, 0x25dfdbfa, {0x2}}, 0x14}}, 0x80) 632.595056ms ago: executing program 0 (id=170): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 622.130176ms ago: executing program 5 (id=171): r0 = io_uring_setup(0x9, &(0x7f00000002c0)={0x0, 0x164e, 0x0, 0xffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x104) fcntl$setlease(r1, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x2}]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 503.972476ms ago: executing program 0 (id=172): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 503.697787ms ago: executing program 3 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) 503.615956ms ago: executing program 4 (id=174): unshare(0x22020400) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getpeername$packet(r0, 0x0, &(0x7f00000003c0)) 457.353707ms ago: executing program 4 (id=175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xe}], 0x1) 446.195037ms ago: executing program 0 (id=176): r0 = socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') fcntl$notify(0xffffffffffffffff, 0x402, 0x29) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) 349.187407ms ago: executing program 3 (id=177): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0xfb, 0x6af, &(0x7f0000000d00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000240), &(0x7f0000000280)=@v3, 0x18, 0x0) io_setup(0x4, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r2, 0x0, 0x0, 0x91, 0x0) write$uinput_user_dev(r0, &(0x7f0000000700)={'syz0\x00', {0xa, 0xe9c0, 0x9c3c, 0x3}, 0x27, [0x8, 0x0, 0xfffffff7, 0x8, 0x1b, 0x6, 0xffffffff, 0x9, 0x11f, 0x5, 0x3, 0x3, 0x6, 0x5, 0x7, 0x2, 0x5, 0x0, 0x1, 0x5, 0x800, 0x4, 0x45, 0x7, 0x43ea, 0x30000000, 0x7, 0x80, 0x8031, 0x3, 0xf63, 0x87, 0x0, 0x5, 0xfffffff9, 0x0, 0xff7, 0x8, 0x98, 0x1, 0x8, 0x3, 0x1, 0x401, 0x2, 0xfffffff7, 0xd, 0x0, 0x8, 0x7fffffff, 0x19, 0x4, 0x80000001, 0x7, 0x8, 0x8, 0x0, 0x7, 0x9, 0x3, 0xac8b, 0x5, 0x3, 0x800], [0x5, 0x1, 0x4, 0x60, 0x3, 0x7ff, 0xffffffda, 0x0, 0x20, 0x1000, 0x1, 0x7, 0x78, 0x101, 0x52, 0x7, 0x7, 0xd54, 0x2, 0x1, 0x6, 0x6, 0x4, 0x800, 0x400, 0x1, 0x5, 0x2, 0x6, 0xf4, 0x7, 0x7ff, 0x160, 0x5, 0xf, 0x8, 0x8, 0x6, 0x6, 0x2, 0x5, 0x6, 0x5984ccbc, 0x9d0d, 0x2, 0x9c3, 0xffffffff, 0xfffffbff, 0x3, 0x9dd, 0x101, 0x8, 0x0, 0x7f, 0xff, 0x2, 0x12, 0x3, 0x846, 0x200, 0x4a, 0x7fffffff, 0x6, 0x8], [0x1, 0xfffffff2, 0x3, 0xffffffff, 0x8001, 0x2, 0x803, 0x1f6a494b, 0x2e7, 0x741, 0x7, 0x40, 0x7, 0x202, 0xa2c7, 0xffff, 0xfffffff9, 0x5, 0xfffffff8, 0x0, 0xfff, 0x4, 0x9, 0x1a855115, 0x6, 0xffff, 0xfff, 0x3, 0x5, 0x10001, 0x6b, 0x4, 0x2, 0x401, 0x80000001, 0x175bc0d9, 0xf710, 0x4, 0x7, 0x2, 0x7, 0x4cd2, 0x2, 0x0, 0x4, 0x1, 0x400, 0x6, 0xa75d, 0x4, 0x6, 0x3ff, 0xffff7531, 0x6, 0x6f, 0x0, 0xfffffffe, 0x9, 0x40, 0x3, 0x2, 0x2, 0x7, 0x7f94], [0x1, 0x6, 0x8, 0xe, 0x8, 0x53fd7f56, 0x7, 0x5, 0x5, 0x6, 0x5, 0xffff8001, 0x90f, 0x800, 0x9, 0x3, 0xfffffffd, 0x1ff, 0x7fff, 0x0, 0x2, 0x4, 0x8, 0x10001, 0xfffffc01, 0x927, 0x8, 0x4bf14d20, 0x1, 0xe5, 0x1, 0x7, 0x2, 0x2, 0x77bbcb87, 0x9, 0x3, 0x4, 0x4, 0xffffffff, 0x7, 0x9, 0x0, 0x6, 0x2, 0x2, 0x7fff, 0x101, 0x3f06, 0x2, 0x3, 0x5, 0x40000000, 0x4, 0x7, 0x0, 0xa137, 0x6, 0x9, 0x0, 0x0, 0xfffffff8, 0x6, 0x5]}, 0x45c) 324.107128ms ago: executing program 0 (id=178): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000340000/0x4000)=nil, 0x4017, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil) gettid() 281.227478ms ago: executing program 1 (id=179): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8906, 0x0) 215.027969ms ago: executing program 0 (id=180): syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x109401) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x8, "cd158348ed10c633b3715abe4a376ca59c453afdfaa060a1bdffe28f8e867e59"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0xffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000000)={0x1ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff7}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) 136.064569ms ago: executing program 1 (id=181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000aaaaaaaaaa26bbbbbbbbbbbb88a800008100000008004500004000006000002f9078ac1e0001ac141400c5"], 0x5a) 89.750389ms ago: executing program 0 (id=182): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x0, 0xe9, 0x17, 0xf3}}]}}]}}, 0x0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x6, 0xc0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x2c}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x7, 0xfc, 0x48, {0x7, 0x25, 0x1, 0x80, 0x6, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x6, 0x2, {0x7, 0x25, 0x1, 0x2, 0x2, 0xfffc}}}}}}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffff1a, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003c00072301fcffffff00000003"], 0x24}, 0x1, 0x0, 0x0, 0x480c4}, 0xc040) 86.397759ms ago: executing program 3 (id=183): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r0, 0x0, 0x0) 0s ago: executing program 4 (id=184): syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. [ 35.492370][ T4012] cgroup: Unknown subsys name 'net' [ 35.774543][ T4012] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 36.117350][ T4012] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 37.553272][ T4024] chnl_net:caif_netlink_parms(): no params data found [ 37.579308][ T4023] chnl_net:caif_netlink_parms(): no params data found [ 37.637557][ T4022] chnl_net:caif_netlink_parms(): no params data found [ 37.683233][ T4024] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.684978][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.688178][ T4024] device bridge_slave_0 entered promiscuous mode [ 37.694977][ T4024] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.696686][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.699351][ T4024] device bridge_slave_1 entered promiscuous mode [ 37.712263][ T4031] chnl_net:caif_netlink_parms(): no params data found [ 37.774143][ T4023] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.775798][ T4023] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.778921][ T4023] device bridge_slave_0 entered promiscuous mode [ 37.789540][ T4024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.797643][ T4023] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.800470][ T4023] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.802919][ T4023] device bridge_slave_1 entered promiscuous mode [ 37.815078][ T4024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.841148][ T4037] chnl_net:caif_netlink_parms(): no params data found [ 37.844567][ T4022] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.846316][ T4022] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.848874][ T4022] device bridge_slave_0 entered promiscuous mode [ 37.863125][ T4031] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.864885][ T4031] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.867210][ T4031] device bridge_slave_0 entered promiscuous mode [ 37.878865][ T4022] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.880803][ T4022] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.883177][ T4022] device bridge_slave_1 entered promiscuous mode [ 37.887726][ T4024] team0: Port device team_slave_0 added [ 37.889915][ T4031] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.891699][ T4031] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.894124][ T4031] device bridge_slave_1 entered promiscuous mode [ 37.898576][ T4023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.912586][ T4024] team0: Port device