last executing test programs: 19.615978911s ago: executing program 2 (id=451): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r0, 0x2000, 0x0) 19.53332152s ago: executing program 2 (id=452): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xa) 18.779933283s ago: executing program 4 (id=453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r4, 0x400455c8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fdatasync(r6) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x5) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000200)=0xa) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000001000)="$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") gettid() 12.331507397s ago: executing program 3 (id=458): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 12.232643377s ago: executing program 3 (id=459): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) fsopen(0x0, 0x0) r5 = dup(0xffffffffffffffff) write$UHID_INPUT(r5, &(0x7f0000002080)={0x2, {"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", 0x1000}}, 0x1006) 10.296844058s ago: executing program 3 (id=462): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x8840) 10.261344301s ago: executing program 0 (id=463): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r0, 0x2000, 0x0) 10.145498333s ago: executing program 3 (id=464): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpgid(r2) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x1015e, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x4, 0x408001) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wlan0\x00', 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000400)}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3b00, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0}) 10.135442553s ago: executing program 0 (id=465): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0x4) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0xa4000061) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@ipv6_newaddrlabel={0x1c, 0x48, 0x1, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x1f, 0x0, 0x0, 0x2}}, 0x1c}}, 0x200440c7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r7, 0x2000, 0x0) copy_file_range(r1, &(0x7f0000000080)=0x3, r0, 0x0, 0xfffffffffffffff8, 0x0) 8.102872603s ago: executing program 0 (id=466): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xd00, 0x73, 0x11, 0x30}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x21) unshare(0x22020600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f00000001c0)=ANY=[], 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f00000019c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x722d3cbfb7952536, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x18, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @value=r4}, 0x94) 8.101750373s ago: executing program 1 (id=467): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',fscache']) 8.100890693s ago: executing program 2 (id=468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000007c0)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) recvmmsg(r3, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) 8.099812534s ago: executing program 3 (id=469): timerfd_create(0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/161, 0xa1}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000000740)=""/117, 0x75}, {&(0x7f0000000540)=""/32, 0x20}], 0x5}, 0x10000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) readv(r0, 0x0, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000080)={'syz0\x00', {}, 0x14, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xd, 0x0, 0x0, 0xe3e, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0xffffffff, 0x1, 0xa0d, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0xe, 0x0, 0x80000, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7ff, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4c6, 0x2, 0x0, 0x476f], [0x0, 0x7c, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe, 0x2, 0x0, 0x0, 0x9, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800], [0x2, 0x0, 0x6, 0x0, 0x0, 0x100, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x5, 0xfffffff8, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x80, 0x0, 0x7fe, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x4000, 0xfffffff8, 0x2, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000004480)={0x2020}, 0x2020) 7.72930352s ago: executing program 1 (id=470): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.969593345s ago: executing program 4 (id=471): syz_mount_image$hfsplus(&(0x7f0000000a40), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000000)=ANY=[], 0x1, 0x68b, &(0x7f0000000a80)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$getenv(0x4201, 0x0, 0x7f, &(0x7f0000000040)) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket(0x28, 0x5, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) 6.861961856s ago: executing program 2 (id=472): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000cc0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x8020000) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r3) ioprio_set$pid(0x2, r3, 0x4004) 6.774769834s ago: executing program 2 (id=473): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, 0x0) 6.761715715s ago: executing program 1 (id=474): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x8840) 6.583191353s ago: executing program 1 (id=475): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r0, 0x2000, 0x0) 6.015008629s ago: executing program 1 (id=476): syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) getgroups(0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) keyctl$setperm(0x5, 0x0, 0x3220120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x3b760b9, 0x0, 0x0, 0x0, 0x0) r6 = open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000959f25e1cac00bf0faa174cddc"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "c0c83bbcabb5200b", "868a834e6b632c0b48ca10490be0b7a7", "dfa524f0", "2226ee7ee2009ac9"}, 0x28) 5.270095912s ago: executing program 4 (id=477): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) 3.479703138s ago: executing program 2 (id=478): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x10000) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.32054909s ago: executing program 0 (id=479): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1eaa00000000000079101000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000280)=@req3={0x59, 0x249, 0x8, 0xffffffff, 0x27, 0x7, 0x9}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20}, {@in=@multicast2, 0x0, 0x32}, @in=@multicast1, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8, 0x80000, 0x81}, {0x3, 0x5, 0x1, 0x4000006}, {0x0, 0xfffffff9, 0x80020}, 0x0, 0x0, 0x2, 0x4, 0x81, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) 1.307690912s ago: executing program 1 (id=480): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) 1.306198222s ago: executing program 3 (id=481): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 1.300595752s ago: executing program 4 (id=482): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',fscache']) 1.061017876s ago: executing program 4 (id=483): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000cc0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x8020000) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r3) ioprio_set$pid(0x2, r3, 0x4004) 158.690535ms ago: executing program 4 (id=484): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 99.64317ms ago: executing program 0 (id=485): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x8840) 0s ago: executing program 0 (id=486): creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0x4) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0xa4000061) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@ipv6_newaddrlabel={0x1c, 0x48, 0x1, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x1f, 0x0, 0x0, 0x2}}, 0x1c}}, 0x200440c7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r5, 0x2000, 0x0) kernel console output (not intermixed with test programs): ] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.738808][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.757443][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.789655][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.816372][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.857010][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.865284][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.893431][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.920755][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.932171][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.942262][ T1227] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.949397][ T1227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.959587][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.968712][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.977872][ T1227] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.984959][ T1227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.005503][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.035367][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.045168][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.062104][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.076270][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.087930][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.095895][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.105359][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.114218][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.132716][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.141858][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.151403][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.161075][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.190289][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.210716][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.220084][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.229341][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.236640][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.244559][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.253476][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.262315][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.269491][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.279364][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.287816][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.296085][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.304544][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.313358][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.327484][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.335867][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.343827][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.354108][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.365203][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.386682][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.397129][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.406006][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.415657][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.424872][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.431995][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.440706][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.475303][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.486171][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.497480][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 64.497533][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.503539][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 64.512904][ T4254] Bluetooth: hci1: command 0x041b tx timeout [ 64.528999][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 64.529065][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.535055][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 64.557674][ T1227] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.564789][ T1227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.574650][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.584257][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.593152][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.602726][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.612043][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.621290][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.635464][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.656462][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.665606][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.674666][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.683243][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.692847][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.702194][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.724980][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.740745][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.749580][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.759520][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.775589][ T4182] device veth0_vlan entered promiscuous mode [ 64.795296][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.806303][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.826439][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.835280][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.844831][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.854219][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.864019][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.872830][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.882909][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.891801][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.901719][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.910543][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.919142][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.937612][ T4182] device veth1_vlan entered promiscuous mode [ 64.964617][ T4183] device veth0_vlan entered promiscuous mode [ 64.981496][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.993449][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.005165][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.015939][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.024526][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.032497][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.043193][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.054625][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.077238][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.086306][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.105454][ T4183] device veth1_vlan entered promiscuous mode [ 65.116276][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.218753][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.229171][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.251106][ T4182] device veth0_macvtap entered promiscuous mode [ 65.262004][ T4182] device veth1_macvtap entered promiscuous mode [ 