last executing test programs: 42.05228165s ago: executing program 3 (id=299): openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/consoles\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdb7b, {{@in=@loopback, @in6=@private0, 0x0, 0x4, 0x4e23, 0x10, 0xa, 0x60, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x4, 0x3, 0x0, 0x40, 0xfffffffffffffffd, 0x20000002}, {0xfffffffffffffffe}, 0x7, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0xc18}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 41.43015083s ago: executing program 3 (id=302): fsopen(&(0x7f0000000280)='pvfs2\x00', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000002}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 40.526481415s ago: executing program 3 (id=308): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x33}}) 40.39919221s ago: executing program 3 (id=309): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) 40.365706252s ago: executing program 3 (id=310): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c9"], 0x16) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 39.147077542s ago: executing program 3 (id=312): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0xffffdfff) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000019300)={0x2020}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40186f40, &(0x7f0000000080)={0x2, 0x1, 0x102, 0x8, 'syz0\x00', 0x210002}) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 24.152271097s ago: executing program 32 (id=312): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0xffffdfff) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000019300)={0x2020}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40186f40, &(0x7f0000000080)={0x2, 0x1, 0x102, 0x8, 'syz0\x00', 0x210002}) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 1.509592256s ago: executing program 2 (id=851): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000001c0)={0x44, r4, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.246233059s ago: executing program 2 (id=861): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000240)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noauto_da_alloc}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@user_xattr}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f00000005c0)="$eJzs3d9rW1UcAPDvTX/sp66DMVRECntwMpeurT8m+DAfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EN/13cfhP+BfMdDBkFH0wZfITW+6dknarMuWznw+cMs5uTc595t7v6fn5N6QAAbWePanEPFyRHyTRByKiCRfNxz5yvG17VYfXJvJliTq9U//ShrbZfXmazWfdyCvvBQRv30VcaLQ2m51eWW+VC6ni3l9orZweaK6vHLy4kJpLp1LL01NT59+e3rqvXff6Vmsb5z75/tP7nx4+utjq9/9cu/wrSTOxMF83cY4nsD1jZXxGM/fk5E488iGkz1obDdJ+r0D7MhQnucjkfUBh2Ioz3rg/+/LiKgDAyqR/zCgmuOA5ty+R/Pg58b9D9YmQK3xD699NhJ7G3Oj/avJpplRNt8d60H7WRu//nn7VrZE7z6HANjW9RsRcWp4uLX/S/L+b+dOdbHNo23o/+DZuZONf95sN/4prI9/os3450Cb3N2J7fO/cK8HzXSUjf/eb45/N330vX7Ramwor73QGPONJBcultOsb3sxIo7HyJ6svtX1nNOrd+ud1m0c/2VLth/NsWC+H/eG92x+zmypVtpZtK3u34h4pe34N1k//kmb45+9H+e6bONoevu1Tuu2j//pqv8U8Xrb+c/DK1rJ1tcnJxrnw0TzrGj1982jv3dqv9/xZ8d//9bxjyUbr9dWH7+NH/f+m3Zatyn+6P78H00+a5RH88eulmq1xcmI0eTj1senHj63WW9un8V//NjW/V+7839fRHzeZfw3j/z8alfx9+n4zz7W8X/8wt2PvvihU/vd9X9vNUrH80e66f+63cEnee8AAAAAAABgtylExMFICsX1cqFQLK7d33Ek9hfKlWrtxIXK0qXZaHxXdixGCs0r3Yc23A8xmd8P26xPPVKfjojDEfHt0L5GvThTKc/2O3gAAAAAAAAAAAAAAAAAAADYJQ50+P5/5o+hfu8d8NT5yW8YXNvmfy9+6QnYlfz/h8El/2FwyX8YXPIfBpf8h8El/2FwyX8YXPIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeurc2bPZUl99cG0mq89eWV6ar1w5OZtW54sLSzPFmcri5eJcpTJXToszlYXtXq9cqVyenIqlqxO1tFqbqC6vnF+oLF2qnb+4UJpLz6cjEaPPJDAAAAAAAAAAAAAAAAAAAAB4jlSXV+ZL5XK6qKCwo8Lw7tgNhR4X+t0zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/wUAAP//ZdYzKA==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000001040)=ANY=[], 0x841, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4ff, 0xfff}) 1.171482683s ago: executing program 2 (id=866): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0b0600000000000000003000000008000200"], 0x1c}}, 0x0) 1.02320636s ago: executing program 2 (id=869): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, 0x0, 0x10) 975.006812ms ago: executing program 1 (id=872): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 920.603715ms ago: executing program 2 (id=874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x48810) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000020) 919.732825ms ago: executing program 1 (id=875): socket$kcm(0xa, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 846.335578ms ago: executing program 1 (id=880): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0b0600000000000000003000000008000200"], 0x1c}}, 0x0) 803.387831ms ago: executing program 1 (id=883): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000080)={[{@usebackuproot}, {@nodatasum}, {@ssd_spread}, {@user_subvol_rm}, {@flushoncommit}, {@compress_force}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") open(0x0, 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000001680)={{0x0, 0x8541}, 0x100, './file1\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000f00), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000fc0)={0x14, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @private0}, {0xa, 0x0, 0x0, @local}}}, 0x48) 661.917367ms ago: executing program 5 (id=890): socket$kcm(0xa, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 606.323581ms ago: executing program 5 (id=892): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x808000, &(0x7f0000000240)=ANY=[@ANYBLOB="00cd067ca5fe94f358a97d3799d10d6a0f0d49553970899fa347aa76be1b2509f63779954a38f01042f578e036051ee7d6d1fb7e07c209e650464433ce970000000900000014c931bb00000000"], 0xfd, 0xa0, &(0x7f0000000000)="$eJzs17GJAlEUBdC7s8vuGjgNGNiBNdiKGGpmpAhWZCuWIIgVmInJyDgziHagngP/Py43fcnbXbaDlEm1Saoni+VqNpk3f/p5MA7voEjyl+Q/ybBs8u+tObRbkOxP62n36ubr3DUAAMArKTKqx3cbj/fmJ0mvvQOaBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCJrgEAAP//sjg1uA==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000580)=""/174, 0xff56) 501.917146ms ago: executing program 4 (id=896): socket(0x10, 0x3, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) 501.021466ms ago: executing program 5 (id=897): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 480.472547ms ago: executing program 4 (id=898): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4855}, 0x40000) 414.78927ms ago: executing program 4 (id=900): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000001c0)={0x44, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 414.58138ms ago: executing program 5 (id=901): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, 0x0, 0x10) 390.661091ms ago: executing program 4 (id=903): socket$kcm(0xa, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 