last executing test programs: 1m22.180826049s ago: executing program 3 (id=166): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) read$FUSE(r1, &(0x7f0000003b80)={0x2020}, 0x2020) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m21.108064824s ago: executing program 3 (id=171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xb2a42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x2, 0x9, 0xffa4, 0xc00, 0x5}, 0x20) 1m20.195177685s ago: executing program 3 (id=175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = timerfd_create(0x0, 0x80800) read(r3, &(0x7f0000000000)=""/13, 0xd) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x158, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x228, 0xffffff7a, 0xffffffff, 0x228, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x17}, @loopback, 0x0, 0xffffff00, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x1, 0x2, 0x5, 0x6, 0x2], 0x2}, {0x3, [0x0, 0x0, 0x2, 0x5, 0x6, 0x1], 0x1, 0xa6adcdac30c0f96d}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) 1m19.264376267s ago: executing program 3 (id=178): bpf$BPF_MAP_GET_FD_BY_ID(0x9, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0x16) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0xa, &(0x7f00000000c0)=ANY=[], 0xfd, 0x555e, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000e80)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x9, 0x1, 0x25, @loopback, @empty, 0x1, 0x7800, 0x3, 0x1}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x8, 0x0, 0x0}}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m18.894930126s ago: executing program 3 (id=182): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x3, 0x4, 0x4, 0xfffffc01}, 0x50) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006d000100"/20, @ANYRES32=r3, @ANYBLOB="0010000000000000180034801400350069708b5f767469300000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m16.58862803s ago: executing program 3 (id=189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x21}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff88", 0x14}], 0x1}, 0x4005) 1m16.525551831s ago: executing program 32 (id=189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x21}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff88", 0x14}], 0x1}, 0x4005) 5.657634437s ago: executing program 5 (id=529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getdents64(0xffffffffffffffff, 0x0, 0x22) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4.992905963s ago: executing program 2 (id=533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa145cf, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r4, 0xfff, 0x0) 3.934291258s ago: executing program 1 (id=535): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 3.933762148s ago: executing program 5 (id=536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x30000}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x255fdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x2, 0xb}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc141100004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.933172038s ago: executing program 4 (id=537): dup(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0xe6c11ffe4afd7b0e, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r4, r3, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) sendmsg$netlink(r2, 0x0, 0x40000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt(r0, 0x1, 0x26, 0x0, &(0x7f00000003c0)) 3.918357539s ago: executing program 2 (id=538): readv(0xffffffffffffffff, &(0x7f00000009c0), 0x10000000000000d1) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x2040d0, &(0x7f0000000180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@quota}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@auto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x803}}], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x37, 0x62, 0x32, 0x38, 0x53, 0x62, 0x39], 0x2d, [0x66, 0x39, 0x39, 0x34], 0x2d, [0x36, 0x53, 0x30, 0x34], 0x2d, [0x35, 0x39, 0x30, 0x64], 0x2d, [0x35, 0x69, 0x0, 0x31, 0x0, 0x33, 0x37, 0x62]}}}]}, 0xfb, 0x46f, &(0x7f0000000480)="$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") r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp']) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 3.85036684s ago: executing program 1 (id=540): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) 3.782590112s ago: executing program 4 (id=541): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) gettid() timer_create(0x0, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 3.661723904s ago: executing program 5 (id=542): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', 0x0, 0x2200cd0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x4, 0x10001}, {0x6, 0x0, 0x7, 0xfffffffe}]}, 0x10) 3.242140264s ago: executing program 0 (id=543): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/dynamic_debug/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='file f_subset.c +p\n', 0x13) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='dummy_udc.0', 0xb) 2.904339872s ago: executing program 2 (id=544): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0xa, 0x3, 0xff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRES64=r0]) socket$netlink(0x10, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0x11, 0x5, r4, 0x1, 0x4, 0x6, @random="97b0e521f37a"}, 0x14) 2.896287882s ago: executing program 1 (id=545): r0 = userfaultfd(0x801) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 2.841000944s ago: executing program 4 (id=546): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) tkill(r1, 0x30) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x2010, 0xffffffffffffffff, 0xec777000) ptrace(0x10, r1) tgkill(r1, r1, 0x5) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x28, r0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4040000) 2.824853564s ago: executing program 0 (id=547): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0xed8, 0x280) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) 2.110299001s ago: executing program 5 (id=548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa25}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r5, 0x0, 0x2000000000006) 2.002719834s ago: executing program 1 (id=549): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f0000000b40)={0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000b80)='S', 0x1}], 0x1}}], 0x1, 0x20044040) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1.990895534s ago: executing program 2 (id=550): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000002e00), 0x8, 0x2000) socket$nl_rdma(0x10, 0x3, 0x14) pipe2(&(0x7f0000000040), 0x800) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 1.654356771s ago: executing program 0 (id=551): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r4, r2, 0x15, 0x0, @val=@netkit={@void, @value, @void, @void, r3}}, 0x1c) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = fsopen(&(0x7f0000000200)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@cgroup=r7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r9, r8, 0x15, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0}}, 0x30) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, 0x0, 0x0) 1.599181623s ago: executing program 4 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.515288035s ago: executing program 0 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc55, &(0x7f0000000180)={[{@fat=@flush}, {@uni_xlate}, {@numtail}, {@rodir}, {@utf8}, {@numtail}, {@uni_xlate}, {@numtail}, {@uni_xlateno}, {@utf8}, {@uni_xlateno}, {@utf8}, {@uni_xlate}, {@numtail}, {@fat=@dos1xfloppy}, {@rodir}, {@shortname_winnt}, {@fat=@quiet}]}, 0xf5, 0x2e5, &(0x7f0000000540)="$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") 1.126420704s ago: executing program 5 (id=554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d61436", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 1.077953085s ago: executing program 2 (id=555): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r2, 0x0, r4, 0x0, 0x38f9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00'}, 0x94) splice(r3, 0x0, r2, 0x0, 0x7fffffffffffffff, 0x1) write(r1, &(0x7f0000000040), 0xffffff4a) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 672.445515ms ago: executing program 4 (id=556): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000004140), &(0x7f0000001840)='./bus\x00', 0x0, &(0x7f0000000100), 0xff, 0x1537, &(0x7f0000000280)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) utimensat(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {0x77359400}}, 0x0) 654.027795ms ago: executing program 1 (id=557): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 598.628396ms ago: executing program 0 (id=558): fsopen(0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4002, &(0x7f0000000000)={[{@minixdf}, {@dioread_nolock}]}, 0x1, 0xbe4, &(0x7f0000003c00)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES16=r4], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 110.395028ms ago: executing program 1 (id=559): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', 0x0, 0x2200cd0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x4, 0x10001}, {0x6, 0x0, 0x7, 0xfffffffe}]}, 0x10) 110.278418ms ago: executing program 5 (id=560): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 110.192638ms ago: executing program 4 (id=561): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0xed8, 0x280) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) 1.18397ms ago: executing program 0 (id=562): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0xa, 0x3, 0xff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRES64=r0]) socket$netlink(0x10, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0x11, 0x5, r4, 0x1, 0x4, 0x6, @random="97b0e521f37a"}, 0x14) 0s ago: executing program 2 (id=563): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. [ 28.444545][ T4317] cgroup: Unknown subsys name 'net' [ 28.725928][ T4317] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.000745][ T4317] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.690922][ T4333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.694173][ T4335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.696044][ T4335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.696721][ T4338] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.698998][ T4338] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.700567][ T4338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.700614][ T4335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.701896][ T4338] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.705132][ T4335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.707404][ T4335] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.707729][ T4338] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.710350][ T4338] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.711715][ T4338] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.712687][ T4335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.713588][ T4341] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.714749][ T4335] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.715636][ T4343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.718886][ T4343] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.720645][ T4343] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.722516][ T4343] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.728011][ T4333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.729648][ T4333] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.735836][ T4343] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.737092][ T4343] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.755218][ T4343] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.758114][ T4343] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.760411][ T4343] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.764006][ T4343] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.765544][ T4343] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.766961][ T4343] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.854417][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 29.880892][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 29.909013][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.910384][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.912080][ T4329] device bridge_slave_0 entered promiscuous mode [ 