65.275662][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.284954][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.293914][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.303093][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.312233][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.322404][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.343079][ T4188] device veth0_vlan entered promiscuous mode [ 65.358967][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.366465][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.374241][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.383608][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.392578][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.400282][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.407906][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.415712][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.438279][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.446063][ T4183] device veth0_macvtap entered promiscuous mode [ 65.456854][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.471215][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.480524][ T4183] device veth1_macvtap entered promiscuous mode [ 65.497307][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.506060][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.516033][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.525572][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.536323][ T4188] device veth1_vlan entered promiscuous mode [ 65.554827][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.571803][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.582689][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.591432][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.605782][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.649349][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.661650][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.673872][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.685173][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.695573][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.706262][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.715269][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.726832][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.735786][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.745821][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.754873][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.776326][ T4190] device veth0_vlan entered promiscuous mode [ 65.785802][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.805345][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.818334][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.846333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.855869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.867330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.876075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.885010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.896144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.905338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.913564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.931095][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.941107][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.951400][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.961111][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.979076][ T4190] device veth1_vlan entered promiscuous mode [ 65.986558][ T4188] device veth0_macvtap entered promiscuous mode [ 66.013886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.022908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.033554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.042532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.056283][ T4188] device veth1_macvtap entered promiscuous mode [ 66.152011][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.162996][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.173103][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.184832][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.198516][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.205940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.214506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.223724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.233223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.246078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.254468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.265775][ T4194] device veth0_vlan entered promiscuous mode [ 66.288706][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.301965][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.312161][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.325682][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.336868][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.348741][ T4190] device veth0_macvtap entered promiscuous mode [ 66.355988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.364818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.373890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.382651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.396605][ T4194] device veth1_vlan entered promiscuous mode [ 66.412104][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.422549][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.431680][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.440569][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.453567][ T4190] device veth1_macvtap entered promiscuous mode [ 66.464979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.473132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.481621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.498622][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.510683][ T305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.512845][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.521004][ T305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.535829][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.544091][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.552697][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.581301][ T4254] Bluetooth: hci0: command 0x040f tx timeout [ 66.594670][ T4254] Bluetooth: hci4: command 0x040f tx timeout [ 66.603382][ T4254] Bluetooth: hci2: command 0x040f tx timeout [ 66.610231][ T4254] Bluetooth: hci1: command 0x040f tx timeout [ 66.616377][ T4254] Bluetooth: hci3: command 0x040f tx timeout [ 66.632137][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.645039][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.657336][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.668728][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.676147][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.686730][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.696639][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.707321][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.718819][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.744861][ T305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.752985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.761936][ T305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.764810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.780316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.789342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.799918][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.810486][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.821229][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.831705][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.841652][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.852306][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.863358][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.892875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.911658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.927524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.936269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.947658][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.956391][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.965422][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.974646][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.035682][ T4194] device veth0_macvtap entered promiscuous mode [ 67.078962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.115857][ T4194] device veth1_macvtap entered promiscuous mode [ 67.122603][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.162718][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.221974][ T4296] loop1: detected capacity change from 0 to 16 [ 67.232258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.238619][ T305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.246057][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.261997][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.275471][ T305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.287406][ T4296] erofs: (device loop1): mounted with root inode @ nid 36. [ 67.303127][ T4198] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 67.327766][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.328412][ T4296] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 67.360155][ T26] audit: type=1800 audit(1761094447.073:2): pid=4296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 67.394040][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.404640][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.416087][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.426248][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.436793][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.450758][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.471255][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.491518][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.509733][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.532050][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.602851][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.648535][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.667215][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.682970][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.695989][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.707215][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.718069][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.743440][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.803628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.819501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.868147][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.896954][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.919457][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.921755][ T4309] loop2: detected capacity change from 0 to 2048 [ 67.932248][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.992923][ T305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.010656][ T4176] loop2: p1 < > p4 [ 68.020198][ T305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.026506][ T4176] loop2: p4 start 42180 is beyond EOD, truncated [ 68.084320][ T4309] loop2: p1 < > p4 [ 68.103974][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.118292][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.127424][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.128656][ T4309] loop2: p4 start 42180 is beyond EOD, [ 68.141895][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.204458][ T4309] truncated [ 68.221067][ T4323] loop1: detected capacity change from 0 to 16 [ 68.268819][ T4324] loop3: detected capacity change from 0 to 1024 [ 68.279854][ T4323] erofs: (device loop1): mounted with root inode @ nid 36. [ 68.391024][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 68.433958][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.466036][ T4324] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 68.480517][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 68.482750][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.517976][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.556579][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.577692][ T4324] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 68.587548][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.615122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.623746][ T4334] loop0: detected capacity change from 0 to 1024 [ 68.635350][ T4324] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.15: Failed to acquire dquot type 0 [ 68.667202][ T4240] Bluetooth: hci3: command 0x0419 tx timeout [ 68.685449][ T4240] Bluetooth: hci1: command 0x0419 tx timeout [ 68.704372][ T4334] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 68.726643][ T4324] EXT4-fs (loop3): 1 truncate cleaned up [ 68.737181][ T4240] Bluetooth: hci2: command 0x0419 tx timeout [ 68.745671][ T4240] Bluetooth: hci4: command 0x0419 tx timeout [ 68.755780][ T4324] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.790325][ T4240] Bluetooth: hci0: command 0x0419 tx timeout [ 68.893348][ T4320] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 68.918088][ T4320] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 68.951130][ T4320] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.15: Failed to acquire dquot type 0 [ 68.996391][ T4348] loop1: detected capacity change from 0 to 136 [ 69.083433][ T4350] loop4: detected capacity change from 0 to 8 [ 69.297666][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.297895][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.306721][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.315639][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.327906][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 69.333277][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 69.342313][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 69.351151][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 69.360126][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 69.368995][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 69.377975][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.321669][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.329349][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.606649][ T4361] loop1: detected capacity change from 0 to 16 [ 71.659493][ T4361] erofs: (device loop1): mounted with root inode @ nid 36. [ 72.351986][ T4378] loop0: detected capacity change from 0 to 2048 [ 72.402837][ T4381] loop3: detected capacity change from 0 to 1024 [ 72.469314][ T4381] ======================================================= [ 72.469314][ T4381] WARNING: The mand mount option has been deprecated and [ 72.469314][ T4381] and is ignored by this kernel. Remove the mand [ 72.469314][ T4381] option from the mount to silence this warning. [ 72.469314][ T4381] ======================================================= [ 72.577607][ T4391] syz.2.35 uses obsolete (PF_INET,SOCK_PACKET) [ 72.593450][ T4378] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000,. Quota mode: none. [ 72.649746][ T4381] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.718082][ T4378] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.748055][ T4397] netlink: 'syz.2.37': attribute type 12 