team_slave_1 added [ 37.926560][ T4023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.969063][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.970763][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.977112][ T4024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.984533][ T4022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.988438][ T4031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.005420][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.007254][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.013584][ T4024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.024285][ T4022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.028229][ T4031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.037311][ T4023] team0: Port device team_slave_0 added [ 38.040519][ T4023] team0: Port device team_slave_1 added [ 38.061865][ T4037] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.063703][ T4037] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.066090][ T4037] device bridge_slave_0 entered promiscuous mode [ 38.069537][ T4037] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.071193][ T4037] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.073545][ T4037] device bridge_slave_1 entered promiscuous mode [ 38.082845][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.084462][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.090663][ T4023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.117326][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.125590][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.132518][ T4023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.137584][ T4022] team0: Port device team_slave_0 added [ 38.141320][ T4031] team0: Port device team_slave_0 added [ 38.145140][ T4037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.158188][ T4022] team0: Port device team_slave_1 added [ 38.160804][ T4031] team0: Port device team_slave_1 added [ 38.169348][ T4037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.240443][ T4024] device hsr_slave_0 entered promiscuous mode [ 38.278331][ T4024] device hsr_slave_1 entered promiscuous mode [ 38.349202][ T4037] team0: Port device team_slave_0 added [ 38.357955][ T4022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.359575][ T4022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.365639][ T4022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.381690][ T4037] team0: Port device team_slave_1 added [ 38.383945][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.385531][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.398128][ T4031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.401600][ T4022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.403200][ T4022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.409745][ T4022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.449932][ T4023] device hsr_slave_0 entered promiscuous mode [ 38.488320][ T4023] device hsr_slave_1 entered promiscuous mode [ 38.528036][ T4023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.530138][ T4023] Cannot create hsr debugfs directory [ 38.546499][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.548385][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.554706][ T4031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.595604][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.597465][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.604821][ T4037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.644366][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.646289][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.653001][ T4037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.719802][ T4022] device hsr_slave_0 entered promiscuous mode [ 38.768310][ T4022] device hsr_slave_1 entered promiscuous mode [ 38.807999][ T4022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.810003][ T4022] Cannot create hsr debugfs directory [ 38.889662][ T4031] device hsr_slave_0 entered promiscuous mode [ 38.928202][ T4031] device hsr_slave_1 entered promiscuous mode [ 38.968048][ T4031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.969938][ T4031] Cannot create hsr debugfs directory [ 39.060055][ T4037] device hsr_slave_0 entered promiscuous mode [ 39.108334][ T4037] device hsr_slave_1 entered promiscuous mode [ 39.148196][ T4037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.150226][ T4037] Cannot create hsr debugfs directory [ 39.308490][ T1960] Bluetooth: hci3: command 0x0409 tx timeout [ 39.308490][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 39.311537][ T1960] Bluetooth: hci1: command 0x0409 tx timeout [ 39.313075][ T1960] Bluetooth: hci2: command 0x0409 tx timeout [ 39.339097][ T4024] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.388589][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 39.394510][ T4024] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.440608][ T4024] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.482061][ T4024] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.550429][ T4023] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.598982][ T4023] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.639842][ T4023] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.680050][ T4023] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.752170][ T4031] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.810224][ T4031] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.850750][ T4031] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.910861][ T4031] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.986159][ T4037] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.045705][ T4037] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.091196][ T4037] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.142820][ T4037] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.236208][ T4022] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.279256][ T4022] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.326313][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.337312][ T4022] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.383454][ T4022] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.425931][ T4023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.444080][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.447425][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.468629][ T4024] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.482791][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.496973][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.500067][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.503149][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.505136][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.514019][ T4023] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.516179][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.519877][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.522131][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.542168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.544892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.563100][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.565810][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.568421][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.570286][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.572443][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.585401][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.589682][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.592217][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.594624][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.596283][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.599155][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.605741][ T4037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.609677][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.615530][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.620184][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.623214][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.625757][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.628137][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.629868][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.632124][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.634523][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.655262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.658125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.660552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.663296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.665821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.671629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.674110][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.675682][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.678029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.681687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.684161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.686419][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.688229][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.704767][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.707222][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.710282][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.712995][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.718567][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.726876][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.731706][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.739313][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.744801][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.760018][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.762430][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.783754][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.786998][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.796804][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.806550][ T4037] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.816658][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.820398][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.823001][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.825722][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.837458][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.847338][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.850314][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.852829][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.855283][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.858416][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.863172][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.865510][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.878490][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.884399][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.887153][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.896295][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.898259][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.901326][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.904046][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.907452][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.909452][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.912646][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.931618][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.937741][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.944790][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.946934][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.964375][ T4022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.966844][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.996772][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.023811][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.026211][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.030157][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.033361][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.036222][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.039958][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.045174][ T4022] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.049941][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.058294][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.060825][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.063370][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.066158][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.070327][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.072063][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.096277][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.103330][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.105236][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.107248][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.111169][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.113608][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.117016][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.122593][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.134822][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.168146][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.170593][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.172840][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.174495][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.176702][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.180906][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.196191][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.221288][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.223831][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.226976][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.232144][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.236909][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.240073][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.245126][ T4024] device veth0_vlan entered promiscuous mode [ 41.248414][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.274831][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.301922][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.305065][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.307496][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.310585][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.313547][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.323386][ T4037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.333828][ T4023] device veth0_vlan entered promiscuous mode [ 