335.067914ms ago: executing program 0 (id=904): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="250a00000000000061119e000000000095"], 0x0}, 0x94) 332.079814ms ago: executing program 0 (id=905): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYRES32=r1], 0x1c}}, 0x0) 331.203904ms ago: executing program 5 (id=906): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x5b85, 0x75ea, 0x800004}) fallocate(r0, 0x8, 0x4000, 0x4000) 303.340405ms ago: executing program 0 (id=907): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xc0) sendfile(r1, r1, 0x0, 0x7a680000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x85) 297.073876ms ago: executing program 1 (id=908): socket(0x10, 0x3, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) 291.037966ms ago: executing program 4 (id=909): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x808000, &(0x7f0000000240)=ANY=[@ANYBLOB="00cd067ca5fe94f358a97d3799d10d6a0f0d49553970899fa347aa76be1b2509f63779954a38f01042f578e036051ee7d6d1fb7e07c209e650464433ce970000000900000014c931bb00000000"], 0xfd, 0xa0, &(0x7f0000000000)="$eJzs17GJAlEUBdC7s8vuGjgNGNiBNdiKGGpmpAhWZCuWIIgVmInJyDgziHagngP/Py43fcnbXbaDlEm1Saoni+VqNpk3f/p5MA7voEjyl+Q/ybBs8u+tObRbkOxP62n36ubr3DUAAMArKTKqx3cbj/fmJ0mvvQOaBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCJrgEAAP//sjg1uA==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000580)=""/174, 0xff56) 201.90301ms ago: executing program 5 (id=910): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000240)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noauto_da_alloc}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@user_xattr}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f00000005c0)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8000c61) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000001040)=ANY=[], 0x841, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4ff, 0xfff}) 164.372692ms ago: executing program 0 (id=911): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4855}, 0x40000) 128.389153ms ago: executing program 4 (id=912): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 113.329195ms ago: executing program 1 (id=913): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'wlc\x00', 0x0, 0x5, 0x72}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$sock(r1, 0x0, 0x0) 58.065787ms ago: executing program 0 (id=914): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000001c0)={0x44, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 57.322108ms ago: executing program 2 (id=915): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="250a00000000000061119e000000000095"], 0x0}, 0x94) 0s ago: executing program 0 (id=916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000011000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40880000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200000000000000000006e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001", @ANYRESHEX=r0], 0xe4}, 0x1, 0x0, 0x0, 0x880}, 0x40800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. [ 29.792769][ T4308] cgroup: Unknown subsys name 'net' [ 30.096622][ T4308] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.363544][ T4308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 31.093572][ T4324] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.106452][ T4331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.107848][ T4331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.110138][ T4332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.111326][ T4332] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.112482][ T4332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.114049][ T4332] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.115394][ T4332] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.117000][ T4332] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.118170][ T4332] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.118317][ T4335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.119528][ T4332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.121035][ T4335] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.122773][ T4332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.123054][ T4335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.124280][ T4332] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.125873][ T4335] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.127565][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 31.128380][ T4335] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.128746][ T4336] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.130389][ T4335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.130817][ T4336] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 31.132043][ T4335] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.134070][ T4337] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 31.134666][ T4335] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 31.136211][ T4335] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.137568][ T4332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.139957][ T4322] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.141337][ T4337] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 31.144192][ T4337] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.283288][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 31.288566][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 31.312298][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 31.322198][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.323409][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.326035][ T4326] device bridge_slave_0 entered promiscuous mode [ 31.328093][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 31.330001][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.331085][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.332682][ T4326] device bridge_slave_1 entered promiscuous mode [ 31.363649][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.368526][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.373286][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.376107][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.377781][ T4325] device bridge_slave_0 entered promiscuous mode [ 31.387303][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.388444][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.389995][ T4320] device bridge_slave_0 entered promiscuous mode [ 31.398135][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.399282][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.400832][ T4321] device bridge_slave_0 