has an invalid length. [ 72.802256][ T4395] loop4: detected capacity change from 0 to 16 [ 72.822359][ T4378] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.24: bg 0: block 345: padding at end of block bitmap is not set [ 72.907070][ T4378] EXT4-fs (loop0): Remounting filesystem read-only [ 72.925150][ T4378] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 72.952738][ T4395] erofs: (device loop4): mounted with root inode @ nid 36. [ 72.970920][ T4399] process 'syz.2.37' launched './cgroup.cpu/cgroup.procs' with NULL argv: empty string added [ 73.017463][ T4378] EXT4-fs (loop0): Remounting filesystem read-only [ 73.087222][ T1110] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.185370][ T4402] loop4: detected capacity change from 0 to 16 [ 73.230672][ T4402] erofs: (device loop4): mounted with root inode @ nid 36. [ 73.517258][ T1110] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 73.536182][ T1110] usb 4-1: config 0 has no interface number 0 [ 73.550575][ T1110] usb 4-1: config 0 interface 130 altsetting 0 endpoint 0x5 has invalid maxpacket 1007, setting to 64 [ 73.563194][ T1110] usb 4-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=c7.5f [ 73.574983][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.621712][ T1110] usb 4-1: config 0 descriptor?? [ 73.680707][ T1110] keyspan 4-1:0.130: Keyspan 1 port adapter converter detected [ 73.702639][ T1110] keyspan 4-1:0.130: found no endpoint descriptor for endpoint 87 [ 73.718713][ T1110] keyspan 4-1:0.130: found no endpoint descriptor for endpoint 7 [ 73.741053][ T1110] keyspan 4-1:0.130: found no endpoint descriptor for endpoint 81 [ 73.749697][ T4412] loop4: detected capacity change from 0 to 512 [ 73.755702][ T1110] keyspan 4-1:0.130: found no endpoint descriptor for endpoint 1 [ 73.764944][ T1110] keyspan 4-1:0.130: unsupported endpoint type 0 [ 73.779260][ T1110] keyspan 4-1:0.130: found no endpoint descriptor for endpoint 85 [ 73.779997][ T4412] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.804454][ T1110] keyspan 4-1:0.130: unsupported endpoint type 0 [ 73.829527][ T1110] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 73.870520][ T4412] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.935525][ T4412] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.953604][ T4412] EXT4-fs (loop4): 1 truncate cleaned up [ 73.959888][ T4412] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x000000000000e613,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 74.705740][ T4381] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.32: Allocating blocks 497-513 which overlap fs metadata [ 74.712959][ T4417] loop2: detected capacity change from 0 to 512 [ 74.764932][ T4381] EXT4-fs (loop3): pa ffff888073d73b60: logic 256, phys. 385, len 8 [ 74.773380][ T4381] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 74.820121][ T1110] usb 4-1: USB disconnect, device number 2 [ 74.852742][ T4417] EXT4-fs (loop2): orphan cleanup on readonly fs [ 74.871751][ T1110] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 74.916215][ T1110] keyspan 4-1:0.130: device disconnected [ 74.979265][ T4417] EXT4-fs error (device loop2): ext4_find_extent:929: inode #4: comm syz.2.44: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 75.053353][ T4417] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 75.069374][ T4417] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 75.088926][ T4424] loop0: detected capacity change from 0 to 1024 [ 75.112852][ T4417] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 75.119816][ T4417] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.189559][ T4415] hfsplus: b-tree write err: -5, ino 4 [ 75.802597][ T4430] loop0: detected capacity change from 0 to 16 [ 75.848296][ T4430] erofs: (device loop0): mounted with root inode @ nid 36. [ 75.998448][ T4198] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 76.024493][ T4430] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 76.106978][ T26] audit: type=1800 audit(1761094455.763:3): pid=4430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.50" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 76.272197][ T4430] syz.0.50 (4430) used greatest stack depth: 20352 bytes left [ 76.542762][ T4441] loop3: detected capacity change from 0 to 16 [ 76.550441][ T4439] loop0: detected capacity change from 0 to 128 [ 76.564022][ T4443] rtc_cmos 00:00: Alarms can be up to one day in the future [ 76.598042][ T4437] loop4: detected capacity change from 0 to 1024 [ 76.611319][ T4439] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 76.664449][ T4441] erofs: (device loop3): mounted with root inode @ nid 36. [ 76.724053][ T4437] hfsplus: extend alloc file! (8192,8,110) [ 76.767435][ T4437] hfsplus: b-tree write err: -5, ino 4 [ 77.019244][ T4448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.57'. [ 77.022464][ T4446] loop2: detected capacity change from 0 to 2048 [ 77.042368][ T4450] netlink: 'syz.0.55': attribute type 12 has an invalid length. [ 77.164345][ T4454] binder: Bad value for 'stats' [ 77.231079][ T4446] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.310727][ T4446] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.404492][ T26] audit: type=1800 audit(1761094457.113:4): pid=4446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.56" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 78.748076][ T4475] loop2: detected capacity change from 0 to 2048 [ 79.477242][ T4475] EXT4-fs (loop2): Ignoring removed bh option [ 79.602289][ T4475] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 79.684544][ T4482] loop4: detected capacity change from 0 to 1024 [ 79.763323][ T4482] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 79.799597][ T4482] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 79.820463][ T4482] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.66: Failed to acquire dquot type 0 [ 79.880676][ T305] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 79.927195][ T4482] EXT4-fs (loop4): 1 truncate cleaned up [ 79.931183][ T305] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 728 with error 28 [ 79.933168][ T4482] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.946674][ T305] EXT4-fs (loop2): This should not happen!! Data will be lost [ 79.946674][ T305] [ 79.979557][ T305] EXT4-fs (loop2): Total free blocks count 0 [ 79.985616][ T305] EXT4-fs (loop2): Free/Dirty block details [ 80.007002][ T305] EXT4-fs (loop2): free_blocks=2415919104 [ 80.012918][ T305] EXT4-fs (loop2): dirty_blocks=736 [ 80.036333][ T305] EXT4-fs (loop2): Block reservation details [ 80.046175][ T305] EXT4-fs (loop2): i_reserved_data_blocks=46 [ 80.063832][ T4482] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 80.123065][ T4482] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 80.144986][ T4482] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.66: Failed to acquire dquot type 0 [ 80.311826][ T4505] netlink: 48 bytes leftover after parsing attributes in process `syz.0.74'. [ 80.397010][ T1110] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.575315][ T4518] netlink: 'syz.3.80': attribute type 12 has an invalid length. [ 81.397102][ T1110] usb 2-1: Using ep0 maxpacket: 16 [ 81.837130][ T1110] usb 2-1: New USB device found, idVendor=0bda, idProduct=f179, bcdDevice=cf.df [ 82.830242][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.838661][ T1110] usb 2-1: Product: syz [ 82.843277][ T1110] usb 2-1: Manufacturer: syz [ 82.848152][ T1110] usb 2-1: SerialNumber: syz [ 82.854646][ T1110] usb 2-1: config 0 descriptor?? [ 83.200405][ T4551] loop0: detected capacity change from 0 to 1024 [ 83.249058][ T4232] usb 2-1: USB disconnect, device number 2 [ 84.121653][ T4563] loop3: detected capacity change from 0 to 16 [ 84.665688][ T4563] erofs: (device loop3): mounted with root inode @ nid 36. [ 84.668710][ T4566] loop1: detected capacity change from 0 to 128 [ 84.688355][ T4562] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 84.699225][ T4562] attempt to access beyond end of device [ 84.699225][ T4562] loop3: rw=524288, want=34359740336, limit=16 [ 84.722245][ T4564] loop4: detected capacity change from 0 to 512 [ 84.782625][ T4551] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 84.834395][ T4566] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 84.864580][ T4564] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.946714][ T4551] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 85.007195][ T4551] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.87: Failed to acquire dquot type 0 [ 85.033935][ T4551] EXT4-fs (loop0): 1 truncate cleaned up [ 85.104113][ T4551] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.116776][ T4564] EXT4-fs (loop4): 1 truncate cleaned up [ 85.162692][ T4564] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 85.223930][ T4545] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 85.261067][ T4545] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 85.304711][ T4548] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #12: comm syz.4.89: corrupted in-inode xattr [ 85.337113][ T4545] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.87: Failed to acquire dquot type 0 [ 85.409742][ T4575] loop3: detected capacity change from 0 to 1024 [ 86.412448][ T4585] loop1: detected capacity change from 0 to 1024 [ 86.608213][ T4585] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.667328][ T1110] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.314132][ T1107] cfg80211: failed to load regulatory.db [ 87.344259][ T4592] loop0: detected capacity change from 0 to 128 [ 87.487127][ T1110] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 87.496383][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.506717][ T1110] usb 4-1: config 0 descriptor?? [ 87.550869][ T4592] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 87.568535][ T4592] UDF-fs: warning (device loop0): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 88.816108][ T1110] pegasus: probe of 4-1:0.0 failed with error -71 [ 88.845721][ T1110] usb 4-1: USB disconnect, device number 3 [ 88.998907][ T4609] binder: 4606:4609 ioctl 4018620d 0 returned -22 [ 89.195187][ T4613] loop1: detected capacity change from 0 to 764 [ 89.240774][ T4615] loop2: detected capacity change from 0 to 512 [ 89.284832][ T4613] Symlink component flag not implemented [ 89.304225][ T4613] Symlink component flag not implemented (116) [ 89.314099][ T4615] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.410075][ T4615] EXT4-fs (loop2): 1 truncate cleaned up [ 89.415797][ T4615] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 89.422020][ T4619] loop3: detected capacity change from 0 to 128 [ 89.427561][ T1107] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.514876][ T4619] vfat filesystem being mounted at /22/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 89.987088][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.008257][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.431311][ T4629] tipc: Started in network mode [ 90.440873][ T1107] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.455495][ T4629] tipc: Node identity ac14140f, cluster identity 4711 [ 90.462901][ T1107] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.472919][ T4629] tipc: New replicast peer: 255.255.255.255 [ 90.479023][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.496086][ T1107] usb 1-1: config 0 descriptor?? [ 90.514931][ T4629] tipc: Enabled bearer , priority 10 [ 90.787734][ T4644] binder: BINDER_SET_CONTEXT_MGR already set [ 90.810515][ T4644] binder: 4643:4644 ioctl 4018620d 200000004a80 returned -16 [ 90.996719][ T1107] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 91.015720][ T4641] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.043032][ T1107] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 91.631217][ T1107] tipc: Node number set to 2886997007 [ 91.683800][ T4659] loop3: detected capacity change from 0 to 764 [ 91.776803][ T4659] Symlink component flag not implemented [ 91.848108][ T4659] Symlink component flag not implemented (116) [ 93.026039][ T4679] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.066172][ T4679] overlayfs: overlapping lowerdir path [ 94.946702][ T4688] device syzkaller0 entered promiscuous mode [ 95.009555][ T4691] binder: BINDER_SET_CONTEXT_MGR already set [ 95.064288][ T4691] binder: 4689:4691 ioctl 4018620d 200000004a80 returned -16 [ 95.176877][ C0] sched: RT throttling activated [ 95.205274][ T4247] usb 1-1: USB disconnect, device number 2 [ 97.447665][ T4707] loop2: detected capacity change from 0 to 24 [ 97.499314][ T4707] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 97.516622][ T4707] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 98.408630][ T4716] loop1: detected capacity change from 0 to 2048 [ 99.041565][ T4716] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 99.060712][ T4716] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.148513][ T4730] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.182930][ T4730] overlayfs: overlapping lowerdir path [ 104.345713][ T4761] loop0: detected capacity change from 0 to 1024 [ 104.397520][ T4760] tipc: Started in network mode [ 104.402451][ T4760] tipc: Node identity ac14140f, cluster identity 4711 [ 104.414072][ T4766] loop3: detected capacity change from 0 to 256 [ 104.438674][ T4760] tipc: New replicast peer: 255.255.255.255 [ 104.452125][ T4760] tipc: Enabled bearer , priority 10 [ 104.499025][ T4766] exfat: Deprecated parameter 'utf8' [ 104.504418][ T4766] exfat: Deprecated parameter 'namecase' [ 104.514884][ T4768] loop2: detected capacity change from 0 to 128 [ 104.557153][ T4766] exfat: Deprecated parameter 'namecase' [ 104.562873][ T4766] exfat: Deprecated parameter 'utf8' [ 104.624281][ T4766] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 104.658249][ T4768] vfat filesystem being mounted at /26/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 104.713025][ T4766] exfat filesystem being mounted at /39/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 104.838287][ T4768] attempt to access beyond end of device [ 104.838287][ T4768] loop2: rw=2049, want=234, limit=128 [ 104.859908][ T4772] loop1: detected capacity change from 0 to 2048 [ 105.576996][ T4262] tipc: Node number set to 2886997007 [ 105.719221][ T4772] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.739664][ T4768] attempt to access beyond end of device [ 105.739664][ T4768] loop2: rw=2049, want=577, limit=128 [ 105.932960][ T4768] attempt to access beyond end of device [ 105.932960][ T4768] loop2: rw=524288, want=497, limit=128 [ 105.953508][ T4768] attempt to access beyond end of device [ 105.953508][ T4768] loop2: rw=0, want=249, limit=128 [ 106.088773][ T4768] attempt to access beyond end of device [ 106.088773][ T4768] loop2: rw=0, want=249, limit=128 [ 106.138560][ T4773] attempt to access beyond end of device [ 106.138560][ T4773] loop2: rw=0, want=242, limit=128 [ 106.181263][ T4767] attempt to access beyond end of device [ 106.181263][ T4767] loop2: rw=0, want=242, limit=128 [ 106.932976][ T4767] Buffer I/O error on dev loop2, logical block 241, async page read [ 106.944143][ T4767] attempt to access beyond end of device [ 106.944143][ T4767] loop2: rw=0, want=243, limit=128 [ 106.968136][ T4767] Buffer I/O error on dev loop2, logical block 242, async page read [ 106.976220][ T4767] attempt