41.339985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.342692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.345281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.348694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.352472][ T4024] device veth1_vlan entered promiscuous mode [ 41.369554][ T4023] device veth1_vlan entered promiscuous mode [ 41.374475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.377105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.380403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.382657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.385256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.388401][ T4070] Bluetooth: hci1: command 0x041b tx timeout [ 41.388734][ T25] Bluetooth: hci2: command 0x041b tx timeout [ 41.389894][ T4070] Bluetooth: hci0: command 0x041b tx timeout [ 41.391195][ T25] Bluetooth: hci3: command 0x041b tx timeout [ 41.394917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.424236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.426843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.430099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.432686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.457261][ T4024] device veth0_macvtap entered promiscuous mode [ 41.461571][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.464092][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.466746][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.471347][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.478382][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 41.488198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.490888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.493552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.496079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.505920][ T4024] device veth1_macvtap entered promiscuous mode [ 41.552676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.555008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.557611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.569907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.572299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.574692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.577364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.592549][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.597383][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.607339][ T4023] device veth0_macvtap entered promiscuous mode [ 41.617446][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.620614][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.623129][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.626053][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.630856][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.633417][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.636002][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.639581][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.642010][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.644478][ T4031] device veth0_vlan entered promiscuous mode [ 41.650390][ T4037] device veth0_vlan entered promiscuous mode [ 41.666078][ T4023] device veth1_macvtap entered promiscuous mode [ 41.674197][ T4024] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.676322][ T4024] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.680646][ T4024] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.682930][ T4024] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.692699][ T4031] device veth1_vlan entered promiscuous mode [ 41.695731][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.698299][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.700700][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.702706][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.717021][ T4037] device veth1_vlan entered promiscuous mode [ 41.729725][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.732236][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.760036][ T4022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.770146][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.772629][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.777458][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.786249][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.788817][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.811126][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.813474][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.816955][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.834338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.837232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.854164][ T4023] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.856622][ T4023] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.861893][ T4023] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.864062][ T4023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.867668][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.871286][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.890896][ T4031] device veth0_macvtap entered promiscuous mode [ 41.893492][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.896124][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.899392][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.923504][ T4031] device veth1_macvtap entered promiscuous mode [ 41.935342][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.938800][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.939381][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.941470][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.942759][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.947417][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.966810][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.970881][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.973209][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.975791][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.981164][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.001065][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.003806][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.006482][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.009976][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.012316][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.014574][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.020565][ T4022] device veth0_vlan entered promiscuous mode [ 42.024865][ T4037] device veth0_macvtap entered promiscuous mode [ 42.055070][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.057665][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.061216][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.063600][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.067410][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.080788][ T4037] device veth1_macvtap entered promiscuous mode [ 42.096062][ T4022] device veth1_vlan entered promiscuous mode [ 42.101671][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.104398][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.106935][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.110710][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.113456][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.117454][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.128323][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.138633][ T4031] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.141087][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.143146][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.147057][ T4031] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.150813][ T4031] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.153021][ T4031] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.165842][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.169198][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.172497][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.195023][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.211971][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.214405][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.217152][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.219979][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.222661][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.226652][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.246815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.249821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.252594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.255283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.270940][ T4022] device veth0_macvtap entered promiscuous mode [ 42.276179][ T4022] device veth1_macvtap entered promiscuous mode [ 42.303628][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.306139][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.309714][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.312227][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.314659][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.317287][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.323856][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.347247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.347419][ T297] Bluetooth: hci5: Frame reassembly failed (-84) [ 42.350742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.354335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.356983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.375741][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.383245][ T4037] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.385546][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.385874][ T4037] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.391929][ T4037] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.394262][ T4037] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.411642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.450672][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.455286][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.459797][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.462382][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.464972][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.468474][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.471151][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.473684][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.479039][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.493527][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.496046][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.504134][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.506745][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.513127][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.515705][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.519644][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.522378][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.525301][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.527721][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.532227][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.557692][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.560794][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.568573][ T4022] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.570707][ T4022] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.572879][ T4022] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.575061][ T4022] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.636527][ T297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.639497][ T297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.645171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.655510][ T297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.666651][ T297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.681885][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.702451][ T297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.704487][ T297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.714952][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.733440][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.735522][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.743361][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.745804][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.749147][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.762292][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.791922][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.794118][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.797375][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.845415][ T4105] udc-core: couldn't find an available UDC or it's busy [ 42.852941][ T4105] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 43.232990][ T4120] loop3: detected capacity change from 0 to 4096 [ 43.274651][ T26] audit: type=1326 audit(43.240:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4122 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c98cd28 code=0x7ffc0000 [ 43.282465][ T26] audit: type=1326 audit(43.250:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4122 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff9c98cd28 code=0x7ffc0000 [ 43.285267][ T4123] mmap: syz.2.11 (4123) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 43.294870][ T26] audit: type=1326 audit(43.250:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4122 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c98cd28 code=0x7ffc0000 [ 43.317558][ T4124] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 43.321306][ T26] audit: type=1326 audit(43.250:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4122 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=234 compat=0 ip=0xffff9c98cd28 code=0x7ffc0000 [ 43.328747][ T26] audit: type=1326 audit(43.260:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4122 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c98cd28 code=0x7ffc0000 [ 43.468747][ T4069] Bluetooth: hci0: command 0x040f tx timeout [ 43.470229][ T4069] Bluetooth: hci3: command 0x040f tx timeout [ 43.471720][ T4069] Bluetooth: hci2: command 0x040f tx timeout [ 43.473220][ T4069] Bluetooth: hci1: command 0x040f tx timeout [ 43.548581][ T4069] Bluetooth: hci4: command 0x040f tx timeout [ 43.613359][ T4142] capability: warning: `syz.2.19' uses deprecated v2 capabilities in a way that may be insecure [ 43.647291][ T4144] udc-core: couldn't find an available UDC or it's busy [ 43.649571][ T4144] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 43.662282][ T4146] udc-core: couldn't find an available UDC or it's busy [ 43.664023][ T4146] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 44.206992][ T4151] device vlan2 entered promiscuous mode [ 44.285886][ T4157] netlink: 68 bytes leftover after parsing attributes in process `syz.4.25'. [ 44.358850][ T4071] Bluetooth: hci5: command 0x1003 tx timeout [ 44.360477][ T4033] Bluetooth: hci5: sending frame failed (-49) [ 44.505217][ T4166] netlink: 108 bytes leftover after parsing attributes in process `syz.3.31'. [ 44.521443][ T4166] Zero length message leads to an empty skb [ 44.551867][ T4168] syz.4.30 uses obsolete (PF_INET,SOCK_PACKET) [ 44.692985][ T4175] udc-core: couldn't find an available UDC or it's busy [ 44.694750][ T4175] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 44.860817][ T4181] loop2: detected capacity change from 0 to 512 [ 44.908501][ T4181] EXT4-fs (loop2): Ignoring removed orlov option [ 44.910074][ T4181] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.912976][ T4181] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.916041][ T4181] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.929459][ T4181] EXT4-fs (loop2): 1 orphan inode deleted [ 44.931311][ T4181] EXT4-fs (loop2): 1 truncate cleaned up [ 44.932750][ T4181] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,dioread_nolock,,errors=continue. Quota mode: none. [ 45.051509][ T4187] loop2: detected capacity change from 0 to 256 [ 45.155600][ T4189] udc-core: couldn't find an available UDC or it's busy [ 45.157364][ T4189] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 45.230807][ T4191] netlink: 64 bytes leftover after parsing attributes in process `syz.4.41'. [ 45.324445][ T4195] loop4: detected capacity change from 0 to 1024 [ 45.550756][ T3605] Bluetooth: hci1: command 0x0419 tx timeout [ 45.552539][ T3605] Bluetooth: hci2: command 0x0419 tx timeout [ 45.554245][ T3605] Bluetooth: hci3: command 0x0419 tx timeout [ 45.555750][ T3605] Bluetooth: hci0: command 0x0419 tx timeout [ 45.628509][ T3605] Bluetooth: hci4: command 0x0419 tx timeout [ 45.636995][ T4207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'. [ 45.654217][ T4211] loop4: detected capacity change from 0 to 1024 [ 45.698999][ T4211] ======================================================= [ 45.698999][ T4211] WARNING: The mand mount option has been deprecated and [ 45.698999][ T4211] and is ignored by this kernel. Remove the mand [ 45.698999][ T4211] option from the mount to silence this warning. [ 45.698999][ T4211] ======================================================= [ 45.728948][ T4211] EXT4-fs (loop4): Ignoring removed nobh option [ 45.734306][ T4211] EXT4-fs (loop4): Ignoring removed bh option [ 45.777088][ T4211] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,barrier=0x0000000000000d42,,errors=continue. Quota mode: writeback. [ 45.866880][ T4224] netlink: 'syz.1.55': attribute type 32 has an invalid length. [ 45.894206][ T4224] netlink: 52 bytes leftover after parsing attributes in process `syz.1.55'. [ 45.938825][ T4211] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.49: Allocating blocks 497-513 which overlap fs metadata [ 45.958508][ T4211] EXT4-fs (loop4): pa 0000000005ff9496: logic 256, phys. 385, len 8 [ 45.960548][ T4211] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 46.112435][ T4238] udc-core: couldn't find an available UDC or it's busy [ 46.114278][ T4238] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 46.146564][ T4241] udc-core: couldn't find an available UDC or it's busy [ 46.149574][ T4241] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 46.170140][ T4033] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 46.172795][ T4033] CPU: 1 PID: 4033 Comm: kworker/u5:5 Not tainted 5.15.178-syzkaller #0 [ 46.174943][ T4033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 46.177412][ T4033] Workqueue: hci4 hci_rx_work [ 46.178626][ T4033] Call trace: [ 46.179200][ T4033] dump_backtrace+0x0/0x530 [ 46.180401][ T4033] show_stack+0x2c/0x3c [ 46.181409][ T4033] dump_stack_lvl+0x108/0x170 [ 46.182552][ T4033] dump_stack+0x1c/0x58 [ 46.183579][ T4033] sysfs_create_dir_ns+0x278/0x318 [ 46.184824][ T4033] kobject_add_internal+0x384/0x8f0 [ 46.186061][ T4033] kobject_add+0x14c/0x21c [ 46.187199][ T4033] device_add+0x400/0xef4 [ 46.187632][ T4245] udc-core: couldn't find an available UDC or it's busy [ 46.188247][ T4033] hci_conn_add_sysfs+0xc4/0x1cc [ 46.188285][ T4033] le_conn_complete_evt+0x954/0x1228 [ 46.188296][ T4033] hci_le_meta_evt+0xa50/0x31c0 [ 46.188307][ T4033] hci_event_packet+0xd34/0x12b4 [ 46.188317][ T4033] hci_rx_work+0x1d0/0x830 [ 46.188326][ T4033] process_one_work+0x790/0x11b8 [ 46.188344][ T4033] worker_thread+0x910/0x1034 [ 46.188355][ T4033] kthread+0x37c/0x45c [ 46.188364][ T4033] ret_from_fork+0x10/0x20 [ 46.189797][ T4033] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 46.189825][ T4033] Bluetooth: hci4: failed to register connection device [ 46.211451][ T4245] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 46.428242][ T4071] Bluetooth: hci5: command 0x1001 tx timeout [ 46.430717][ T4032] Bluetooth: hci5: sending frame failed (-49) [ 46.648866][ T4250] loop2: detected capacity change from 0 to 512 [ 46.663915][ T4250] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 47.390042][ T4287] loop2: detected capacity change from 0 to 1024 [ 47.472141][ T4022] hfsplus: bad catalog entry type [ 47.813582][ T4339] udc-core: couldn't find an available UDC or it's busy [ 47.815355][ T4339] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 47.952532][ T1024] hfsplus: b-tree write err: -5, ino 4 [ 48.167376][ T4352] udc-core: couldn't find an available UDC or it's busy [ 48.171861][ T4352] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.381837][ T4352] udc-core: couldn't find an available UDC or it's busy [ 48.383731][ T4352] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.389329][ T4353] chnl_net:caif_netlink_parms(): no params data found [ 48.421736][ T4364] loop3: detected capacity change from 0 to 512 [ 48.450347][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.452406][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.455018][ T4353] device bridge_slave_0 entered promiscuous mode [ 48.462621][ T4364] EXT4-fs (loop3): Invalid want_extra_isize 107 [ 48.476491][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.478493][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.486292][ T4353] device bridge_slave_1 entered promiscuous mode [ 48.507874][ T4068] Bluetooth: hci5: command 0x1009 tx timeout [ 48.523559][ T4353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.534299][ T4353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.553064][ T4353] team0: Port device team_slave_0 added [ 48.556206][ T4353] team0: Port device team_slave_1 added [ 48.570735][ T4353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.572535][ T4353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.579055][ T4353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.583118][ T4353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.588014][ T4353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.594478][ T4353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.599556][ T4371] udc-core: couldn't find an available UDC or it's busy [ 48.601366][ T4371] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.651770][ T4353] device hsr_slave_0 entered promiscuous mode [ 48.689272][ T4353] device hsr_slave_1 entered promiscuous mode [ 48.727868][ T4353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.730451][ T4353] Cannot create hsr debugfs directory [ 48.811237][ T4353] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 48.860082][ T4353] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 