29.915603][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 29.917786][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 29.924648][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.925938][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.927494][ T4329] device bridge_slave_1 entered promiscuous mode [ 29.950197][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.951519][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.953271][ T4330] device bridge_slave_0 entered promiscuous mode [ 29.956751][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.957905][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.959394][ T4330] device bridge_slave_1 entered promiscuous mode [ 29.965684][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.985929][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.988570][ T4344] chnl_net:caif_netlink_parms(): no params data found [ 29.999278][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.002993][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.011290][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.012559][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.014382][ T4339] device bridge_slave_0 entered promiscuous mode [ 30.022075][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.023942][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.025465][ T4334] device bridge_slave_0 entered promiscuous mode [ 30.030357][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.031722][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.033288][ T4339] device bridge_slave_1 entered promiscuous mode [ 30.039477][ T4329] team0: Port device team_slave_0 added [ 30.040543][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.041827][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.043857][ T4334] device bridge_slave_1 entered promiscuous mode [ 30.050825][ T4330] team0: Port device team_slave_0 added [ 30.052687][ T4329] team0: Port device team_slave_1 added [ 30.059964][ T4330] team0: Port device team_slave_1 added [ 30.067045][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.068679][ T4344] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.069839][ T4344] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.071365][ T4344] device bridge_slave_0 entered promiscuous mode [ 30.073800][ T4344] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.074997][ T4344] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.076505][ T4344] device bridge_slave_1 entered promiscuous mode [ 30.079911][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.081165][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.085888][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.089489][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.092069][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.097023][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.102694][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.104272][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.108639][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.121222][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.122447][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.128260][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.132827][ T4339] team0: Port device team_slave_0 added [ 30.139180][ T4344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.141309][ T4339] team0: Port device team_slave_1 added [ 30.142718][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.144010][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.148375][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.151784][ T4334] team0: Port device team_slave_0 added [ 30.153647][ T4344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.161374][ T4334] team0: Port device team_slave_1 added [ 30.214483][ T4330] device hsr_slave_0 entered promiscuous mode [ 30.253502][ T4330] device hsr_slave_1 entered promiscuous mode [ 30.305037][ T4344] team0: Port device team_slave_0 added [ 30.306418][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.307644][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.311969][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.364325][ T4329] device hsr_slave_0 entered promiscuous mode [ 30.403449][ T4329] device hsr_slave_1 entered promiscuous mode [ 30.445650][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.447051][ T4329] Cannot create hsr debugfs directory [ 30.450357][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.451601][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.456421][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.459168][ T4344] team0: Port device team_slave_1 added [ 30.461022][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.462283][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.467493][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.478268][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.479603][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.484486][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.496904][ T4344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.498165][ T4344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.502702][ T4344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.512105][ T4344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.513522][ T4344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.517964][ T4344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.564770][ T4339] device hsr_slave_0 entered promiscuous mode [ 30.603414][ T4339] device hsr_slave_1 entered promiscuous mode [ 30.643274][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.644583][ T4339] Cannot create hsr debugfs directory [ 30.706515][ T4334] device hsr_slave_0 entered promiscuous mode [ 30.743426][ T4334] device hsr_slave_1 entered promiscuous mode [ 30.783248][ T4334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.784701][ T4334] Cannot create hsr debugfs directory [ 30.835024][ T4344] device hsr_slave_0 entered promiscuous mode [ 30.873403][ T4344] device hsr_slave_1 entered promiscuous mode [ 30.913313][ T4344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.914556][ T4344] Cannot create hsr debugfs directory [ 30.991090][ T4330] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.044729][ T4330] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.094501][ T4330] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.144547][ T4330] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.197727][ T4329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.237807][ T4329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.274393][ T4329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.318986][ T4329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.376188][ T4339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.415179][ T4339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.459256][ T4339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.496704][ T4339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.546231][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.565607][ T4334] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.597220][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.599244][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.601443][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.604303][ T4334] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.646879][ T4334] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.684377][ T4334] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.737694][ T4344] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.773597][ T4343] Bluetooth: hci0: command 0x0409 tx timeout [ 31.779465][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.781174][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.783014][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.784351][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.785866][ T4343] Bluetooth: hci4: command 0x0409 tx timeout [ 31.785960][ T4333] Bluetooth: hci3: command 0x0409 tx timeout [ 31.787000][ T4343] Bluetooth: hci2: command 0x0409 tx timeout [ 31.787918][ T4333] Bluetooth: hci1: command 0x0409 tx timeout [ 31.791609][ T4344] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.814581][ T4344] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.880914][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.885751][ T4344] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.927261][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.929129][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.930622][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.931885][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.950766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.960186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.962049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.964219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.966128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.967964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.969535][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.977867][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.979564][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.985838][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.998182][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.999873][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.002722][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.006780][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.011901][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.014796][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.017588][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.021551][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.022962][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.031215][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.034538][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.036220][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.037756][ T1595] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.038943][ T1595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.040585][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.052780][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.054728][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.056285][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.057556][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.059157][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.060888][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.062547][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.065926][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.067031][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.068414][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.075117][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.076824][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.078387][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.079543][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.080969][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.086937][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.089134][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.091067][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.098641][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.105605][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.107455][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.109204][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.118324][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.122041][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.126082][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.127806][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.129172][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.130440][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.132362][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.134269][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.139125][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.144105][ T4344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.147489][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.149271][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.150786][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.152437][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.155561][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.167426][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.169288][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.170908][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.172629][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.176277][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.177867][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.180367][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.182374][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.188331][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.190051][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.207500][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.209226][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.211891][ T4344] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.217166][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.218821][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.220378][ T1595] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.221693][ T1595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.226706][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.235014][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.236749][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.238322][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.239598][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.241086][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.242789][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.248130][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.249314][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.257095][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.259143][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.260988][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.262681][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.264139][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.267844][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.282224][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.286236][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.287932][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.289576][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.291429][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.293130][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.295115][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.296984][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.298420][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.299945][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.302047][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.306222][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.312299][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.314172][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.315520][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.319502][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.321276][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.328882][ T4330] device veth0_vlan entered promiscuous mode [ 32.331360][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.333130][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.334875][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.336654][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.338210][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.339850][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.341516][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.343102][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.346277][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.349768][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.354101][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.361510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.363250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.368408][ T4330] device veth1_vlan entered promiscuous mode [ 32.377783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.379301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.381013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.382650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.385630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.387900][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.402019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.403707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.405422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.409482][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.411273][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.413403][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.414990][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.427194][ T4329] device veth0_vlan entered promiscuous mode [ 32.434839][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.436678][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.438888][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.440734][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.442580][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.444964][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.452046][ T4329] device veth1_vlan entered promiscuous mode [ 32.466086][ T4330] device veth0_macvtap entered promiscuous mode [ 32.468659][ T4330] device veth1_macvtap entered promiscuous mode [ 32.471713][ T4339] device veth0_vlan entered promiscuous mode [ 32.484844][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.486513][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.487915][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.489519][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.491010][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.492392][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.497124][ T4329] device veth0_macvtap entered promiscuous mode [ 32.500276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.502056][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.504673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.506975][ T4339] device veth1_vlan entered promiscuous mode [ 32.512089][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.515816][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.519224][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.520695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.522317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.523974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.525268][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.526870][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.528542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.530278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.535145][ T4329] device veth1_macvtap entered promiscuous mode [ 32.540750][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.542305][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.546258][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.547945][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.550255][ T4330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.551809][ T4330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.554287][ T4330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.555830][ T4330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.559716][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.561547][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.565279][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.568562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.570180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.575615][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.577510][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.579689][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.582915][ T4344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.587815][ T4339] device veth0_macvtap entered promiscuous mode [ 32.589933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.591536][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.592935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.597482][ T4339] device veth1_macvtap entered promiscuous mode [ 32.603126][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.606040][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.607823][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.609777][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.612328][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.615130][ T4329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.616595][ T4329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.618148][ T4329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.619666][ T4329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.630859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.632503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.636093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.645124][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.647118][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.651425][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.654555][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.656194][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.657895][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.660415][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.661735][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.664920][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.674798][ T4339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.676341][ T4339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.677880][ T4339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.679450][ T4339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.681928][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.683636][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.685325][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.686791][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.698937][ T4334] device veth0_vlan entered promiscuous mode [ 32.726277][ T4404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.727747][ T4404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.731622][ T4334] device veth1_vlan entered promiscuous mode [ 32.737083][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.738913][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.770539][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.772306][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.775648][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.779101][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.780442][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.781084][ T1589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.782349][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.783000][ T1589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.787096][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.799808][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.801668][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.804164][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.805876][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.809627][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.811296][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.814673][ T4344] device veth0_vlan entered promiscuous mode [ 32.816270][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.817575][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.825120][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.827538][ T4334] device veth0_macvtap entered promiscuous mode [ 32.832966][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.834908][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.835632][ T4344] device veth1_vlan entered promiscuous mode [ 32.840463][ T4334] device veth1_macvtap entered promiscuous mode [ 