to access beyond end of device [ 106.976220][ T4767] loop2: rw=0, want=244, limit=128 [ 107.061361][ T4790] binder: 4789:4790 ioctl c0306201 0 returned -14 [ 107.068210][ T4767] Buffer I/O error on dev loop2, logical block 243, async page read [ 107.088362][ T4767] attempt to access beyond end of device [ 107.088362][ T4767] loop2: rw=0, want=245, limit=128 [ 107.116588][ T4790] binder: BINDER_SET_CONTEXT_MGR already set [ 107.165778][ T4767] Buffer I/O error on dev loop2, logical block 244, async page read [ 107.217882][ T4790] binder: 4789:4790 ioctl 4018620d 200000004a80 returned -16 [ 107.226596][ T4767] Buffer I/O error on dev loop2, logical block 245, async page read [ 107.306191][ T4767] Buffer I/O error on dev loop2, logical block 246, async page read [ 107.339454][ T4767] Buffer I/O error on dev loop2, logical block 247, async page read [ 107.377307][ T4767] Buffer I/O error on dev loop2, logical block 248, async page read [ 107.385469][ T4768] Buffer I/O error on dev loop2, logical block 241, async page read [ 107.477152][ T4768] Buffer I/O error on dev loop2, logical block 242, async page read [ 109.675373][ T144] Bluetooth: hci5: Frame reassembly failed (-90) [ 109.776613][ T4824] device syzkaller0 entered promiscuous mode [ 110.031295][ T4827] tipc: Started in network mode [ 110.036236][ T4827] tipc: Node identity ac14140f, cluster identity 4711 [ 110.067132][ T4827] tipc: New replicast peer: 255.255.255.255 [ 110.073679][ T4827] tipc: Enabled bearer , priority 10 [ 110.458756][ T4835] xt_socket: unknown flags 0x50 [ 111.281729][ T4837] loop1: detected capacity change from 0 to 256 [ 111.295092][ T4240] tipc: Node number set to 2886997007 [ 111.348384][ T4837] exfat: Deprecated parameter 'utf8' [ 111.378367][ T4839] binder: 4838:4839 ioctl c0306201 0 returned -14 [ 111.397199][ T4837] exfat: Deprecated parameter 'namecase' [ 111.402966][ T4837] exfat: Deprecated parameter 'namecase' [ 111.417041][ T4837] exfat: Deprecated parameter 'utf8' [ 111.457633][ T4837] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 111.554415][ T4837] exfat filesystem being mounted at /32/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 111.815726][ T4290] Bluetooth: hci5: command 0x1003 tx timeout [ 111.828209][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 112.216798][ T4846] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 113.264943][ T4852] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.297114][ T4852] overlayfs: overlapping lowerdir path [ 114.030894][ T1107] Bluetooth: hci5: command 0x1001 tx timeout [ 114.037166][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 114.171104][ T4854] binder: BINDER_SET_CONTEXT_MGR already set [ 114.187107][ T4854] binder: 4853:4854 ioctl 4018620d 200000000040 returned -16 [ 115.594989][ T4863] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 116.288849][ T4262] Bluetooth: hci5: command 0x1009 tx timeout [ 116.456559][ T4869] loop0: detected capacity change from 0 to 2048 [ 116.501602][ T4870] loop3: detected capacity change from 0 to 128 [ 116.524204][ T4869] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.652654][ T4870] vfat filesystem being mounted at /49/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 116.828811][ T4866] handle_bad_sector: 12 callbacks suppressed [ 116.828835][ T4866] attempt to access beyond end of device [ 116.828835][ T4866] loop3: rw=2049, want=234, limit=128 [ 117.768468][ T4870] attempt to access beyond end of device [ 117.768468][ T4870] loop3: rw=2049, want=1009, limit=128 [ 117.893310][ T4878] binder: 4876:4878 ioctl c0306201 0 returned -14 [ 117.938677][ T4877] binder: BINDER_SET_CONTEXT_MGR already set [ 117.944723][ T4877] binder: 4876:4877 ioctl 4018620d 200000000100 returned -16 [ 117.964411][ T4866] attempt to access beyond end of device [ 117.964411][ T4866] loop3: rw=524288, want=497, limit=128 [ 117.985925][ T4866] attempt to access beyond end of device [ 117.985925][ T4866] loop3: rw=0, want=249, limit=128 [ 118.010760][ T4866] attempt to access beyond end of device [ 118.010760][ T4866] loop3: rw=0, want=249, limit=128 [ 118.024404][ T4870] attempt to access beyond end of device [ 118.024404][ T4870] loop3: rw=0, want=242, limit=128 [ 118.036104][ T4866] attempt to access beyond end of device [ 118.036104][ T4866] loop3: rw=0, want=242, limit=128 [ 118.064067][ T4866] buffer_io_error: 6 callbacks suppressed [ 118.064084][ T4866] Buffer I/O error on dev loop3, logical block 241, async page read [ 118.082875][ T4866] attempt to access beyond end of device [ 118.082875][ T4866] loop3: rw=0, want=243, limit=128 [ 118.098284][ T4866] Buffer I/O error on dev loop3, logical block 242, async page read [ 118.184925][ T4866] attempt to access beyond end of device [ 118.184925][ T4866] loop3: rw=0, want=244, limit=128 [ 118.233354][ T4866] Buffer I/O error on dev loop3, logical block 243, async page read [ 118.260372][ T4866] attempt to access beyond end of device [ 118.260372][ T4866] loop3: rw=0, want=245, limit=128 [ 118.308134][ T4866] Buffer I/O error on dev loop3, logical block 244, async page read [ 118.316236][ T4866] Buffer I/O error on dev loop3, logical block 245, async page read [ 118.324408][ T4866] Buffer I/O error on dev loop3, logical block 246, async page read [ 118.332511][ T4866] Buffer I/O error on dev loop3, logical block 247, async page read [ 118.341382][ T4866] Buffer I/O error on dev loop3, logical block 248, async page read [ 118.355296][ T4865] Buffer I/O error on dev loop3, logical block 241, async page read [ 118.533219][ T4865] Buffer I/O error on dev loop3, logical block 242, async page read [ 119.444344][ T4896] loop0: detected capacity change from 0 to 128 [ 119.494622][ T4896] vfat filesystem being mounted at /39/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 119.894029][ T4902] device syzkaller0 entered promiscuous mode [ 120.205885][ T4907] loop3: detected capacity change from 0 to 256 [ 120.224845][ T4907] exfat: Deprecated parameter 'utf8' [ 120.263621][ T4907] exfat: Deprecated parameter 'namecase' [ 120.270831][ T4908] loop2: detected capacity change from 0 to 2048 [ 120.277063][ T4907] exfat: Deprecated parameter 'namecase' [ 120.323042][ T4907] exfat: Deprecated parameter 'utf8' [ 120.327077][ T4908] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.395558][ T4907] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 120.457388][ T4907] exfat filesystem being mounted at /51/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 120.835965][ T4913] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 123.951259][ T4942] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.979483][ T4942] overlayfs: overlapping lowerdir path [ 124.973478][ T4945] device syzkaller0 entered promiscuous mode [ 125.012677][ T4947] loop1: detected capacity change from 0 to 128 [ 125.103551][ T4947] vfat filesystem being mounted at /36/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 125.202914][ T4947] handle_bad_sector: 7159 callbacks suppressed [ 125.202935][ T4947] attempt to access beyond end of device [ 125.202935][ T4947] loop1: rw=2049, want=234, limit=128 [ 125.333375][ T4949] loop2: detected capacity change from 0 to 2048 [ 125.373481][ T4947] attempt to access beyond end of device [ 125.373481][ T4947] loop1: rw=2049, want=1041, limit=128 [ 125.416518][ T4949] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.488897][ T4947] attempt to access beyond end of device [ 125.488897][ T4947] loop1: rw=524288, want=497, limit=128 [ 125.543479][ T4950] attempt to access beyond end of device [ 125.543479][ T4950] loop1: rw=0, want=242, limit=128 [ 125.585717][ T4947] attempt to access beyond end of device [ 125.585717][ T4947] loop1: rw=0, want=242, limit=128 [ 125.622588][ T4947] buffer_io_error: 6910 callbacks suppressed [ 125.622607][ T4947] Buffer I/O error on dev loop1, logical block 241, async page read [ 125.655168][ T4947] attempt to access beyond end of device [ 125.655168][ T4947] loop1: rw=0, want=243, limit=128 [ 125.725491][ T4947] Buffer I/O error on dev loop1, logical block 242, async page read [ 125.768607][ T4947] attempt to access beyond end of device [ 125.768607][ T4947] loop1: rw=0, want=244, limit=128 [ 125.788253][ T4947] Buffer I/O error on dev loop1, logical block 243, async page read [ 125.796480][ T4947] attempt to access beyond end of device [ 125.796480][ T4947] loop1: rw=0, want=245, limit=128 [ 125.807299][ T4947] Buffer I/O error on dev loop1, logical block 244, async page read [ 125.830360][ T4947] attempt to access beyond end of device [ 125.830360][ T4947] loop1: rw=0, want=246, limit=128 [ 126.049254][ T4956] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 126.326790][ T4947] Buffer I/O error on dev loop1, logical block 245, async page read [ 126.943734][ T4233] Bluetooth: hci5: command 0x1003 tx timeout [ 126.962222][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 127.060357][ T4947] attempt to access beyond end of device [ 127.060357][ T4947] loop1: rw=0, want=247, limit=128 [ 127.072366][ T4947] Buffer I/O error on dev loop1, logical block 246, async page read [ 127.081310][ T4947] Buffer I/O error on dev loop1, logical block 247, async page read [ 127.105046][ T4947] Buffer I/O error on dev loop1, logical block 248, async page read [ 127.125960][ T4946] Buffer I/O error on dev loop1, logical block 241, async page read [ 127.150139][ T4946] Buffer I/O error on dev loop1, logical block 242, async page read [ 127.361485][ T4960] loop0: detected capacity change from 0 to 128 [ 127.466918][ T4960] vfat filesystem being mounted at /42/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 127.665163][ T4963] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 127.835551][ T4969] loop3: detected capacity change from 0 to 24 [ 127.890703][ T4969] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 127.906955][ T4969] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 128.743811][ T4975] loop1: detected capacity change from 0 to 512 [ 128.963581][ T4975] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.987202][ T4233] Bluetooth: hci5: command 0x1001 tx timeout [ 128.993318][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 129.479162][ T4975] EXT4-fs (loop1): 1 truncate cleaned up [ 129.531916][ T4975] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 130.093730][ T4987] loop2: detected capacity change from 0 to 256 [ 130.178527][ T4987] exfat: Deprecated parameter 'utf8' [ 130.259451][ T4987] exfat: Deprecated parameter 'namecase' [ 130.698080][ T4987] exfat: Deprecated parameter 'namecase' [ 130.703801][ T4987] exfat: Deprecated parameter 'utf8' [ 130.725944][ T4987] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 130.956777][ T4996] Bluetooth: hci6: Frame reassembly failed (-90) [ 130.987008][ T4996] loop0: detected capacity change from 0 to 256 [ 131.043226][ T4987] exfat filesystem being mounted at /39/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 131.125508][ T9] Bluetooth: hci6: Frame reassembly failed (-84) [ 131.224386][ T9] Bluetooth: hci6: Frame reassembly failed (-84) [ 131.433700][ T4262] Bluetooth: hci5: command 0x1009 tx timeout [ 134.057076][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.063428][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.076042][ T4232] Bluetooth: hci6: command 0x1003 tx timeout [ 134.082866][ T5006] Bluetooth: hci7: Frame reassembly failed (-90) [ 134.093764][ T5006] loop3: detected capacity change from 0 to 256 [ 134.107740][ T4192] Bluetooth: hci6: sending frame failed (-49) [ 134.129045][ T144] Bluetooth: hci7: Frame reassembly failed (-84) [ 135.980422][ T5010] Bluetooth: hci8: Frame reassembly failed (-90) [ 136.039232][ T4360] Bluetooth: hci8: Frame reassembly failed (-84) [ 136.138039][ T4259] Bluetooth: hci7: command 0x1003 tx timeout [ 136.144264][ T4198] Bluetooth: hci7: sending frame failed (-49) [ 136.176999][ T1107] Bluetooth: hci6: command 0x1001 tx timeout [ 136.183144][ T4198] Bluetooth: hci6: sending frame failed (-49) [ 136.594535][ T5021] Bluetooth: hci5: Frame reassembly failed (-90) [ 136.625736][ T5021] loop4: detected capacity change from 0 to 256 [ 136.748363][ T4805] Bluetooth: hci5: Frame reassembly failed (-84) [ 137.190482][ T5022] binder: BINDER_SET_CONTEXT_MGR already set [ 137.196518][ T5022] binder: 5020:5022 ioctl 4018620d 200000004a80 returned -16 [ 138.017167][ T13] Bluetooth: hci8: command 0x1003 tx timeout [ 138.024076][ T146] Bluetooth: hci8: sending frame failed (-49) [ 138.177582][ T13] Bluetooth: hci7: command 0x1001 tx timeout [ 138.184708][ T146] Bluetooth: hci7: sending frame failed (-49) [ 138.257204][ T13] Bluetooth: hci6: command 0x1009 tx timeout [ 138.737060][ T4232] Bluetooth: hci5: command 0x1003 tx timeout [ 138.744566][ T146] Bluetooth: hci5: sending frame failed (-49) [ 140.097140][ T4259] Bluetooth: hci8: command 0x1001 tx timeout [ 140.103795][ T146] Bluetooth: hci8: sending frame failed (-49) [ 140.257401][ T4232] Bluetooth: hci7: command 0x1009 tx timeout [ 140.817096][ T4232] Bluetooth: hci5: command 0x1001 tx timeout [ 140.824197][ T146] Bluetooth: hci5: sending frame failed (-49) [ 141.222976][ T5026] xt_socket: unknown flags 0x50 [ 142.177054][ T4232] Bluetooth: hci8: command 0x1009 tx timeout [ 142.434940][ T5042] loop0: detected capacity change from 0 to 24 [ 142.487442][ T5042] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 142.502118][ T5042] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 142.897010][ T23] Bluetooth: hci5: command 0x1009 tx timeout [ 143.647554][ T5048] Bluetooth: hci6: Frame reassembly failed (-90) [ 143.680651][ T5048] loop2: detected capacity change from 0 to 256 [ 143.748185][ T4805] Bluetooth: hci6: Frame reassembly failed (-84) [ 143.845504][ T5047] loop0: detected capacity change from 0 to 512 [ 144.231339][ T5047] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 144.415121][ T5047] EXT4-fs (loop0): 1 truncate cleaned up [ 144.503036][ T5047] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 146.059020][ T5057] Bluetooth: hci7: Frame reassembly failed (-90) [ 146.069101][ T5057] loop3: detected capacity change from 0 to 256 [ 146.093282][ T21] Bluetooth: hci6: command 0x1003 tx timeout [ 146.101677][ T146] Bluetooth: hci6: sending frame failed (-49) [ 146.112031][ T4471] Bluetooth: hci7: Frame reassembly failed (-84) [ 147.290724][ T5071] tipc: Enabling of bearer rejected, already enabled [ 148.097133][ T21] Bluetooth: hci7: command 0x1003 tx timeout [ 148.179651][ T4198] Bluetooth: hci7: sending frame failed (-49) [ 148.513573][ T21] Bluetooth: hci6: command 0x1001 tx timeout [ 148.613079][ T4198] Bluetooth: hci6: sending frame failed (-49) [ 149.758956][ T5095] loop1: detected capacity change from 0 to 1024 [ 151.170972][ T5096] Bluetooth: hci5: Frame reassembly failed (-90) [ 151.185140][ T13] Bluetooth: hci7: command 0x1001 tx timeout [ 151.201569][ T13] Bluetooth: hci6: command 0x1009 tx timeout [ 151.245477][ T146] Bluetooth: hci7: sending frame failed (-49) [ 151.257920][ T305] Bluetooth: hci5: Frame reassembly failed (-84) [ 153.297656][ T1110] Bluetooth: hci7: command 0x1009 tx timeout [ 153.304411][ T1110] Bluetooth: hci5: command 0x1003 tx timeout [ 153.367266][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 154.235979][ T5119] loop2: detected capacity change from 0 to 16 [ 154.324129][ T5119] erofs: (device