48.910429][ T4353] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 48.954239][ T4353] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 49.006081][ T4375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'. [ 49.073257][ T4353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.083141][ T1024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.085706][ T1024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.092891][ T4353] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.104831][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.107488][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.113579][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.115472][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.117902][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.120645][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.123156][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.125040][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.127540][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.150725][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.161602][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.171944][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.175632][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.178697][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.182234][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.196097][ T4353] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.199376][ T4353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.203652][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.206317][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.212347][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.215338][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.219975][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.227625][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.337017][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.339503][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.346925][ T4353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.540832][ T4400] udc-core: couldn't find an available UDC or it's busy [ 49.546117][ T4400] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 49.596507][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.604575][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.633523][ T26] audit: type=1326 audit(49.600:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.3.97" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83a4ad28 code=0x7ffc0000 [ 49.643673][ T26] audit: type=1326 audit(49.600:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.3.97" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=236 compat=0 ip=0xffff83a4ad28 code=0x7ffc0000 [ 49.651460][ T4353] device veth0_vlan entered promiscuous mode [ 49.653813][ T26] audit: type=1326 audit(49.600:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.3.97" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83a4ad28 code=0x7ffc0000 [ 49.657337][ T1024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.662763][ T1024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.666174][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.668719][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.678194][ T26] audit: type=1326 audit(49.600:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.3.97" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83a4ad28 code=0x7ffc0000 [ 49.700083][ T4353] device veth1_vlan entered promiscuous mode [ 49.721856][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.724789][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.727341][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.732078][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.737473][ T4353] device veth0_macvtap entered promiscuous mode [ 49.742753][ T4353] device veth1_macvtap entered promiscuous mode [ 49.765409][ T4353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.770068][ T4353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.772480][ T4353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.775261][ T4353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.777502][ T4409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'. [ 49.777659][ T4353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.783309][ T4353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.785889][ T4353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.791199][ T4353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.793586][ T4353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.797164][ T4353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.802214][ T4353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.806263][ T4353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.809665][ T4353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.812094][ T4353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.814486][ T4353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.816845][ T4353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.819605][ T4353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.821934][ T4353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.824621][ T4353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.827045][ T4353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.830152][ T4353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.833662][ T4353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.836113][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.838772][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.841272][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.845479][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.848201][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.850816][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.856425][ T4353] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.859510][ T4353] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.861822][ T4353] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.864024][ T4353] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.924477][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.926538][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.939344][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.959712][ T4196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.961871][ T4196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.975862][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.172518][ T4415] loop5: detected capacity change from 0 to 512 [ 50.203074][ T4413] loop3: detected capacity change from 0 to 40427 [ 50.219265][ T4418] loop4: detected capacity change from 0 to 256 [ 50.232063][ T4415] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.274345][ T1960] Bluetooth: hci0: command 0x0409 tx timeout [ 50.298391][ T4413] F2FS-fs (loop3): invalid crc value [ 50.328132][ T4413] F2FS-fs (loop3): Found nat_bits in checkpoint [ 50.358100][ T4413] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 50.612424][ T4439] tipc: Started in network mode [ 50.615030][ T4439] tipc: Node identity 56107fae9709, cluster identity 4711 [ 50.616943][ T4439] tipc: Enabled bearer , priority 0 [ 50.643623][ T4435] tipc: Resetting bearer [ 50.711329][ T4435] tipc: Disabling bearer [ 51.037209][ T4464] loop3: detected capacity change from 0 to 16 [ 51.134125][ T4464] erofs: (device loop3): mounted with root inode @ nid 36. [ 