32.841934][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.843809][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.845337][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.846832][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.852981][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.854896][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.859970][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.861704][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.872264][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.880238][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.881911][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.886161][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.887950][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.889829][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.892173][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.898348][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.900043][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.921521][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.923960][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.929846][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.931721][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.011721][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.018477][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.020168][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.022202][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.025204][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.030120][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.031858][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.037264][ T4344] device veth0_macvtap entered promiscuous mode [ 33.040437][ T4334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.042020][ T4334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.045605][ T4334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.047069][ T4334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.055598][ T4344] device veth1_macvtap entered promiscuous mode [ 33.289273][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.291505][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.295752][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.298075][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.300174][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.302440][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.307891][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.309724][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.312583][ T4344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.315940][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.317759][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.334399][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.336473][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.338164][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.340121][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.342164][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.344508][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.346395][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.348382][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.351089][ T4344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.352610][ T4420] netlink: 'syz.1.7': attribute type 1 has an invalid length. [ 33.359148][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.361140][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.365222][ T4344] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.366976][ T4344] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.368724][ T4344] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.370292][ T4344] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.372732][ T4420] 8021q: VLANs not supported on ip6_vti0 [ 33.461269][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.462764][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.467548][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.489341][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.490989][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.495080][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.519958][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.521605][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.523018][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.551093][ T1589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.552626][ T1589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.556882][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.011114][ T4333] Bluetooth: hci1: command 0x041b tx timeout [ 34.014718][ T4340] Bluetooth: hci2: command 0x041b tx timeout [ 34.016136][ T4343] Bluetooth: hci3: command 0x041b tx timeout [ 34.017327][ T4331] Bluetooth: hci4: command 0x041b tx timeout [ 34.018444][ T4335] Bluetooth: hci0: command 0x041b tx timeout [ 34.072477][ T4434] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET) [ 34.081389][ T4434] loop2: detected capacity change from 0 to 512 [ 34.088292][ T4434] EXT4-fs: Ignoring removed nobh option [ 34.102174][ T4434] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 34.109354][ T4434] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.9: attempt to clear invalid blocks 1 len 1 [ 34.113833][ T4434] EXT4-fs (loop2): Remounting filesystem read-only [ 34.115228][ T4434] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 34.118344][ T4434] EXT4-fs (loop2): Remounting filesystem read-only [ 34.119872][ T4434] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.9: invalid indirect mapped block 1819239214 (level 0) [ 34.131337][ T4434] EXT4-fs (loop2): Remounting filesystem read-only [ 34.132866][ T4434] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.9: invalid indirect mapped block 1819239214 (level 1) [ 34.135871][ T4434] EXT4-fs (loop2): Remounting filesystem read-only [ 34.140390][ T4434] EXT4-fs (loop2): 1 truncate cleaned up [ 34.142373][ T4434] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 34.163104][ T4434] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 34.260122][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 34.286860][ T4444] loop2: detected capacity change from 0 to 256 [ 34.289081][ T4444] exfat: Bad value for 'errors' [ 34.629698][ T4319] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 34.646783][ T4448] loop4: detected capacity change from 0 to 512 [ 34.648284][ T4448] EXT4-fs: Ignoring removed nobh option [ 34.663580][ T4449] device syzkaller0 entered promiscuous mode [ 34.672600][ T4331] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 34.674539][ T4331] CPU: 1 PID: 4331 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 34.675814][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 34.677691][ T4331] Workqueue: hci0 hci_rx_work [ 34.678541][ T4331] Call trace: [ 34.679184][ T4331] dump_backtrace+0x1c4/0x1f0 [ 34.680041][ T4331] show_stack+0x2c/0x3c [ 34.680800][ T4331] __dump_stack+0x30/0x40 [ 34.681588][ T4331] dump_stack_lvl+0xf4/0x15c [ 34.682408][ T4331] dump_stack+0x1c/0x5c [ 34.683136][ T4331] sysfs_create_dir_ns+0x244/0x264 [ 34.684024][ T4331] kobject_add_internal+0x5a8/0xb18 [ 34.684996][ T4331] kobject_add+0x144/0x20c [ 34.685836][ T4331] device_add+0x3dc/0xe4c [ 34.686623][ T4331] hci_conn_add_sysfs+0xb8/0x1bc [ 34.687503][ T4331] le_conn_complete_evt+0xd3c/0x1300 [ 34.688419][ T4331] hci_le_conn_complete_evt+0x114/0x3b8 [ 34.689439][ T4331] hci_le_meta_evt+0x2c0/0x4a8 [ 34.690298][ T4331] hci_event_packet+0x64c/0xe60 [ 34.691145][ T4331] hci_rx_work+0x320/0xa94 [ 34.691945][ T4331] process_one_work+0x7e4/0x13bc [ 34.692877][ T4331] worker_thread+0x8cc/0xfe8 [ 34.693802][ T4331] kthread+0x254/0x2e0 [ 34.694525][ T4331] ret_from_fork+0x10/0x20 [ 34.698014][ T4331] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 34.700341][ T4331] Bluetooth: hci0: failed to register connection device [ 34.708672][ T4444] loop2: detected capacity change from 0 to 512 [ 34.708772][ T4448] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 34.716587][ T4451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.718606][ T4451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.728891][ T4444] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 34.793547][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 35.374869][ T4465] device wlan0 entered promiscuous mode [ 35.499798][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 36.093488][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 36.093514][ T4331] Bluetooth: hci4: command 0x040f tx timeout [ 36.095670][ T4340] Bluetooth: hci3: command 0x040f tx timeout [ 36.095689][ T4335] Bluetooth: hci0: command 0x040f tx timeout [ 36.098026][ T4343] Bluetooth: hci1: command 0x040f tx timeout [ 37.094085][ T4509] process 'syz.1.32' launched './file1' with NULL argv: empty string added [ 38.173230][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 38.173572][ T4331] Bluetooth: hci4: command 0x0419 tx timeout [ 38.174570][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 38.175615][ T4331] Bluetooth: hci1: command 0x0419 tx timeout [ 40.253260][ T4340] Bluetooth: hci1: command 0x0406 tx timeout [ 47.902693][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 47.906556][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 47.928384][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 47.931055][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 47.932475][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 47.945363][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 47.946744][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 47.949087][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 47.951536][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 48.034239][ T4584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.52'. [ 48.413298][ T4591] netlink: 16 bytes leftover after parsing attributes in process `syz.3.55'. [ 48.782061][ T4598] loop0: detected capacity change from 0 to 32768 [ 49.525831][ T4596] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 49.527115][ T4596] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 49.528919][ T4596] vhci_hcd vhci_hcd.0: Device attached [ 49.544013][ T4597] vhci_hcd: connection closed [ 49.546079][ T11] vhci_hcd: stop threads [ 49.548003][ T11] vhci_hcd: release socket [ 49.548949][ T11] vhci_hcd: disconnect device [ 49.926318][ T4608] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 50.098428][ T4622] netlink: 32 bytes leftover after parsing attributes in process `syz.1.64'. [ 50.102106][ T4615] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4330] was attempted by " [ 50.129899][ T4619] netlink: 'syz.0.63': attribute type 1 has an invalid length. [ 50.492637][ T4637] Cannot find set identified by id 0 to match [ 50.673868][ T4619] bond0: (slave bond_slave_0): Releasing backup interface [ 51.319594][ T4651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.71'. [ 51.325680][ T4656] device macvlan2 entered promiscuous mode [ 51.328053][ T4655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 51.993800][ T4669] loop0: detected capacity change from 0 to 128 [ 52.253048][ T4672] loop4: detected capacity change from 0 to 32768 [ 52.913143][ C1] sched: RT throttling activated [ 53.400834][ T4672] XFS (loop4): Mounting V5 Filesystem [ 53.434067][ T4672] XFS (loop4): Ending clean mount [ 53.438515][ T4672] XFS (loop4): Quotacheck needed: Please wait. [ 53.567629][ T4689] loop1: detected capacity change from 0 to 1024 [ 53.573674][ T4689] EXT4-fs: Ignoring removed bh option [ 53.575060][ T4689] EXT4-fs: Ignoring removed oldalloc option [ 53.576497][ T4689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.837583][ T4689] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 54.019195][ T4689] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 54.020783][ T4689] System zones: 0-1, 3-36 [ 54.035840][ T4672] XFS (loop4): Quotacheck: Done. [ 54.097271][ T4689] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 54.219813][ T4344] XFS (loop4): Unmounting Filesystem [ 54.434874][ T4669] [ 54.435480][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 54.437389][ T4669] FAT-fs (loop0): Filesystem has been set read-only [ 54.442919][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 54.456283][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 54.457799][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 54.545164][ T4695] Zero length message leads to an empty skb [ 54.546824][ T4695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'. [ 54.549579][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 54.550984][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 54.552281][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 54.581471][ T4699] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 54.908095][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 54.909677][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 54.911237][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 54.912610][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 54.955097][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 54.960917][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 54.967863][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 54.974714][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 54.981623][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.000920][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.010065][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.011862][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.033294][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.039250][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.042007][ T4703] loop2: detected capacity change from 0 to 2048 [ 55.054233][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.056099][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.059183][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.071195][ T4703] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 55.077176][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.082545][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.092721][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.096183][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.097731][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.122124][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.129706][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.131293][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.148251][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.154806][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.159692][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 55.161562][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.180824][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.182796][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.184408][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.185782][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.187224][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.188686][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.190120][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.191397][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.192722][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.194974][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.196565][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.198001][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.199432][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.201063][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.202568][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.208592][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.210059][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.212542][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.214182][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.217003][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.219195][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.220949][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.222562][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.224265][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.225863][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.227563][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.229050][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.230750][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.232302][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.236028][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.237555][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.239298][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.240890][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.242667][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.244518][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.246277][ T4669] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 55.697239][ T4715] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 55.699055][ T4715] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 55.700827][ T4715] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 55.702474][ T4715] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 55.704196][ T4715] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 55.705937][ T4715] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 55.707726][ T4715] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 55.709538][ T4715] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 55.711279][ T4715] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 55.712992][ T4715] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 57.644116][ T4724] loop4: detected capacity change from 0 to 164 [ 57.667420][ T4733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.93'. [ 57.747174][ T4589] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 58.088082][ T4743] netlink: 'syz.4.97': attribute type 4 has an invalid length. [ 58.111453][ T4741] device syzkaller0 entered promiscuous mode [ 58.147410][ T4746] netlink: 'syz.4.97': attribute type 4 has an invalid length. [ 58.575577][ T4743] netlink: 'syz.4.97': attribute type 4 has an invalid length. [ 58.697506][ T4759] netlink: 'syz.4.103': attribute type 1 has an invalid length. [ 58.729173][ T4762] capability: warning: `syz.1.102' uses deprecated v2 capabilities in a way that may be insecure [ 59.183028][ T4766] device veth0_virt_wifi entered promiscuous mode [ 59.555998][ T4772] loop0: detected capacity change from 0 to 512 [ 59.582977][ T4772] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 59.584913][ T4772] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 59.586487][ T4772] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 59.608173][ T4772] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 59.609750][ T4772] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 59.611590][ T4772] EXT4-fs (loop0): failed to initialize system zone (-117) [ 59.612837][ T4772] EXT4-fs (loop0): mount failed [ 60.141285][ T4798] netlink: 'syz.0.112': attribute type 4 has an invalid length. [ 60.209125][ T4798] netlink: 'syz.0.112': attribute type 4 has an invalid length. [ 60.271218][ T4803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.114'. [ 60.314039][ T4805] device syzkaller0 entered promiscuous mode [ 60.399589][ T4801] loop3: detected capacity change from 0 to 32768 [ 60.466688][ T4801] (syz.3.111,4801,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 60.480930][ T4801] (syz.3.111,4801,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 60.492116][ T4801] JBD2: Ignoring recovery information on journal [ 60.548416][ T4801] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 60.548841][ T4814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.118'. [ 60.559381][ T4814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.118'. [ 60.662305][ T4814] device dummy0 entered promiscuous mode [ 61.014156][ T4814] device dummy0 left promiscuous mode [ 61.155344][ T4330] ocfs2: Unmounting device (7,3) on (node local) [ 62.977402][ T4853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.127'. [ 64.335371][ T4879] netlink: 'syz.3.136': attribute type 2 has an invalid length. [ 64.337151][ T4879] netlink: 'syz.3.136': attribute type 1 has an invalid length. [ 64.338826][ T4879] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.136'. [ 64.460936][ T4884] bridge0: port 3(syz_tun) entered blocking state [ 64.462380][ T4884] bridge0: port 3(syz_tun) entered disabled state [ 64.466131][ T4884] device syz_tun entered promiscuous mode [ 64.468520][ T4884] bridge0: port 3(syz_tun) entered blocking state [ 64.469879][ T4884] bridge0: port 3(syz_tun) entered forwarding state [ 64.486002][ T4884] bridge0: port 4(bond0) entered blocking state [ 64.501468][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.503380][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.509901][ T4884] bridge0: port 4(bond0) entered disabled state [ 64.512426][ T4884] device bond0 entered promiscuous mode [ 64.513735][ T4884] device bond_slave_0 entered promiscuous mode [ 64.518403][ T4884] device bond_slave_1 entered promiscuous mode [ 64.519869][ T4884] bridge0: port 4(bond0) entered blocking state [ 64.520987][ T4884] bridge0: port 4(bond0) entered forwarding state [ 64.528293][ T4884] bridge0: port 5(team0) entered blocking state [ 64.529596][ T4884] bridge0: port 5(team0) entered disabled state [ 64.532296][ T4884] device team0 entered promiscuous mode [ 64.537055][ T4884] device team_slave_0 entered promiscuous mode [ 64.540857][ T4884] device team_slave_1 entered promiscuous mode [ 64.543121][ T4884] bridge0: port 5(team0) entered blocking state [ 64.544325][ T4884] bridge0: port 5(team0) entered forwarding state [ 64.557051][ T4884] bridge0: port 6(dummy0) entered blocking state [ 64.558339][ T4884] bridge0: port 6(dummy0) entered disabled state [ 64.559876][ T4884] device dummy0 entered promiscuous mode [ 64.561179][ T4884] bridge0: port 6(dummy0) entered blocking state [ 64.562390][ T4884] bridge0: port 6(dummy0) entered forwarding state [ 64.565323][ T4888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 64.581949][ T4888] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.583998][ T4888] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.592620][ T4884] bridge0: port 7(batadv0) entered blocking state [ 64.594282][ T4884] bridge0: port 7(batadv0) entered disabled state [ 64.596125][ T4884] device batadv0 entered promiscuous mode [ 64.597513][ T4884] bridge0: port 7(batadv0) entered blocking state [ 64.599345][ T4884] bridge0: port 7(batadv0) entered forwarding state [ 64.728928][ T4901] loop1: detected capacity change from 0 to 128 [ 64.736470][ T4483] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 64.738185][ T4483] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 64.993218][ T4905] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 66.095329][ T4922] loop0: detected capacity change from 0 to 256 [ 66.435612][ T4922] FAT-fs (loop0): Directory bread(block 64) failed [ 66.436903][ T4922] FAT-fs (loop0): Directory bread(block 65) failed [ 66.438000][ T4922] FAT-fs (loop0): Directory bread(block 66) failed [ 66.439175][ T4922] FAT-fs (loop0): Directory bread(block 67) failed [ 66.440376][ T4922] FAT-fs (loop0): Directory bread(block 68) failed [ 66.441440][ T4922] FAT-fs (loop0): Directory bread(block 69) failed [ 66.442562][ T4922] FAT-fs (loop0): Directory bread(block 70) failed [ 66.443796][ T4922] FAT-fs (loop0): Directory bread(block 71) failed [ 66.444916][ T4922] FAT-fs (loop0): Directory bread(block 72) failed [ 66.446038][ T4922] FAT-fs (loop0): Directory bread(block 73) failed [ 66.998502][ T4938] device syzkaller0 entered promiscuous mode [ 67.699080][ T4945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 67.798864][ T4950] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.800533][ T4950] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.802645][ T4950] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.806146][ T4950] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.808613][ T4950] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 67.825037][ T4950] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 67.863657][ T4952] loop4: detected capacity change from 0 to 8192 [ 67.891797][ T4950] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 67.894588][ T4950] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 67.896394][ T4950] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 67.901975][ T4950] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 68.497058][ T4950] bond1 (unregistering): Released all slaves [ 68.872088][ T4977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.167'. [ 68.874122][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.053237][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 69.057108][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 69.061790][ T22] usb 1-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 69.064173][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.065673][ T22] usb 1-1: Product: syz [ 69.066471][ T22] usb 1-1: Manufacturer: syz [ 69.068578][ T22] usb 