loop2): mounted with root inode @ nid 36. [ 154.428153][ T4199] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 154.528319][ T5119] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 154.577058][ T26] audit: type=1800 audit(3908578182.266:5): pid=5119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.250" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 154.922913][ T5119] syz.2.250 (5119) used greatest stack depth: 19968 bytes left [ 156.228802][ T5130] Bluetooth: hci6: Frame reassembly failed (-90) [ 156.707633][ T21] Bluetooth: hci5: command 0x1001 tx timeout [ 156.713834][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 157.160165][ T26] audit: type=1107 audit(3908578184.806:6): pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 159.543743][ T4247] Bluetooth: hci5: command 0x1009 tx timeout [ 159.551615][ T4247] Bluetooth: hci6: command 0x1003 tx timeout [ 159.579276][ T4187] Bluetooth: hci6: sending frame failed (-49) [ 159.753098][ T5142] loop3: detected capacity change from 0 to 1024 [ 160.852860][ T5146] loop0: detected capacity change from 0 to 1024 [ 163.408714][ T4247] Bluetooth: hci6: command 0x1001 tx timeout [ 163.424765][ T4192] Bluetooth: hci6: sending frame failed (-49) [ 163.443074][ T1110] Bluetooth: hci7: command 0x1003 tx timeout [ 164.023709][ T26] audit: type=1107 audit(3908578191.726:7): pid=5161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 164.870590][ T5169] loop0: detected capacity change from 0 to 16 [ 164.931138][ T5169] erofs: (device loop0): mounted with root inode @ nid 36. [ 165.147156][ T4198] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 165.172771][ T5169] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 165.372913][ T26] audit: type=1800 audit(3908578193.086:8): pid=5169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.263" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 166.090000][ T4232] Bluetooth: hci7: command 0x1001 tx timeout [ 166.096757][ T4232] Bluetooth: hci6: command 0x1009 tx timeout [ 166.096906][ T4198] Bluetooth: hci7: sending frame failed (-49) [ 166.882340][ T5184] loop3: detected capacity change from 0 to 256 [ 167.505254][ T9] Bluetooth: hci5: Frame reassembly failed (-90) [ 168.503557][ T4262] Bluetooth: hci7: command 0x1009 tx timeout [ 171.386272][ T4262] Bluetooth: hci5: command 0x1003 tx timeout [ 171.392910][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 171.442881][ T5220] loop1: detected capacity change from 0 to 16 [ 171.507653][ T5220] erofs: (device loop1): mounted with root inode @ nid 36. [ 171.558710][ T4198] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 171.582163][ T5220] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 171.616959][ T26] audit: type=1800 audit(3908578199.316:9): pid=5220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.276" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 173.457057][ T23] Bluetooth: hci5: command 0x1001 tx timeout [ 173.464172][ T4187] Bluetooth: hci5: sending frame failed (-49) [ 173.700415][ T5238] loop1: detected capacity change from 0 to 256 [ 174.048498][ T5241] loop4: detected capacity change from 0 to 256 [ 174.123520][ T9] Bluetooth: hci6: Frame reassembly failed (-90) [ 174.167494][ T5238] exfat: Deprecated parameter 'utf8' [ 174.597044][ T5238] exfat: Deprecated parameter 'namecase' [ 174.646147][ T5238] exfat: Deprecated parameter 'namecase' [ 174.676522][ T5238] exfat: Deprecated parameter 'utf8' [ 174.702223][ T5238] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 174.722476][ T5238] exfat filesystem being mounted at /50/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 175.323766][ T5252] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 176.131646][ T23] Bluetooth: hci5: command 0x1009 tx timeout [ 176.177021][ T23] Bluetooth: hci6: command 0x1003 tx timeout [ 176.183220][ T4198] Bluetooth: hci6: sending frame failed (-49) [ 176.288082][ T5255] binder: 5254:5255 ioctl 4018620d 0 returned -22 [ 176.451654][ T5260] loop1: detected capacity change from 0 to 256 [ 176.477072][ T5260] exfat: Deprecated parameter 'utf8' [ 176.483701][ T5260] exfat: Deprecated parameter 'namecase' [ 176.511760][ T5260] exfat: Deprecated parameter 'namecase' [ 176.525626][ T5260] exfat: Deprecated parameter 'utf8' [ 176.559481][ T5260] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 176.601033][ T5260] exfat filesystem being mounted at /52/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 177.024302][ T5262] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 177.951070][ T5264] loop2: detected capacity change from 0 to 16 [ 178.220098][ T5264] erofs: (device loop2): mounted with root inode @ nid 36. [ 178.237043][ T4199] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 178.822251][ T5264] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 178.844002][ T26] audit: type=1800 audit(3908578206.556:10): pid=5264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.289" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 178.937432][ T5264] syz.2.289 (5264) used greatest stack depth: 19792 bytes left [ 179.037138][ T21] Bluetooth: hci6: command 0x1001 tx timeout [ 179.043433][ T4199] Bluetooth: hci6: sending frame failed (-49) [ 179.473543][ T5286] loop1: detected capacity change from 0 to 1024 [ 179.593739][ T5286] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.293: Invalid block bitmap block 0 in block_group 0 [ 179.611082][ T5286] Quota error (device loop1): write_blk: dquota write failed [ 179.619179][ T5286] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 179.629291][ T5286] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.293: Failed to acquire dquot type 0 [ 179.644281][ T5286] EXT4-fs error (device loop1): ext4_free_blocks:6218: comm syz.1.293: Freeing blocks not in datazone - block = 0, count = 4096 [ 179.663737][ T5286] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.293: Invalid inode bitmap blk 0 in block_group 0 [ 179.678015][ T5286] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 179.689115][ T5286] EXT4-fs (loop1): 1 orphan inode deleted [ 179.694984][ T5286] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue. Quota mode: writeback. [ 179.728009][ T5283] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.293: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 179.748241][ T4360] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 179.765328][ T4360] EXT4-fs error (device loop1): ext4_release_dquot:6245: comm kworker/u4:8: Failed to release dquot type 0 [ 179.792171][ T5283] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.293: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 180.994392][ T5298] binder: 5297:5298 ioctl 4018620d 0 returned -22 [ 181.112278][ T4233] Bluetooth: hci6: command 0x1009 tx timeout [ 183.340098][ T4225] Bluetooth: hci5: command 0x1003 tx timeout [ 183.346366][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 183.566942][ T21] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 183.778941][ T5320] loop1: detected capacity change from 0 to 256 [ 183.935033][ T4357] Bluetooth: hci7: Frame reassembly failed (-90) [ 184.392032][ T5324] loop3: detected capacity change from 0 to 16 [ 184.397166][ T21] usb 3-1: unable to read config index 0 descriptor/all [ 184.412221][ T21] usb 3-1: can't read configurations, error -71 [ 184.450672][ T5324] erofs: (device loop3): mounted with root inode @ nid 36. [ 184.468736][ T4195] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 184.491028][ T5324] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 184.630214][ T26] audit: type=1800 audit(3908578212.226:11): pid=5324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.302" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 185.391413][ T1110] Bluetooth: hci5: command 0x1001 tx timeout [ 185.407060][ T4187] Bluetooth: hci5: sending frame failed (-49) [ 185.747996][ T5342] binder: 5341:5342 ioctl 4018620d 0 returned -22 [ 185.858212][ T1110] Bluetooth: hci7: command 0x1003 tx timeout [ 185.868032][ T4187] Bluetooth: hci7: sending frame failed (-49) [ 186.119858][ T1110] Bluetooth: hci1: command 0x0406 tx timeout [ 186.135477][ T1110] Bluetooth: hci0: command 0x0406 tx timeout [ 186.141755][ T1110] Bluetooth: hci3: command 0x0406 tx timeout [ 186.148968][ T1110] Bluetooth: hci2: command 0x0406 tx timeout [ 188.069215][ T1110] Bluetooth: hci5: command 0x1009 tx timeout [ 188.147524][ T21] Bluetooth: hci7: command 0x1001 tx timeout [ 188.154012][ T4187] Bluetooth: hci7: sending frame failed (-49) [ 188.617782][ T5357] loop3: detected capacity change from 0 to 2048 [ 188.767618][ T5357] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.926979][ T5363] tipc: Enabling of bearer rejected, failed to enable media [ 188.952063][ T5363] device syzkaller0 entered promiscuous mode [ 189.149071][ T5368] loop4: detected capacity change from 0 to 16 [ 189.296435][ T5368] erofs: (device loop4): mounted with root inode @ nid 36. [ 189.364526][ T4187] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 189.389974][ T5368] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 189.858329][ T26] audit: type=1800 audit(3908578217.536:12): pid=5368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.316" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 190.631579][ T5377] binder: 5376:5377 ioctl c0306201 0 returned -14 [ 190.873815][ T21] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 190.884022][ T1110] Bluetooth: hci7: command 0x1009 tx timeout [ 191.538176][ T21] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 191.573950][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 191.779312][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 191.790712][ T21] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 191.877236][ T21] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.890035][ T5389] loop4: detected capacity change from 0 to 2048 [ 191.895831][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 192.123199][ T5389] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.149088][ T5393] loop3: detected capacity change from 0 to 1024 [ 192.161472][ T21] usb 4-1: SerialNumber: syz [ 192.234493][ T21] usb 4-1: can't set config #1, error -71 [ 193.018057][ T21] usb 4-1: USB disconnect, device number 4 [ 193.024366][ T5399] tipc: Enabling of bearer rejected, failed to enable media [ 193.036338][ T5396] syz.2.323 (5396) used greatest stack depth: 17248 bytes left [ 193.066392][ T5399] device syzkaller0 entered promiscuous mode [ 194.883727][ T5404] loop2: detected capacity change from 0 to 256 [ 194.953504][ T154] Bluetooth: hci5: Frame reassembly failed (-90) [ 195.162692][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.169205][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.273639][ T5421] binder: BINDER_SET_CONTEXT_MGR already set [ 196.402571][ T5421] binder: 5417:5421 ioctl 4018620d 200000000040 returned -16 [ 196.751539][ T154] Bluetooth: hci6: Frame reassembly failed (-90) [ 196.789661][ T5424] binder: BINDER_SET_CONTEXT_MGR already set [ 197.164395][ T4259] Bluetooth: hci5: command 0x1003 tx timeout [ 197.176557][ T5424] binder: 5422:5424 ioctl 4018620d 200000004a80 returned -16 [ 197.184570][ T4187] Bluetooth: hci5: sending frame failed (-49) [ 197.197539][ T5424] binder: 5422:5424 ioctl c0306201 0 returned -14 [ 198.217237][ T5438] loop4: detected capacity change from 0 to 2048 [ 198.534764][ T5438] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.737098][ T4317] Bluetooth: hci6: command 0x1003 tx timeout [ 198.750413][ T4187] Bluetooth: hci6: sending frame failed (-49) [ 199.113141][ T5440] input: syz0 as /devices/virtual/input/input8 [ 199.119754][ T5440] input: failed to attach handler leds to device input8, error: -6 [ 199.910054][ T4259] Bluetooth: hci5: command 0x1001 tx timeout [ 199.937838][ T4187] Bluetooth: hci5: sending frame failed (-49) [ 201.005872][ T4259] Bluetooth: hci6: command 0x1001 tx timeout [ 201.034530][ T4187] Bluetooth: hci6: sending frame failed (-49) [ 201.175407][ T5456] loop3: detected capacity change from 0 to 1024 [ 202.000929][ T5467] binder: BINDER_SET_CONTEXT_MGR already set [ 202.013584][ T5467] binder: 5466:5467 ioctl 4018620d 200000004a80 returned -16 [ 202.026454][ T4259] Bluetooth: hci5: command 0x1009 tx timeout [ 202.031031][ T5467] binder: 5466:5467 ioctl c0306201 0 returned -14 [ 202.203873][ T5472] loop3: detected capacity change from 0 to 512 [ 203.207039][ T21] Bluetooth: hci6: command 0x1009 tx timeout [ 203.483398][ T5472] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 203.502525][ T5472] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.580438][ T5486] loop0: detected capacity change from 0 to 2048 [ 203.660911][ T5486] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.780783][ T5488] loop3: detected capacity change from 0 to 512 [ 205.324017][ T5503] input: syz0 as /devices/virtual/input/input9 [ 205.597008][ T5503] input: failed to attach handler leds to device input9, error: -6 [ 207.574592][ T5519] loop2: detected capacity change from 0 to 2048 [ 207.689511][ T5519] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.623975][ T5527] loop1: detected capacity change from 0 to 256 [ 208.788629][ T5527] exfat: Deprecated parameter 'utf8' [ 208.794714][ T5527] exfat: Deprecated parameter 'namecase' [ 208.828242][ T5527] exfat: Deprecated parameter 'namecase' [ 208.863459][ T5527] exfat: Deprecated parameter 'utf8' [ 209.036371][ T4360] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.045311][ T5527] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 209.087436][ T5527] exfat filesystem being mounted at /60/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 209.183887][ T4360] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.376735][ T4360] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.093540][ T4360] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.309593][ T5535] chnl_net:caif_netlink_parms(): no params data found [ 210.661691][ T4473] Bluetooth: hci5: Frame reassembly failed (-84) [ 211.259329][ T5545] loop3: detected capacity change from 0 to 1024 [ 211.433783][ T4233] Bluetooth: hci3: command 0x0409 tx timeout [ 211.441776][ T5555] loop1: detected capacity change from 0 to 256 [ 213.036252][ T5555] exfat: Unknown parameter 'fsmagic' [ 213.461649][ T5535] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.486390][ T5535] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.536954][ T4259] Bluetooth: hci3: command 0x041b tx timeout [ 213.645334][ T5535] device bridge_slave_0 entered promiscuous mode [ 213.790460][ T5535] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.826674][ T5535] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.896775][ T5535] device bridge_slave_1 entered promiscuous mode [ 214.090906][ T4232] Bluetooth: hci5: command 0x1003 tx timeout [ 214.097686][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 215.001394][ T5535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.087140][ T5535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.657930][ T4259] Bluetooth: hci3: command 0x040f tx timeout [ 216.122472][ T5535] team0: Port device team_slave_0 added [ 216.186175][ T4233] Bluetooth: hci5: command 0x1001 tx timeout [ 216.192792][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 216.198670][ T5535] team0: Port device team_slave_1 added [ 216.316269][ T5535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.325447][ T5535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.363163][ T5535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.393731][ T5535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.403230][ T5535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.436371][ T5535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.549841][ T5535] device hsr_slave_0 entered promiscuous mode [ 216.571780][ T5535] device hsr_slave_1 entered promiscuous mode [ 216.591862][ T5535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.610265][ T5535] Cannot create hsr debugfs directory [ 218.061937][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 218.285816][ T7] Bluetooth: hci5: command 0x1009 tx timeout [ 218.450111][ T5611] loop3: detected capacity change from 0 to 1024 [ 219.419923][ T4233] Bluetooth: hci1: command 0x0409 tx timeout [ 219.431304][ T4360] device hsr_slave_0 left promiscuous mode [ 219.488740][ T4360] device hsr_slave_1 left promiscuous mode [ 219.827885][ T4360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.836586][ T4360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.858018][ T4360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.884344][ T4360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.902630][ T4360] device bridge_slave_1 left promiscuous mode [ 219.926429][ T4360] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.105727][ T4360] device bridge_slave_0 left promiscuous mode [ 220.113638][ T4360] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.223237][ T4360] device veth1_macvtap left promiscuous mode [ 220.240624][ T4360] device veth0_macvtap left promiscuous mode [ 220.246868][ T4360] device veth1_vlan left promiscuous mode [ 220.272920][ T4360] device veth0_vlan left promiscuous mode [ 220.504599][ T5621] input: syz0 as /devices/virtual/input/input10 [ 220.511120][ T5621] input: failed to attach handler leds to device input10, error: -6 [ 221.629893][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 221.800259][ T4360] team0 (unregistering): Port device team_slave_1 removed [ 221.824826][ T4360] team0 (unregistering): Port device team_slave_0 removed [ 221.855799][ T4360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.884636][ T4360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.974239][ T4360] bond0 (unregistering): Released all slaves [ 222.146570][ T5641] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 222.156432][ T5641] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 222.166113][ T5641] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 222.305738][ T5645] tipc: Enabling of bearer rejected, failed to enable media [ 222.480696][ T5596] chnl_net:caif_netlink_parms(): no params data found [ 222.547994][ T5535] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 222.653317][ T5535] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 222.713470][ T5535] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 222.749938][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.798094][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.806484][ T5596] device bridge_slave_0 entered promiscuous mode [ 222.945473][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.988145][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.996321][ T5596] device bridge_slave_1 entered promiscuous mode [ 223.016749][ T5535] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.257835][ T5666] loop4: detected capacity change from 0 to 256 [ 223.296730][ T4415] Bluetooth: hci5: Frame reassembly failed (-90) [ 223.842630][ T4259] Bluetooth: hci1: command 0x040f tx timeout [ 223.863471][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.109673][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.221062][ T5596] team0: Port device team_slave_0 added [ 224.261731][ T5596] team0: Port device team_slave_1 added [ 224.348892][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.355901][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.418362][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.458255][ T5535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.491209][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.507002][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.566982][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.613745][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.635643][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.669797][ T5535] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.758401][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.786720][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.805816][ T5563] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.813101][ T5563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.849509][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.878290][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.910890][ T5563] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.918055][ T5563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.946181][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.012294][ T5596] device hsr_slave_0 entered promiscuous mode [ 225.024955][ T5596] device hsr_slave_1 entered promiscuous mode [ 225.033731][ T5596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.058865][ T5596] Cannot create hsr debugfs directory [ 225.067708][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.096336][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.138797][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.160177][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.177844][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.193936][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.213032][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.295587][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.307028][ T4232] Bluetooth: hci5: command 0x1003 tx timeout [ 225.323434][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 225.354512][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.374697][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.420453][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.517455][ T5535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.857469][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 225.897581][ T5692] chnl_net:caif_netlink_parms(): no params data found [ 225.971421][ T5596] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.048352][ T5596] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.074824][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.089965][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.126666][ T5535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.152253][ T5596] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.197979][ T5692] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.214782][ T5692] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.223668][ T5692] device bridge_slave_0 entered promiscuous mode [ 226.259297][ T5596] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.276350][ T5692] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.284645][ T5692] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.293063][ T5692] device bridge_slave_1 entered promiscuous mode [ 226.341303][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 226.358233][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 226.426437][ T5535] device veth0_vlan entered promiscuous mode [ 226.463002][ T5692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.480119][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 226.520045][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.538340][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.546467][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.574793][ T5535] device veth1_vlan entered promiscuous mode [ 226.668434][ T5692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.699061][ T5692] team0: Port device team_slave_0 added [ 226.722158][ T5692] team0: Port device team_slave_1 added [ 226.729180][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 226.740310][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 226.753621][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.762738][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.977555][ T1110] Bluetooth: hci0: command 0x0409 tx timeout [ 227.612754][ T4233] Bluetooth: hci5: command 0x1001 tx timeout [ 227.642084][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 227.670677][ T5718] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 227.672218][ T5535] device veth0_macvtap entered promiscuous mode [ 227.680002][ T5718] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 227.696014][ T5718] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 227.730540][ T5535] device veth1_macvtap entered promiscuous mode [ 227.788593][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.813888][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.824512][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.835094][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.845654][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.858992][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.874675][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.893725][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.906698][ T5535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.035639][ T5692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.043130][ T5692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.069839][ T5692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.087242][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 228.102195][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 228.122164][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 228.290707][ T5723] loop2: detected capacity change from 0 to 256 [ 228.370810][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 228.385180][ T4266] Bluetooth: hci6: Frame reassembly failed (-90) [ 228.453737][ T4266] Bluetooth: hci6: Frame reassembly failed (-84) [ 228.549242][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.610739][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.777637][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.796979][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.817314][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.831395][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.841394][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.851918][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.863714][ T5535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.874147][ T5692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.881555][ T5692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.907581][ T5692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.920798][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.934740][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.944044][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.963391][ T5535] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.977965][ T5535] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.986706][ T5535] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.995527][ T5535] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.011260][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 229.033716][ T4360] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.057698][ T4317] Bluetooth: hci0: command 0x041b tx timeout [ 229.080490][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 229.103331][ T5692] device hsr_slave_0 entered promiscuous mode [ 229.110633][ T5692] device hsr_slave_1 entered promiscuous mode [ 229.119000][ T5692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.126584][ T5692] Cannot create hsr debugfs directory [ 229.139979][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 229.154806][ T4360] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.264974][ T4360] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.299642][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.309619][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.352473][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 229.371951][ T4360] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.395379][ T5563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.404479][ T5563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.417462][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 229.618992][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.697025][ T21] Bluetooth: hci5: command 0x1009 tx timeout [ 230.631731][ T21] Bluetooth: hci6: command 0x1003 tx timeout [ 230.634154][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.641367][ T4187] Bluetooth: hci6: sending frame failed (-49) [ 230.671989][ T4360] tipc: Disabling bearer [ 230.684745][ T5741] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 230.694155][ T5741] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 230.704049][ T5741] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 230.728230][ T4360] tipc: Left network mode [ 230.877633][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.886416][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.033841][ T5596] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.052236][ T5596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.065300][ T4360] tipc: Disabling bearer [ 231.081059][ T4360] tipc: Left network mode [ 231.107235][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.120549][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.132090][ T5563] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.139239][ T5563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.150024][ T4315] Bluetooth: hci0: command 0x040f tx timeout [ 231.353710][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.391052][ T4314] Bluetooth: hci7: Frame reassembly failed (-84) [ 231.415062][ T4314] Bluetooth: hci7: Frame reassembly failed (-84) [ 231.478026][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.570298][ T5563] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.577461][ T5563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.827417][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.848123][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.860955][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.871113][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.880334][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.889422][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.898436][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.906795][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.915347][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.924210][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.932979][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.942423][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.950738][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.148792][ T5692] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 232.169063][ T5692] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 232.218298][ T5692] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 232.276291][ T5692] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 