51.243250][ T4469] netlink: 96 bytes leftover after parsing attributes in process `syz.3.123'. [ 51.439517][ T4473] loop3: detected capacity change from 0 to 4096 [ 51.507186][ T4474] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 51.636960][ T4032] block nbd4: Receive control failed (result -32) [ 51.638071][ T4445] block nbd4: shutting down sockets [ 51.682048][ T4478] loop4: detected capacity change from 0 to 128 [ 51.763331][ T4480] loop3: detected capacity change from 0 to 4096 [ 51.879896][ T4483] netlink: 'syz.1.129': attribute type 4 has an invalid length. [ 51.990794][ T4490] udc-core: couldn't find an available UDC or it's busy [ 51.992862][ T4490] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 52.076925][ T4494] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 52.078741][ T4494] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 52.088676][ T4494] vhci_hcd vhci_hcd.0: Device attached [ 52.118984][ T4494] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 52.120741][ T4494] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 52.133072][ T4494] vhci_hcd vhci_hcd.0: Device attached [ 52.135285][ T4494] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.164317][ T4494] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(9) [ 52.166062][ T4494] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 52.168629][ T4494] vhci_hcd vhci_hcd.0: Device attached [ 52.190788][ T4494] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(11) [ 52.192505][ T4494] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 52.201038][ T4494] vhci_hcd vhci_hcd.0: Device attached [ 52.203546][ T4495] vhci_hcd: connection closed [ 52.205902][ T4505] vhci_hcd: connection closed [ 52.207933][ T4499] vhci_hcd: connection closed [ 52.209435][ T4501] vhci_hcd: connection closed [ 52.215698][ T4330] vhci_hcd: stop threads [ 52.218555][ T4330] vhci_hcd: release socket [ 52.220480][ T4330] vhci_hcd: disconnect device [ 52.226880][ T4330] vhci_hcd: stop threads [ 52.228373][ T4330] vhci_hcd: release socket [ 52.232145][ T4330] vhci_hcd: disconnect device [ 52.234673][ T4330] vhci_hcd: stop threads [ 52.235685][ T4330] vhci_hcd: release socket [ 52.237312][ T4330] vhci_hcd: disconnect device [ 52.239714][ T4330] vhci_hcd: stop threads [ 52.240804][ T4330] vhci_hcd: release socket [ 52.241948][ T4330] vhci_hcd: disconnect device [ 52.288281][ T4067] vhci_hcd: vhci_device speed not set [ 52.602679][ T4520] netlink: 104 bytes leftover after parsing attributes in process `syz.4.142'. [ 52.854137][ T4535] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input2 [ 52.856445][ T4538] process 'syz.4.150' launched './file1' with NULL argv: empty string added [ 52.960680][ T4545] loop5: detected capacity change from 0 to 256 [ 53.147360][ T4551] loop3: detected capacity change from 0 to 2048 [ 53.207602][ T4553] loop4: detected capacity change from 0 to 2048 [ 53.274987][ T4553] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 53.310843][ T4561] loop5: detected capacity change from 0 to 47 [ 53.318604][ T4551] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=ignore,nogrpid,usrjquota=,,errors=continue. Quota mode: none. [ 53.545826][ T4568] udc-core: couldn't find an available UDC or it's busy [ 53.548981][ T4568] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.554786][ T4574] udc-core: couldn't find an available UDC or it's busy [ 53.556581][ T4574] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.612946][ T4576] loop5: detected capacity change from 0 to 512 [ 53.692149][ T4576] EXT4-fs (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 53.694381][ T4576] EXT4-fs (loop5): Ignoring removed orlov option [ 53.696039][ T4576] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 54.034500][ T4069] Bluetooth: hci0: command 0x040f tx timeout [ 54.075726][ T26] audit: type=1326 audit(54.040:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4587 comm="syz.5.171" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8d2bd28 code=0x0 [ 54.160144][ T4596] kAFS: Can only specify source 'none' with -o dyn [ 54.251219][ T4602] IPv6: Can't replace route, no match found [ 54.317360][ T4603] loop3: detected capacity change from 0 to 1024 [ 54.369793][ T4604] tipc: Started in network mode [ 54.375554][ T4604] tipc: Node identity 2e11994e3197, cluster identity 4711 [ 54.381488][ T4604] tipc: Enabled bearer , priority 0 [ 54.418700][ T4599] tipc: Resetting bearer [ 54.462422][ T4603] hfsplus: catalog searching failed [ 54.507672][ T4599] tipc: Disabling bearer [ 54.663282][ T4030] [ 54.663842][ T4030] ===================================== [ 54.665039][ T4030] WARNING: bad unlock balance detected! [ 54.666446][ T4030] 5.15.178-syzkaller #0 Not tainted [ 54.667762][ T4030] ------------------------------------- [ 54.669142][ T4030] kworker/u5:3/4030 is trying to release lock (&chan->lock) at: [ 54.671064][ T4030] [] l2cap_recv_frame+0xf60/0x6c28 [ 54.672703][ T4030] but there are no more locks to release! [ 54.674181][ T4030] [ 54.674181][ T4030] other info that might help us debug this: [ 54.676176][ T4030] 2 locks held by kworker/u5:3/4030: [ 54.677508][ T4030] #0: ffff0000ca354138 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 54.680188][ T4030] #1: ffff80001fd07c00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 54.683096][ T4030] [ 54.683096][ T4030] stack backtrace: [ 54.684591][ T4030] CPU: 0 PID: 4030 Comm: kworker/u5:3 Not tainted 5.15.178-syzkaller #0 [ 54.686706][ T4030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.689318][ T4030] Workqueue: hci3 hci_rx_work [ 54.690607][ T4030] Call trace: [ 54.691469][ T4030] dump_backtrace+0x0/0x530 [ 54.692661][ T4030] show_stack+0x2c/0x3c [ 54.693722][ T4030] dump_stack_lvl+0x108/0x170 [ 54.694929][ T4030] dump_stack+0x1c/0x58 [ 54.696001][ T4030] print_unlock_imbalance_bug+0x250/0x2a4 [ 54.697464][ T4030] lock_release+0x4b8/0xa1c [ 54.698647][ T4030] __mutex_unlock_slowpath+0xe0/0x6d4 [ 54.700064][ T4030] mutex_unlock+0x8c/0xe0 [ 54.701196][ T4030] l2cap_recv_frame+0xf60/0x6c28 [ 54.702544][ T4030] l2cap_recv_acldata+0x4f4/0x163c [ 54.703907][ T4030] hci_rx_work+0x3a8/0x830 [ 54.705120][ T4030] process_one_work+0x790/0x11b8 [ 54.706394][ T4030] worker_thread+0x910/0x1034 [ 54.707589][ T4030] kthread+0x37c/0x45c [ 54.708682][ T4030] ret_from_fork+0x10/0x20 [ 54.744189][ T4622] udc-core: couldn't find an available UDC or it's busy [ 54.754156][ T4622] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.807237][ T4623] loop3: detected capacity change from 0 to 4096 [ 54.878041][ T4069] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 55.119915][ T4069] usb 1-1: Using ep0 maxpacket: 8 [ 55.268012][ T4069] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 55.270102][ T4069] usb 1-1: config 2 has no interface number 0 [ 55.271754][ T4069] usb 1-1: config 2 interface 31 has no altsetting 0 [ 55.478094][ T4069] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 55.480444][ T4069] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.482419][ T4069] usb 1-1: Product: syz [ 55.483468][ T4069] usb 1-1: Manufacturer: syz [ 55.484599][ T4069] usb 1-1: SerialNumber: syz [ 55.530371][ T4069] ch9200: probe of 1-1:2.31 failed with error -22 [ 55.738157][ T4615] udc-core: couldn't find an available UDC or it's busy [ 55.739864][ T4615] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 55.743478][ T4069] usb 1-1: USB disconnect, device number 2 [ 56.117998][ T4069] Bluetooth: hci0: command 0x0419 tx timeout