1-1: SerialNumber: syz [ 69.559738][ T4986] loop1: detected capacity change from 0 to 2048 [ 69.575272][ T4986] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 69.577059][ T4986] UDF-fs: Scanning with blocksize 512 failed [ 69.588944][ T4986] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 69.599685][ T22] usb 1-1: cannot setup if 1: error -71 [ 69.601590][ T22] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 69.620204][ T22] usb 1-1: cannot setup if 1: error -71 [ 69.621532][ T22] snd-usb-audio: probe of 1-1:1.1 failed with error -71 [ 69.624779][ T111] cfg80211: failed to load regulatory.db [ 69.638271][ T22] usb 1-1: cannot setup if 1: error -71 [ 69.668548][ T22] snd-usb-audio: probe of 1-1:1.2 failed with error -71 [ 69.685730][ T22] usb 1-1: USB disconnect, device number 2 [ 69.904897][ T4589] udevd[4589]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.499079][ T5005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.173'. [ 70.509971][ T5005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.561612][ T5005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.568456][ T5005] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 70.608257][ T5005] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 70.648086][ T5008] bond1: (slave vlan2): Opening slave failed [ 70.760414][ T5012] loop1: detected capacity change from 0 to 512 [ 70.812087][ T5012] EXT4-fs (loop1): Test dummy encryption mode enabled [ 71.122621][ T5012] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.174: inode has both inline data and extents flags [ 71.142699][ T5012] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.174: couldn't read orphan inode 15 (err -117) [ 71.151552][ T5012] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 71.207487][ T5012] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 71.615432][ T5012] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 71.736320][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 71.741564][ T5032] loop3: detected capacity change from 0 to 40427 [ 71.749162][ T5032] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(3584) [ 71.751338][ T5032] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 71.756290][ T5032] F2FS-fs (loop3): invalid crc value [ 71.803600][ T5032] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 71.833131][ T5032] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 71.835106][ T5032] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 71.912768][ T5043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.917318][ T5043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.945353][ T11] kworker/u4:1: attempt to access beyond end of device [ 71.945353][ T11] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 71.955796][ T5032] overlayfs: cleanup of 'bus/work' failed (-5) [ 71.957647][ T5032] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 71.981782][ T4330] syz-executor: attempt to access beyond end of device [ 71.981782][ T4330] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 72.301007][ T4330] syz-executor: attempt to access beyond end of device [ 72.301007][ T4330] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 72.324894][ T5037] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.327029][ T5037] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.721480][ T5037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.738854][ T5037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.050833][ T5037] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.052627][ T5037] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.057182][ T5037] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.058892][ T5037] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.347545][ T5042] netlink: 'syz.4.180': attribute type 1 has an invalid length. [ 73.387059][ T4330] bridge0: port 3(syz_tun) entered disabled state [ 73.484997][ T4330] device syz_tun left promiscuous mode [ 73.486355][ T4330] bridge0: port 3(syz_tun) entered disabled state [ 74.306249][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.385432][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.424547][ T4340] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.426842][ T4340] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.428831][ T4340] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.430539][ T4340] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.432910][ T4340] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.434771][ T4340] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.464326][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.527035][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.622515][ T5087] tipc: Started in network mode [ 74.624442][ T5087] tipc: Node identity 2007ff, cluster identity 4711 [ 74.625683][ T5087] tipc: Node number set to 2099199 [ 75.094794][ T5076] chnl_net:caif_netlink_parms(): no params data found [ 75.332349][ T5125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.198'. [ 75.800524][ T5076] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.801981][ T5076] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.804068][ T5076] device bridge_slave_0 entered promiscuous mode [ 75.806570][ T5076] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.807916][ T5076] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.809561][ T5076] device bridge_slave_1 entered promiscuous mode [ 75.818240][ T5076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.821570][ T5076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.872712][ T5076] team0: Port device team_slave_0 added [ 75.875419][ T5076] team0: Port device team_slave_1 added [ 75.881627][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.883041][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.887699][ T5076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.891465][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.893024][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.897777][ T5076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.994979][ T5076] device hsr_slave_0 entered promiscuous mode [ 76.044139][ T5076] device hsr_slave_1 entered promiscuous mode [ 76.113888][ T5076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.115254][ T5076] Cannot create hsr debugfs directory [ 76.553129][ T5155] ======================================================= [ 76.553129][ T5155] WARNING: The mand mount option has been deprecated and [ 76.553129][ T5155] and is ignored by this kernel. Remove the mand [ 76.553129][ T5155] option from the mount to silence this warning. [ 76.553129][ T5155] ======================================================= [ 77.058676][ T4331] Bluetooth: hci2: command 0x0409 tx timeout [ 78.221120][ T5177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.210'. [ 78.226757][ T5177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.485619][ T5185] netlink: 32 bytes leftover after parsing attributes in process `syz.0.212'. [ 78.501367][ T5186] netlink: 32 bytes leftover after parsing attributes in process `syz.0.212'. [ 78.522121][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.580216][ T5076] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 78.666876][ T5076] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.674501][ T5201] sctp: [Deprecated]: syz.2.217 (pid 5201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 78.674501][ T5201] Use struct sctp_sack_info instead [ 79.918235][ T4340] Bluetooth: hci2: command 0x041b tx timeout [ 80.325206][ T5076] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 80.403676][ T5076] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 82.122231][ T4331] Bluetooth: hci2: command 0x040f tx timeout [ 82.182107][ T5251] device syzkaller0 entered promiscuous mode [ 82.226360][ T5076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.637160][ T5076] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.283584][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.289192][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.318053][ T5295] No such timeout policy "syz1" [ 83.812129][ T5298] netlink: 20 bytes leftover after parsing attributes in process `syz.0.234'. [ 83.825097][ T5298] device geneve3 entered promiscuous mode [ 83.830780][ T11] device hsr_slave_0 left promiscuous mode [ 83.873898][ T11] device hsr_slave_1 left promiscuous mode [ 83.931589][ T27] audit: type=1326 audit(83.910:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5302 comm="syz.0.236" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff819781a8 code=0x0 [ 84.292414][ T4340] Bluetooth: hci2: command 0x0419 tx timeout [ 84.303608][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.305317][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.314980][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.318473][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.325454][ T11] device batadv0 left promiscuous mode [ 84.329561][ T11] bridge0: port 7(batadv0) entered disabled state [ 84.928118][ T11] device dummy0 left promiscuous mode [ 84.929197][ T11] bridge0: port 6(dummy0) entered disabled state [ 84.963122][ T11] device team0 left promiscuous mode [ 84.964285][ T11] device team_slave_0 left promiscuous mode [ 84.965590][ T11] device team_slave_1 left promiscuous mode [ 84.967834][ T11] bridge0: port 5(team0) entered disabled state [ 85.044984][ T11] device bond0 left promiscuous mode [ 85.045993][ T11] device bond_slave_0 left promiscuous mode [ 85.047052][ T11] device bond_slave_1 left promiscuous mode [ 85.048146][ T11] bridge0: port 4(bond0) entered disabled state [ 85.084748][ T11] device bridge_slave_1 left promiscuous mode [ 85.086048][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.116979][ T11] device bridge_slave_0 left promiscuous mode [ 85.118100][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.663740][ T11] device veth1_macvtap left promiscuous mode [ 85.665368][ T11] device veth0_macvtap left promiscuous mode [ 85.666742][ T11] device veth1_vlan left promiscuous mode [ 85.668148][ T11] device veth0_vlan left promiscuous mode [ 86.152106][ T5352] loop1: detected capacity change from 0 to 256 [ 86.206610][ T5259] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 89.305326][ T11] team0 (unregistering): Port device team_slave_1 removed [ 89.464680][ T11] team0 (unregistering): Port device team_slave_0 removed [ 89.623645][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.824253][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.354797][ T11] bond0 (unregistering): Released all slaves [ 91.649854][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.651634][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.653125][ T4729] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.654496][ T4729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.656382][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.658816][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.660459][ T4729] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.661766][ T4729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.663547][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.665263][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.667007][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.685860][ T5369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.251'. [ 91.687602][ T5382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.257'. [ 91.708244][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.710683][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.716387][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.718033][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.719639][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.721353][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.723028][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.725973][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.764650][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.775086][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.791420][ T5394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.261'. [ 91.858453][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.261'. [ 91.860147][ T5394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.261'. [ 91.868891][ T5394] bond2: (slave veth3): Enslaving as an active interface with an up link [ 92.124190][ T5076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.128157][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.129508][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.197777][ T5416] dns_resolver: Unsupported server list version (6) [ 93.381393][ T5437] loop0: detected capacity change from 0 to 512 [ 93.439800][ T5437] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 93.519617][ T5437] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.267: corrupted inode contents [ 93.551299][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.553644][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.618324][ T5437] EXT4-fs (loop0): Remounting filesystem read-only [ 93.619595][ T5437] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #2: comm syz.0.267: mark_inode_dirty error [ 93.628270][ T5437] EXT4-fs (loop0): Remounting filesystem read-only [ 93.631318][ T5437] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.267: corrupted inode contents [ 93.638004][ T5437] EXT4-fs (loop0): Remounting filesystem read-only [ 93.641453][ T5437] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.267: mark_inode_dirty error [ 93.645844][ T5437] EXT4-fs (loop0): Remounting filesystem read-only [ 94.827142][ T5076] device veth0_vlan entered promiscuous mode [ 94.830486][ T5076] device veth1_vlan entered promiscuous mode [ 94.865588][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.867509][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.869087][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.870584][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.985506][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.090259][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.285239][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.287213][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.303115][ T5076] device veth0_macvtap entered promiscuous mode [ 95.472410][ T5076] device veth1_macvtap entered promiscuous mode [ 95.631008][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 95.639119][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.643246][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.648414][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.650317][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.658383][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.662321][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.690781][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.701080][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.703008][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.709452][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.712732][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.722520][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.763719][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.766946][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.769536][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.771410][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.774705][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.781397][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.784739][ T5076] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.786283][ T5076] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.787818][ T5076] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.789542][ T5076] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.069417][ T5479] loop1: detected capacity change from 0 to 128 [ 96.073116][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.075507][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.138789][ T5479] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 96.143443][ T4693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.144868][ T4693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.146293][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.184539][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.185987][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.187427][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.416798][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 97.025634][ T5521] netlink: 40 bytes leftover after parsing attributes in process `syz.4.280'. [ 97.787195][ T5537] Injecting memory failure for pfn 0x119f46 at process virtual address 0x20001000 [ 97.816048][ T5537] Memory failure: 0x119f46: recovery action for clean unevictable LRU page: Recovered [ 97.817814][ T5537] Injecting memory failure for pfn 0x114ee5 at process virtual address 0x20002000 [ 97.821092][ T5537] Memory failure: 0x114ee5: recovery action for clean unevictable LRU page: Recovered [ 97.822745][ T5537] Injecting memory failure for pfn 0x114ee4 at process virtual address 0x20003000 [ 97.833500][ T5537] Memory failure: 0x114ee4: recovery action for clean unevictable LRU page: Recovered [ 97.939922][ T5559] loop1: detected capacity change from 0 to 256 [ 97.956997][ T5559] exfat: Deprecated parameter 'utf8' [ 97.962482][ T5559] exfat: Deprecated parameter 'namecase' [ 97.976251][ T5559] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 98.014499][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000bd671596: rx timeout, send abort [ 98.031741][ T5551] device wlan0 entered promiscuous mode [ 98.516749][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000bd671596: abort rx timeout. Force session deactivation [ 98.526977][ T5577] netlink: 'syz.1.294': attribute type 4 has an invalid length. [ 98.542460][ T5579] netlink: 'syz.5.295': attribute type 4 has an invalid length. [ 98.569421][ T5577] netlink: 'syz.1.294': attribute type 4 has an invalid length. [ 98.585501][ T5577] netlink: 'syz.1.294': attribute type 4 has an invalid length. [ 98.606628][ T5579] netlink: 'syz.5.295': attribute type 4 has an invalid length. [ 99.771921][ T5621] Invalid ELF header magic: != ELF [ 99.801473][ T5627] 9pnet_fd: Insufficient options for proto=fd [ 99.806377][ T5627] bridge_slave_0: default FDB implementation only supports local addresses [ 99.836361][ T5626] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20003 [ 99.849708][ T5628] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 101.833877][ T5686] tipc: Failed to remove unknown binding: 66,0,0/0:1155832493/1155832494 [ 102.168789][ T5688] tipc: Failed to remove unknown binding: 66,0,0/0:230266634/230266636 [ 102.453866][ T5686] tipc: Failed to remove unknown binding: 66,0,0/0:1155832493/1155832494 [ 104.123235][ T5730] loop0: detected capacity change from 0 to 256 [ 104.838908][ T5736] netlink: 12 bytes leftover after parsing attributes in process `syz.5.332'. [ 105.421875][ T5764] netlink: 'syz.1.336': attribute type 10 has an invalid length. [ 105.426890][ T5764] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 105.479220][ T5769] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 105.480852][ T5769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 106.003413][ T5767] loop5: detected capacity change from 0 to 32768 [ 106.362270][ T5767] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.337 (5767) [ 106.376173][ T5781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 106.464106][ T5767] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.470545][ T5767] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm [ 106.477137][ T5767] BTRFS info (device loop5): turning on sync discard [ 106.480739][ T5767] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 106.483326][ T5767] BTRFS info (device loop5): use zstd compression, level 3 [ 106.484545][ T5767] BTRFS info (device loop5): turning on async discard [ 106.485767][ T5767] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 106.487473][ T5767] BTRFS info (device loop5): trying to use backup root at mount time [ 106.488857][ T5767] BTRFS info (device loop5): enabling auto defrag [ 106.489991][ T5767] BTRFS info (device loop5): turning on flush-on-commit [ 106.491172][ T5767] BTRFS info (device loop5): using free space tree [ 106.536932][ T1330] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 106.539864][ T5767] BTRFS error (device loop5): failed to load root extent [ 106.541248][ T5767] BTRFS warning (device loop5): try to load backup roots slot 1 [ 106.546298][ T1589] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 106.548988][ T5767] BTRFS warning (device loop5): couldn't read tree root [ 106.550386][ T5767] BTRFS warning (device loop5): try to load backup roots slot 2 [ 106.552117][ T5767] BTRFS error (device loop5): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 106.555694][ T5767] BTRFS warning (device loop5): couldn't read tree root [ 106.557062][ T5767] BTRFS warning (device loop5): try to load backup roots slot 3 [ 106.568499][ T5767] BTRFS info (device loop5): enabling ssd optimizations [ 106.571709][ T5767] BTRFS info (device loop5): rebuilding free space tree [ 106.589304][ T5767] BTRFS info (device loop5): checking UUID tree [ 107.391986][ T5767] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.880755][ T5922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.353'. [ 109.900851][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.354'. [ 110.338275][ T5961] overlayfs: unrecognized mount option "\']*=°˘°Šć[\1\" or missing value [ 112.308338][ T6063] loop1: detected capacity change from 0 to 40427 [ 112.345577][ T6063] F2FS-fs (loop1): invalid crc value [ 112.366691][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.372'. [ 112.370544][ T6063] F2FS-fs (loop1): Found nat_bits in checkpoint [ 112.442466][ T6096] netlink: 40 bytes leftover after parsing attributes in process `syz.5.371'. [ 112.750099][ T6063] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 112.867916][ T4329] syz-executor: attempt to access beyond end of device [ 112.867916][ T4329] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.981273][ T6116] binder: 6115:6116 tried to acquire reference to desc 0, got 1 instead [ 113.985885][ T6116] binder: 6115:6116 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 113.991177][ T6116] binder: 6116 RLIMIT_NICE not set [ 113.992122][ T6116] binder: 6116 RLIMIT_NICE not set [ 113.994191][ T6116] binder: 6116 RLIMIT_NICE not set [ 113.995102][ T6116] binder: 6115:6116 got transaction with invalid fd, -1 [ 113.998773][ T6116] binder: 6116:6115 translate fd failed [ 114.001043][ T6116] binder: 6115:6116 transaction reply to 6115:6116 failed 6/29201/-9, size 88-24 line 3432 [ 114.009877][ T6116] binder: send failed reply for transaction 5 to 6115:6116 [ 114.019650][ T4378] binder: undelivered TRANSACTION_COMPLETE [ 114.021626][ T4378] binder: undelivered TRANSACTION_ERROR: 29201 [ 114.023121][ T4378] binder: undelivered TRANSACTION_ERROR: 29190 [ 114.203568][ T6128] loop1: detected capacity change from 0 to 256 [ 115.492685][ T6129] loop0: detected capacity change from 0 to 512 [ 115.539990][ T6129] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 115.541507][ T6129] EXT4-fs (loop0): failed to open journal device unknown-block(8,1) -6 [ 115.827870][ T6142] bridge0: port 3(macvlan2) entered blocking state [ 115.829132][ T6142] bridge0: port 3(macvlan2) entered disabled state [ 115.830697][ T6142] device macvlan2 entered promiscuous mode [ 115.833875][ T6142] bridge0: port 3(macvlan2) entered blocking state [ 115.835248][ T6142] bridge0: port 3(macvlan2) entered forwarding state [ 116.728005][ T6161] netlink: 24 bytes leftover after parsing attributes in process `syz.5.390'. [ 117.215859][ T6176] tipc: Started in network mode [ 117.217018][ T6176] tipc: Node identity 7f000001, cluster identity 4711 [ 117.218363][ T6176] tipc: Enabling of bearer rejected, failed to enable media [ 117.220191][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.395'. [ 117.228884][ T6175] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.241920][ T6176] netlink: 104 bytes leftover after parsing attributes in process `syz.1.394'. [ 117.248490][ T6176] tipc: Enabling of bearer rejected, failed to enable media [ 117.252867][ T6175] device macvlan3 entered promiscuous mode [ 117.267760][ T6175] bond2: (slave vti0): refused to change device type [ 117.391685][ T6182] netlink: 'syz.1.397': attribute type 10 has an invalid length. [ 117.397240][ T6182] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.399276][ T6182] bond0: (slave team0): Enslaving as an active interface with an up link [ 117.457589][ T6186] device bond_slave_1 entered promiscuous mode [ 117.459519][ T6186] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 117.506222][ T6186] bond3: (slave macvlan4): making interface the new