232.307776][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.315318][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.343333][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.394316][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 232.412069][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.474556][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 232.490161][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.504795][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.516343][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.534388][ T5596] device veth0_vlan entered promiscuous mode [ 232.559922][ T5596] device veth1_vlan entered promiscuous mode [ 232.575952][ T5692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.614360][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 232.627335][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 232.635426][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.647626][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.656554][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.664214][ T21] Bluetooth: hci6: command 0x1001 tx timeout [ 232.665150][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.670463][ T4195] Bluetooth: hci6: sending frame failed (-49) [ 232.686785][ T5596] device veth0_macvtap entered promiscuous mode [ 232.705854][ T5692] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.717585][ T5596] device veth1_macvtap entered promiscuous mode [ 232.726680][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 232.735249][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 232.746400][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.757822][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.766196][ T5563] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.773317][ T5563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.781539][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.813294][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.827002][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.836908][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.847510][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.859585][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.870506][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.880472][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.891037][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.904431][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.916014][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.929016][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.936742][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.946059][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.954556][ T5563] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.961652][ T5563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.973133][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 232.982206][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.009093][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.021856][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.032220][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.043499][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.053651][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.065190][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.075143][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.086634][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.096751][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.108412][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.119788][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.132049][ T5596] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.141564][ T5596] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.150668][ T5596] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.159833][ T5596] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.171225][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.180784][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.190327][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 233.199313][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 233.217645][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 233.234102][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.246086][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.265474][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.273936][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.283227][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.293286][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.302187][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.332807][ T5692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.345733][ T5692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.358227][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.367924][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.458522][ T5397] Bluetooth: hci7: command 0x1003 tx timeout [ 233.465133][ T4195] Bluetooth: hci7: sending frame failed (-49) [ 233.493478][ T4415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.507866][ T4415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.543656][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 233.559307][ T4415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.575953][ T4415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.619230][ T4360] device hsr_slave_0 left promiscuous mode [ 233.625763][ T4360] device hsr_slave_1 left promiscuous mode [ 233.643702][ T4360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.652874][ T4360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.661973][ T4360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.669701][ T4360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.683211][ T4360] device bridge_slave_1 left promiscuous mode [ 233.690349][ T4360] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.703566][ T4360] device bridge_slave_0 left promiscuous mode [ 233.710240][ T4360] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.723791][ T4360] device hsr_slave_0 left promiscuous mode [ 233.730615][ T4360] device hsr_slave_1 left promiscuous mode [ 233.737213][ T4360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.744673][ T4360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.754182][ T4360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.761863][ T4360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.770400][ T4360] device bridge_slave_1 left promiscuous mode [ 233.776587][ T4360] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.789225][ T4360] device bridge_slave_0 left promiscuous mode [ 233.795414][ T4360] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.810524][ T4360] device veth1_macvtap left promiscuous mode [ 233.816601][ T4360] device veth0_macvtap left promiscuous mode [ 233.822928][ T4360] device veth1_vlan left promiscuous mode [ 233.828790][ T4360] device veth0_vlan left promiscuous mode [ 233.835726][ T4360] device veth1_macvtap left promiscuous mode [ 233.843167][ T4360] device veth0_macvtap left promiscuous mode [ 233.849406][ T4360] device veth1_vlan left promiscuous mode [ 233.855236][ T4360] device veth0_vlan left promiscuous mode [ 235.052620][ T4317] Bluetooth: hci6: command 0x1009 tx timeout [ 235.142132][ T4360] team0 (unregistering): Port device team_slave_1 removed [ 235.159864][ T4360] team0 (unregistering): Port device team_slave_0 removed [ 235.174575][ T4360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.191366][ T4360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.266761][ T4360] bond0 (unregistering): Released all slaves [ 235.397563][ T4360] team0 (unregistering): Port device team_slave_1 removed [ 235.412938][ T4360] team0 (unregistering): Port device team_slave_0 removed [ 235.429672][ T4360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.445046][ T4360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.522922][ T4360] bond0 (unregistering): Released all slaves [ 235.536913][ T4315] Bluetooth: hci7: command 0x1001 tx timeout [ 235.543030][ T4199] Bluetooth: hci7: sending frame failed (-49) [ 235.574445][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 235.667556][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.669218][ T5791] loop1: detected capacity change from 0 to 2048 [ 235.697188][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.710778][ T5692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.744236][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 235.757599][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.802795][ T5791] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.833125][ T5692] device veth0_vlan entered promiscuous mode [ 235.843129][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 235.852370][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.875977][ T5692] device veth1_vlan entered promiscuous mode [ 235.883500][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.892914][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.902332][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 235.929806][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 235.940277][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.950575][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.962539][ T5692] device veth0_macvtap entered promiscuous mode [ 235.982598][ T5692] device veth1_macvtap entered promiscuous mode [ 236.008004][ T5692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.025671][ T5692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.049144][ T5692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.064259][ T5692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.075384][ T5692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.092301][ T5692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.104431][ T5692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.115305][ T5692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.130035][ T5692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.150454][ T5692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.163703][ T5692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.174367][ T5692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.198312][ T5692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.213548][ T5795] loop1: detected capacity change from 0 to 1024 [ 236.214317][ T5692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.231098][ T5692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.241834][ T5692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.252341][ T5692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.264650][ T5692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.274945][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 236.291246][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 236.299952][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 236.316384][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 236.329084][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 236.339507][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 236.355190][ T5692] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.436619][ T5692] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.448123][ T5692] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.464645][ T5692] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.584748][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.978620][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.230553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 237.460053][ T5799] ODEBUG: Out of memory. ODEBUG disabled [ 237.563523][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.575811][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.625252][ T4290] Bluetooth: hci7: command 0x1009 tx timeout [ 238.505897][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 238.641097][ T5804] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 238.650449][ T5804] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 238.660051][ T5804] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 239.673151][ T5811] loop1: detected capacity change from 0 to 512 [ 239.826156][ T5811] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 239.873989][ T5811] ext4 filesystem being mounted at /4/file0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 240.126442][ T5799] Set syz1 is full, maxelem 65536 reached [ 240.220392][ T5819] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.231887][ T5819] overlayfs: overlapping lowerdir path [ 241.581376][ T5829] binder: BINDER_SET_CONTEXT_MGR already set [ 241.639636][ T5829] binder: 5827:5829 ioctl 4018620d 200000004a80 returned -16 [ 241.811204][ T5831] loop4: detected capacity change from 0 to 2048 [ 242.962145][ T5841] loop2: detected capacity change from 0 to 1024 [ 243.042323][ T5831] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.666912][ T5882] loop2: detected capacity change from 0 to 256 [ 248.123199][ T144] Bluetooth: hci5: Frame reassembly failed (-90) [ 248.139021][ T5884] binder: BINDER_SET_CONTEXT_MGR already set [ 248.147347][ T5884] binder: 5883:5884 ioctl 4018620d 200000004a80 returned -16 [ 248.317980][ T5857] Set syz1 is full, maxelem 65536 reached [ 248.513954][ T4314] Bluetooth: hci6: Frame reassembly failed (-84) [ 248.560423][ T5893] Bluetooth: hci6: Frame reassembly failed (-90) [ 248.620033][ T5886] loop3: detected capacity change from 0 to 2048 [ 249.956998][ T5886] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.185296][ T4232] Bluetooth: hci5: command 0x1003 tx timeout [ 250.193404][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 250.968682][ T5867] Bluetooth: hci6: command 0x1003 tx timeout [ 250.974839][ T4199] Bluetooth: hci6: sending frame failed (-49) [ 251.750177][ T5911] Zero length message leads to an empty skb [ 252.267056][ T5867] Bluetooth: hci5: command 0x1001 tx timeout [ 252.275770][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 253.488851][ T4290] Bluetooth: hci6: command 0x1001 tx timeout [ 253.507960][ T4199] Bluetooth: hci6: sending frame failed (-49) [ 254.590497][ T5867] Bluetooth: hci5: command 0x1009 tx timeout [ 254.592612][ T4540] Bluetooth: hci7: Frame reassembly failed (-84) [ 254.629063][ T5930] binder: 5929:5930 ioctl c0306201 0 returned -14 [ 254.639941][ T5926] loop3: detected capacity change from 0 to 256 [ 255.833810][ T4290] Bluetooth: hci6: command 0x1009 tx timeout [ 255.902535][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.909002][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.085675][ T5940] loop0: detected capacity change from 0 to 2048 [ 256.155177][ T5940] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.657069][ T4232] Bluetooth: hci7: command 0x1003 tx timeout [ 256.719646][ T4195] Bluetooth: hci7: sending frame failed (-49) [ 258.106977][ T5867] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 258.737023][ T21] Bluetooth: hci7: command 0x1001 tx timeout [ 258.745745][ T4187] Bluetooth: hci7: sending frame failed (-49) [ 259.047682][ T5867] usb 2-1: device descriptor read/64, error -71 [ 259.180545][ T5962] loop2: detected capacity change from 0 to 1024 [ 259.467514][ T5970] loop4: detected capacity change from 0 to 256 [ 259.809265][ T5972] loop0: detected capacity change from 0 to 256 [ 260.019401][ T5867] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 260.626957][ T5867] usb 2-1: device descriptor read/64, error -71 [ 260.749668][ T5867] usb usb2-port1: attempt power cycle [ 260.840475][ T5970] exfat: Unknown parameter 'fsmagic' [ 262.013086][ T5867] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 262.821673][ T4232] Bluetooth: hci7: command 0x1009 tx timeout [ 262.847685][ T21] Bluetooth: hci5: command 0x1003 tx timeout [ 263.328659][ T5867] usb 2-1: device descriptor read/8, error -71 [ 263.425539][ T5979] device syzkaller0 entered promiscuous mode [ 263.465655][ T5981] binder: 5980:5981 ioctl c0306201 0 returned -14 [ 263.532677][ T5985] loop2: detected capacity change from 0 to 2048 [ 263.599900][ T5985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.181248][ T5995] Bluetooth: hci8: Frame reassembly failed (-90) [ 265.065584][ T6000] loop4: detected capacity change from 0 to 256 [ 265.082473][ T5397] Bluetooth: hci5: command 0x1001 tx timeout [ 265.092288][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 265.170483][ T4540] Bluetooth: hci9: Frame reassembly failed (-90) [ 265.613069][ T4317] Bluetooth: hci6: command 0x1003 tx timeout [ 265.621889][ T4199] Bluetooth: hci6: sending frame failed (-49) [ 265.691774][ T6002] loop3: detected capacity change from 0 to 1024 [ 266.680887][ T4232] Bluetooth: hci8: command 0x1003 tx timeout [ 266.687151][ T4199] Bluetooth: hci8: sending frame failed (-49) [ 267.357146][ T5867] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 267.567102][ T5867] usb 4-1: device descriptor read/64, error -71 [ 267.617942][ T5397] Bluetooth: hci5: command 0x1009 tx timeout [ 267.624183][ T5397] Bluetooth: hci9: command 0x1003 tx timeout [ 267.630956][ T4199] Bluetooth: hci9: sending frame failed (-49) [ 267.697248][ T4317] Bluetooth: hci6: command 0x1001 tx timeout [ 267.705840][ T4199] Bluetooth: hci6: sending frame failed (-49) [ 267.877021][ T5867] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 268.097269][ T5867] usb 4-1: device descriptor read/64, error -71 [ 268.217843][ T5867] usb usb4-port1: attempt power cycle [ 268.638282][ T5867] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 268.737543][ T5867] usb 4-1: device descriptor read/8, error -71 [ 268.738387][ T4317] Bluetooth: hci8: command 0x1001 tx timeout [ 268.750598][ T4199] Bluetooth: hci8: sending frame failed (-49) [ 269.037033][ T5867] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 269.127125][ T5867] usb 4-1: device descriptor read/8, error -71 [ 269.248449][ T5867] usb usb4-port1: unable to enumerate USB device [ 269.697546][ T4317] Bluetooth: hci9: command 0x1001 tx timeout [ 269.704076][ T4199] Bluetooth: hci9: sending frame failed (-49) [ 269.777211][ T5397] Bluetooth: hci6: command 0x1009 tx timeout [ 270.921025][ T4225] Bluetooth: hci8: command 0x1009 tx timeout [ 271.108933][ T6016] binder: 6015:6016 ioctl c0306201 0 returned -14 [ 271.155411][ T6019] loop3: detected capacity change from 0 to 128 [ 271.558506][ T6019] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 271.648929][ T6019] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 271.787092][ T5397] Bluetooth: hci9: command 0x1009 tx timeout [ 272.206074][ T6025] device syzkaller0 entered promiscuous mode [ 272.996770][ T6028] loop0: detected capacity change from 0 to 2048 [ 273.052326][ T6028] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.343557][ T6036] loop3: detected capacity change from 0 to 2048 [ 273.417604][ T6036] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 276.458122][ T6053] binder: BINDER_SET_CONTEXT_MGR already set [ 276.514042][ T6053] binder: 6052:6053 ioctl 4018620d 200000004a80 returned -16 [ 276.633342][ T6063] loop4: detected capacity change from 0 to 1024 [ 276.954349][ T4290] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 277.346998][ T4290] usb 1-1: device descriptor read/64, error -71 [ 277.727382][ T6074] loop1: detected capacity change from 0 to 1024 [ 278.366904][ T4290] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 280.180495][ T6074] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.476: Invalid block bitmap block 0 in block_group 0 [ 280.201760][ T6074] Quota error (device loop1): write_blk: dquota write failed [ 280.209573][ T6074] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 280.220258][ T6074] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.476: Failed to acquire dquot type 0 [ 280.247211][ T6074] EXT4-fs error (device loop1): ext4_free_blocks:6218: comm syz.1.476: Freeing blocks not in datazone - block = 0, count = 4096 [ 280.268459][ T6074] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.476: Invalid inode bitmap blk 0 in block_group 0 [ 280.289883][ T4805] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 280.336655][ T6074] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 280.357530][ T6074] EXT4-fs (loop1): 1 orphan inode deleted [ 280.363529][ T6074] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue. Quota mode: writeback. [ 280.720532][ T6074] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.476: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 280.848919][ T4805] EXT4-fs error (device loop1): ext4_release_dquot:6245: comm kworker/u4:14: Failed to release dquot type 0 [ 281.439954][ T1227] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.299133][ T1227] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.753223][ T1227] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.353119][ T1227] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.454376][ T4970] ================================================================== [ 283.462880][ T4970] BUG: KASAN: use-after-free in __mutex_lock_common+0xc85/0x2390 [ 283.470653][ T4970] Read of size 8 at addr ffff888025388060 by task khidpd_10000008/4970 [ 283.478920][ T4970] [ 283.481266][ T4970] CPU: 0 PID: 4970 Comm: khidpd_10000008 Not tainted syzkaller #0 [ 283.489083][ T4970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 283.499170][ T4970] Call Trace: [ 283.502466][ T4970] [ 283.505417][ T4970] dump_stack_lvl+0x168/0x230 [ 283.510131][ T4970] ? show_regs_print_info+0x20/0x20 [ 283.515366][ T4970] ? load_image+0x3b0/0x3b0 [ 283.519902][ T4970] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 283.525297][ T4970] ? release_firmware_map_entry+0x190/0x190 [ 283.531219][ T4970] print_address_description+0x60/0x2d0 [ 283.536784][ T4970] ? __mutex_lock_common+0xc85/0x2390 [ 283.542169][ T4970] kasan_report+0xdf/0x130 [ 283.546606][ T4970] ? __mutex_lock_common+0xc85/0x2390 [ 283.552007][ T4970] __mutex_lock_common+0xc85/0x2390 [ 283.557236][ T4970] ? l2cap_unregister_user+0x66/0x1a0 [ 283.562654][ T4970] ? mutex_lock_io_nested+0x60/0x60 [ 283.567878][ T4970] ? remove_wait_queue+0x120/0x120 [ 283.573024][ T4970] ? _raw_spin_unlock+0x40/0x40 [ 283.577904][ T4970] mutex_lock_nested+0x17/0x20 [ 283.582700][ T4970] l2cap_unregister_user+0x66/0x1a0 [ 283.587934][ T4970] hidp_session_thread+0x3c4/0x400 [ 283.593071][ T4970] ? hidp_session_get+0x80/0x80 [ 283.597940][ T4970] ? hidp_session_thread+0x400/0x400 [ 283.603233][ T4970] ? lockdep_hardirqs_on+0x94/0x140 [ 283.608438][ T4970] ? hidp_session_thread+0x400/0x400 [ 283.613750][ T4970] kthread+0x436/0x520 [ 283.617826][ T4970] ? hidp_session_get+0x80/0x80 [ 283.622691][ T4970] ? kthread_blkcg+0xd0/0xd0 [ 283.627281][ T4970] ret_from_fork+0x1f/0x30 [ 283.631719][ T4970] [ 283.634743][ T4970] [ 283.637061][ T4970] Allocated by task 4194: [ 283.641588][ T4970] __kasan_kmalloc+0xb5/0xf0 [ 283.646190][ T4970] hci_alloc_dev_priv+0x23/0x1d20 [ 283.651218][ T4970] vhci_create_device+0x122/0x5c0 [ 283.656243][ T4970] vhci_write+0x391/0x450 [ 283.660578][ T4970] vfs_write+0x712/0xd00 [ 283.664821][ T4970] ksys_write+0x14d/0x250 [ 283.669146][ T4970] do_syscall_64+0x4c/0xa0 [ 283.673555][ T4970] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.679449][ T4970] [ 283.681780][ T4970] Freed by task 6094: [ 283.685764][ T4970] kasan_set_track+0x4b/0x70 [ 283.690357][ T4970] kasan_set_free_info+0x1f/0x40 [ 283.695306][ T4970] ____kasan_slab_free+0xd5/0x110 [ 283.700341][ T4970] slab_free_freelist_hook+0xea/0x170 [ 283.705827][ T4970] kfree+0xef/0x2a0 [ 283.709649][ T4970] hci_release_dev+0x1378/0x14e0 [ 283.714625][ T4970] bt_host_release+0x7e/0x90 [ 283.719225][ T4970] device_release+0x92/0x1c0 [ 283.723814][ T4970] kobject_put+0x21d/0x460 [ 283.728248][ T4970] vhci_release+0x7b/0xc0 [ 283.732575][ T4970] __fput+0x234/0x930 [ 283.736553][ T4970] task_work_run+0x125/0x1a0 [ 283.741144][ T4970] do_exit+0x61e/0x20a0 [ 283.745309][ T4970] do_group_exit+0x12e/0x300 [ 283.749946][ T4970] get_signal+0x6ca/0x12c0 [ 283.754525][ T4970] arch_do_signal_or_restart+0xc1/0x1300 [ 283.760171][ T4970] exit_to_user_mode_loop+0x9e/0x130 [ 283.765491][ T4970] exit_to_user_mode_prepare+0xee/0x180 [ 283.771041][ T4970] syscall_exit_to_user_mode+0x16/0x40 [ 283.776512][ T4970] do_syscall_64+0x58/0xa0 [ 283.780933][ T4970] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.786847][ T4970] [ 283.789179][ T4970] Last potentially related work creation: [ 283.794890][ T4970] kasan_save_stack+0x35/0x60 [ 283.799569][ T4970] kasan_record_aux_stack+0xb8/0x100 [ 283.804855][ T4970] insert_work+0x54/0x3d0 [ 283.809195][ T4970] __queue_work+0x9c5/0xd50 [ 283.813703][ T4970] queue_work_on+0x11d/0x1d0 [ 283.818309][ T4970] process_one_work+0x863/0x1000 [ 283.823257][ T4970] worker_thread+0xaa8/0x12a0 [ 283.827949][ T4970] kthread+0x436/0x520 [ 283.832012][ T4970] ret_from_fork+0x1f/0x30 [ 283.836423][ T4970] [ 283.838752][ T4970] Second to last potentially related work creation: [ 283.845323][ T4970] kasan_save_stack+0x35/0x60 [ 283.850005][ T4970] kasan_record_aux_stack+0xb8/0x100 [ 283.855309][ T4970] insert_work+0x54/0x3d0 [ 283.859645][ T4970] __queue_work+0x9c5/0xd50 [ 283.864147][ T4970] call_timer_fn+0x16c/0x530 [ 283.868735][ T4970] __run_timers+0x550/0x7c0 [ 283.873241][ T4970] run_timer_softirq+0x63/0xf0 [ 283.878022][ T4970] handle_softirqs+0x328/0x820 [ 283.882791][ T4970] __irq_exit_rcu+0x12f/0x220 [ 283.887472][ T4970] irq_exit_rcu+0x5/0x20 [ 283.891738][ T4970] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 283.897371][ T4970] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 283.903353][ T4970] [ 283.905680][ T4970] The buggy address belongs to the object at ffff888025388000 [ 283.905680][ T4970] which belongs to the cache kmalloc-8k of size 8192 [ 283.919728][ T4970] The buggy address is located 96 bytes inside of [ 283.919728][ T4970] 8192-byte region [ffff888025388000, ffff88802538a000) [ 283.933003][ T4970] The buggy address belongs to the page: [ 283.938650][ T4970] page:ffffea000094e200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25388 [ 283.948799][ T4970] head:ffffea000094e200 order:3 compound_mapcount:0 compound_pincount:0 [ 283.957122][ T4970] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 283.965112][ T4970] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016842280 [ 283.973694][ T4970] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 283.982265][ T4970] page dumped because: kasan: bad access detected [ 283.988696][ T4970] page_owner tracks the page as allocated [ 283.994401][ T4970] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4194, ts 60343510490, free_ts 60095147787 [ 284.013500][ T4970] get_page_from_freelist+0x1b77/0x1c60 [ 284.019058][ T4970] __alloc_pages+0x1e1/0x470 [ 284.023649][ T4970] new_slab+0xc0/0x4b0 [ 284.027715][ T4970] ___slab_alloc+0x81e/0xdf0 [ 284.032301][ T4970] __kmalloc+0x1cd/0x330 [ 284.036539][ T4970] hci_alloc_dev_priv+0x23/0x1d20 [ 284.041560][ T4970] vhci_create_device+0x122/0x5c0 [ 284.046583][ T4970] vhci_write+0x391/0x450 [ 284.050909][ T4970] vfs_write+0x712/0xd00 [ 284.055150][ T4970] ksys_write+0x14d/0x250 [ 284.059479][ T4970] do_syscall_64+0x4c/0xa0 [ 284.063894][ T4970] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.069787][ T4970] page last free stack trace: [ 284.074454][ T4970] free_unref_page_prepare+0x637/0x6c0 [ 284.079908][ T4970] free_unref_page+0x94/0x280 [ 284.084579][ T4970] skb_release_data+0x3fa/0x850 [ 284.089427][ T4970] __kfree_skb+0x4c/0x60 [ 284.093665][ T4970] tcp_recvmsg_locked+0x14d5/0x2760 [ 284.098873][ T4970] tcp_recvmsg+0x350/0x710 [ 284.103281][ T4970] inet_recvmsg+0x136/0x1e0 [ 284.107788][ T4970] sock_read_iter+0x2a2/0x340 [ 284.112574][ T4970] vfs_read+0x725/0xcf0 [ 284.116725][ T4970] ksys_read+0x14d/0x250 [ 284.120961][ T4970] do_syscall_64+0x4c/0xa0 [ 284.125376][ T4970] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.131273][ T4970] [ 284.133596][ T4970] Memory state around the buggy address: [ 284.139219][ T4970] ffff888025387f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 284.147275][ T4970] ffff888025387f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 284.155422][ T4970] >ffff888025388000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 284.163481][ T4970] ^ [ 284.170673][ T4970] ffff888025388080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 284.178745][ T4970] ffff888025388100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 284.186803][ T4970] ================================================================== [ 284.194862][ T4970] Disabling lock debugging due to kernel taint [ 284.201089][ T4970] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 284.208304][ T4970] CPU: 0 PID: 4970 Comm: khidpd_10000008 Tainted: G B syzkaller #0 [ 284.217521][ T4970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 284.227579][ T4970] Call Trace: [ 284.230855][ T4970] [ 284.233781][ T4970] dump_stack_lvl+0x168/0x230 [ 284.238456][ T4970] ? show_regs_print_info+0x20/0x20 [ 284.243650][ T4970] ? load_image+0x3b0/0x3b0 [ 284.248173][ T4970] panic+0x2c9/0x7f0 [ 284.252064][ T4970] ? bpf_jit_dump+0xd0/0xd0 [ 284.256560][ T4970] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 284.256957][ T4225] Bluetooth: hci5: command 0x0409 tx timeout [ 284.262457][ T4970] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 284.262480][ T4970] ? _raw_spin_unlock+0x40/0x40 [ 284.269510][ T4225] Bluetooth: hci2: command 0x1003 tx timeout [ 284.274385][ T4970] ? __mutex_lock_common+0xc85/0x2390 [ 284.280489][ T4195] Bluetooth: hci2: sending frame failed (-49) [ 284.285209][ T4970] check_panic_on_warn+0x80/0xa0 [ 284.301549][ T4970] ? __mutex_lock_common+0xc85/0x2390 [ 284.306936][ T4970] end_report+0x6d/0xf0 [ 284.311111][ T4970] kasan_report+0x102/0x130 [ 284.315614][ T4970] ? __mutex_lock_common+0xc85/0x2390 [ 284.320987][ T4970] __mutex_lock_common+0xc85/0x2390 [ 284.326193][ T4970] ? l2cap_unregister_user+0x66/0x1a0 [ 284.331568][ T4970] ? mutex_lock_io_nested+0x60/0x60 [ 284.336763][ T4970] ? remove_wait_queue+0x120/0x120 [ 284.341882][ T4970] ? _raw_spin_unlock+0x40/0x40 [ 284.346755][ T4970] mutex_lock_nested+0x17/0x20 [ 284.351548][ T4970] l2cap_unregister_user+0x66/0x1a0 [ 284.356762][ T4970] hidp_session_thread+0x3c4/0x400 [ 284.361886][ T4970] ? hidp_session_get+0x80/0x80 [ 284.366740][ T4970] ? hidp_session_thread+0x400/0x400 [ 284.372029][ T4970] ? lockdep_hardirqs_on+0x94/0x140 [ 284.377222][ T4970] ? hidp_session_thread+0x400/0x400 [ 284.382513][ T4970] kthread+0x436/0x520 [ 284.386581][ T4970] ? hidp_session_get+0x80/0x80 [ 284.391427][ T4970] ? kthread_blkcg+0xd0/0xd0 [ 284.396008][ T4970] ret_from_fork+0x1f/0x30 [ 284.400437][ T4970] [ 284.403798][ T4970] Kernel Offset: disabled [ 284.408213][ T4970] Rebooting in 86400 seconds..