active one [ 117.525017][ T6186] bond3: (slave macvlan4): Enslaving as an active interface with an up link [ 117.548667][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.400'. [ 118.104375][ T4331] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 118.105941][ T4331] Bluetooth: hci4: Injecting HCI hardware error event [ 118.108283][ T4331] Bluetooth: hci4: hardware error 0x00 [ 118.602077][ T6221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.410'. [ 118.610594][ T6221] 8021q: adding VLAN 0 to HW filter on device bond4 [ 118.622464][ T6225] netlink: 'syz.5.412': attribute type 1 has an invalid length. [ 118.630253][ T6225] device bond1 entered promiscuous mode [ 118.631480][ T6225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.640495][ T6221] device macvlan2 entered promiscuous mode [ 119.057101][ T6225] bond1: (slave bridge1): making interface the new active one [ 119.058484][ T6225] device bridge1 entered promiscuous mode [ 119.060206][ T6225] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 119.070009][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 119.094561][ T6221] bond4: (slave vti0): refused to change device type [ 119.131717][ T6231] loop1: detected capacity change from 0 to 8192 [ 119.135048][ T6231] FAT-fs (loop1): Unrecognized mount option "./file0" or missing value [ 119.231436][ T5484] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.608369][ T6239] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 119.613622][ T6239] CIFS: Attempting to mount \\127.0.0.1\share [ 119.964916][ T6239] CIFS: VFS: Error connecting to socket. Aborting operation. [ 119.966645][ T6239] CIFS: VFS: cifs_mount failed w/return code = -4 [ 120.543940][ T6255] loop0: detected capacity change from 0 to 512 [ 120.562589][ T6255] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.420: iget: bad i_size value: 38620345925642 [ 120.567401][ T6255] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.420: couldn't read orphan inode 15 (err -117) [ 120.571310][ T6255] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 120.573365][ T4331] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 120.722151][ T6255] EXT4-fs (loop0): shut down requested (1) [ 121.128102][ T6270] tipc: Started in network mode [ 121.129102][ T6270] tipc: Node identity efcdab90785634122143658709badcfe, cluster identity 4568 [ 121.131164][ T6270] tipc: Enabling of bearer rejected, failed to enable media [ 121.197759][ T6273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.426'. [ 121.234992][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 122.119838][ T6289] loop1: detected capacity change from 0 to 128 [ 122.282505][ T6289] FAT-fs (loop1): bogus number of FAT structure [ 122.283738][ T6289] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 122.285487][ T6289] FAT-fs (loop1): Can't find a valid FAT filesystem [ 122.394717][ T5484] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 123.870463][ T6312] netlink: 'syz.2.436': attribute type 10 has an invalid length. [ 123.884942][ T6312] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.887084][ T6312] bond0: (slave team0): Enslaving as an active interface with an up link [ 123.888641][ T6313] netlink: 'syz.0.437': attribute type 1 has an invalid length. [ 123.903043][ T6313] bond4: (slave gretap1): making interface the new active one [ 123.905091][ T6313] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 124.215950][ T6313] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 124.296394][ T6328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.443'. [ 124.736831][ T6325] syz.4.442 sent an empty control message without MSG_MORE. [ 126.727122][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.728318][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.746046][ T6355] netlink: 'syz.1.450': attribute type 13 has an invalid length. [ 130.142554][ T6362] netlink: 'syz.2.452': attribute type 2 has an invalid length. [ 130.158488][ T6368] netlink: 'syz.4.455': attribute type 10 has an invalid length. [ 130.249628][ T6368] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.255091][ T6368] bond0: (slave team0): Enslaving as an active interface with an up link [ 132.521412][ T6407] device syzkaller0 entered promiscuous mode [ 132.547717][ T6408] sch_tbf: burst 1520 is lower than device lo mtu (11337746) ! [ 133.837854][ T6423] sctp: [Deprecated]: syz.4.469 (pid 6423) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.837854][ T6423] Use struct sctp_sack_info instead [ 133.869451][ T6429] loop0: detected capacity change from 0 to 8 [ 133.926810][ T6429] squashfs image failed sanity check [ 135.294315][ T6454] loop1: detected capacity change from 0 to 131072 [ 135.303719][ T6454] F2FS-fs (loop1): Test dummy encryption mode enabled [ 135.305400][ T6454] F2FS-fs (loop1): invalid crc value [ 135.319757][ T6454] F2FS-fs (loop1): Found nat_bits in checkpoint [ 135.331572][ T6454] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 136.073089][ T27] audit: type=1326 audit(136.050:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.2.488" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa93781a8 code=0x0 [ 138.228513][ T6514] netlink: 'syz.5.493': attribute type 13 has an invalid length. [ 138.242699][ T6514] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 138.257315][ T6514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.261396][ T6514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.369869][ T6539] overlayfs: failed to clone lowerpath [ 139.375709][ T6539] overlayfs: failed to clone lowerpath [ 140.769579][ T6552] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4339] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[6552] [ 140.903013][ T6559] netlink: 'syz.0.507': attribute type 13 has an invalid length. [ 140.909850][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.991254][ T6562] af_packet: tpacket_rcv: packet too big, clamped from 4087 to 4294967272. macoff=96 [ 142.498701][ T6599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.518'. [ 142.500528][ T6599] netlink: 18 bytes leftover after parsing attributes in process `syz.0.518'. [ 143.311963][ T6614] netlink: 'syz.1.532': attribute type 1 has an invalid length. [ 143.331031][ T6614] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 143.333023][ T6614] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 143.337665][ T6614] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 143.339331][ T6614] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 143.343844][ T6614] bond2: (slave geneve3): making interface the new active one [ 143.345808][ T6614] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 143.378072][ T6614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.532'. [ 143.380402][ T6614] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.458273][ T6633] loop0: detected capacity change from 0 to 512 [ 144.514333][ T6634] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4344] was attempted by " [ 144.849308][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 145.226524][ T6633] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 145.277657][ T6633] EXT4-fs warning (device loop0): __ext4_ioctl:1253: Setting inode version is not supported with metadata_csum enabled. [ 145.318918][ T6740] netlink: 'syz.4.528': attribute type 13 has an invalid length. [ 145.325930][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 145.329994][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.331757][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.845080][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 146.590607][ T6759] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 146.592465][ T6759] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 147.212971][ T6778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.919474][ T6787] using random self ethernet address [ 147.922523][ T6787] using random host ethernet address [ 147.962747][ T6787] usb0: HOST MAC 8a:87:b8:7e:ea:49 [ 147.964185][ T6787] usb0: MAC fe:6a:48:d4:a4:5e [ 148.088982][ T27] audit: type=1326 audit(149.062:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.4.546" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff965781a8 code=0x0 [ 148.508190][ T4376] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 148.853937][ T4376] usb 1-1: Dual-Role OTG device on HNP port [ 148.855352][ T4376] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 148.857147][ T4376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.872200][ T4376] usb 1-1: bad CDC descriptors [ 148.876025][ T4376] gspca_main: spca501-2.14.0 probing 0000:0000 [ 148.879432][ T4376] gspca_spca501: reg write: error -32 [ 148.880366][ T4376] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 148.883818][ T4376] spca501: probe of 1-1:1.0 failed with error -22 [ 150.048646][ T6860] loop0: detected capacity change from 0 to 128 [ 150.075047][ T6860] FAT-fs (loop0): bogus number of FAT structure [ 150.076544][ T6860] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 150.078335][ T6860] FAT-fs (loop0): Can't find a valid FAT filesystem [ 150.138395][ T6353] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 150.384079][ T6873] loop0: detected capacity change from 0 to 4096 [ 150.406815][ T6873] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 150.844523][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 151.456542][ T6898] netlink: 'syz.2.563': attribute type 1 has an invalid length. [ 151.474740][ T6898] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.476635][ T6898] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.478391][ T6898] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.479866][ T6898] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.483485][ T6898] bond1: (slave geneve2): making interface the new active one [ 151.485647][ T6898] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 151.488422][ T6901] device syzkaller0 entered promiscuous mode [ 151.501171][ T6898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.563'. [ 151.511633][ T6898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.545835][ T4331] ------------[ cut here ]------------ [ 151.547043][ T4331] WARNING: CPU: 0 PID: 4331 at net/bluetooth/hci_conn.c:670 hci_conn_timeout+0x204/0x41c [ 151.548721][ T4331] Modules linked in: [ 151.549420][ T4331] CPU: 0 PID: 4331 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 151.550790][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 151.552529][ T4331] Workqueue: hci1 hci_conn_timeout [ 151.553442][ T4331] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 151.554855][ T4331] pc : hci_conn_timeout+0x204/0x41c [ 151.555767][ T4331] lr : hci_conn_timeout+0x204/0x41c [ 151.556701][ T4331] sp : ffff800021047b60 [ 151.557450][ T4331] x29: ffff800021047b60 x28: 0000000000000000 x27: ffff0000d2810330 [ 151.558925][ T4331] x26: 0000000000000001 x25: ffff0000d6adac00 x24: ffff0000c4ade800 [ 151.560392][ T4331] x23: ffff0000c087ee18 x22: dfff800000000000 x21: 00000000ffffffff [ 151.561835][ T4331] x20: ffff0000d2810000 x19: ffff0000d2810330 x18: 1fffe00033e7277e [ 151.563272][ T4331] x17: ffff800010d60fa8 x16: ffff800011b90080 x15: 000000000004ffff [ 151.564665][ T4331] x14: 0000000000000001 x13: 1fffe0001a502002 x12: 0000000000000000 [ 151.566053][ T4331] x11: ff00800010d70360 x10: 0000000000000000 x9 : ffff800010d70360 [ 151.567470][ T4331] x8 : ffff0000c4b5d400 x7 : 0000000000000000 x6 : 0000000000000000 [ 151.568967][ T4331] x5 : ffff8000184eddd8 x4 : 0000000000000008 x3 : ffff800010d70198 [ 151.570396][ T4331] x2 : 0000000000000000 x1 : 00000000ffffffff x0 : 0000000000000000 [ 151.571796][ T4331] Call trace: [ 151.572390][ T4331] hci_conn_timeout+0x204/0x41c [ 151.573239][ T4331] process_one_work+0x7e4/0x13bc [ 151.574090][ T4331] worker_thread+0x8cc/0xfe8 [ 151.574889][ T4331] kthread+0x254/0x2e0 [ 151.575576][ T4331] ret_from_fork+0x10/0x20 [ 151.576375][ T4331] irq event stamp: 5302 [ 151.577111][ T4331] hardirqs last enabled at (5301): [] _raw_spin_unlock_irq+0x3c/0x90 [ 151.578759][ T4331] hardirqs last disabled at (5302): [] el1_dbg+0x24/0x80 [ 151.580144][ T4331] softirqs last enabled at (1884): [] handle_softirqs+0xb1c/0xc90 [ 151.581775][ T4331] softirqs last disabled at (1865): [] __do_softirq+0x14/0x20 [ 151.583339][ T4331] ---[ end trace 0000000000000000 ]--- [ 152.493416][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 153.693178][ T4340] Bluetooth: hci3: command 0x0406 tx timeout