entered promiscuous mode [ 31.403763][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.405083][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.406571][ T4321] device bridge_slave_1 entered promiscuous mode [ 31.407913][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.409088][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.410664][ T4325] device bridge_slave_1 entered promiscuous mode [ 31.418174][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.419298][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.420750][ T4320] device bridge_slave_1 entered promiscuous mode [ 31.423291][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 31.437530][ T4326] team0: Port device team_slave_0 added [ 31.447459][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.450051][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.452136][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.454556][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.458419][ T4326] team0: Port device team_slave_1 added [ 31.460264][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.466096][ T4321] team0: Port device team_slave_0 added [ 31.468659][ T4321] team0: Port device team_slave_1 added [ 31.474902][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.490888][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.492101][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.493822][ T4330] device bridge_slave_0 entered promiscuous mode [ 31.498376][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.499536][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.503641][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.507764][ T4320] team0: Port device team_slave_0 added [ 31.509845][ T4325] team0: Port device team_slave_0 added [ 31.511061][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.512256][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.514144][ T4330] device bridge_slave_1 entered promiscuous mode [ 31.515705][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.516803][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.520886][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.523083][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.527084][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.530769][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.533260][ T4320] team0: Port device team_slave_1 added [ 31.536987][ T4325] team0: Port device team_slave_1 added [ 31.540096][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.541223][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.545621][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.553201][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.557025][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.561380][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.570739][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.573255][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.574494][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.578455][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.580484][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.581485][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.585323][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.588857][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.624930][ T4326] device hsr_slave_0 entered promiscuous mode [ 31.673915][ T4326] device hsr_slave_1 entered promiscuous mode [ 31.724155][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.725228][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.729389][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.804962][ T4321] device hsr_slave_0 entered promiscuous mode [ 31.843889][ T4321] device hsr_slave_1 entered promiscuous mode [ 31.883821][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.885026][ T4321] Cannot create hsr debugfs directory [ 31.891969][ T4330] team0: Port device team_slave_0 added [ 31.902169][ T4330] team0: Port device team_slave_1 added [ 31.974795][ T4325] device hsr_slave_0 entered promiscuous mode [ 32.014025][ T4325] device hsr_slave_1 entered promiscuous mode [ 32.063806][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.065078][ T4325] Cannot create hsr debugfs directory [ 32.104872][ T4320] device hsr_slave_0 entered promiscuous mode [ 32.154684][ T4320] device hsr_slave_1 entered promiscuous mode [ 32.193824][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.195075][ T4320] Cannot create hsr debugfs directory [ 32.204857][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.205919][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.210090][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.221142][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.222359][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.226612][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.338927][ T4330] device hsr_slave_0 entered promiscuous mode [ 32.373923][ T4330] device hsr_slave_1 entered promiscuous mode [ 32.423881][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.425144][ T4330] Cannot create hsr debugfs directory [ 32.458921][ T4320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.508069][ T4320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.548181][ T4320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.588642][ T4320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.633245][ T4321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.671221][ T4321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.718419][ T4321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.754963][ T4321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.827405][ T4326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.867957][ T4326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.907156][ T4326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.957130][ T4326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.995257][ T4325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.039372][ T4325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.074797][ T4325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.116392][ T4325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.191647][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.193381][ T4330] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.214109][ T4331] Bluetooth: hci4: command 0x0409 tx timeout [ 33.214290][ T4327] Bluetooth: hci2: command 0x0409 tx timeout [ 33.215127][ T4331] Bluetooth: hci3: command 0x0409 tx timeout [ 33.216055][ T4327] Bluetooth: hci1: command 0x0409 tx timeout [ 33.216965][ T4331] Bluetooth: hci0: command 0x0409 tx timeout [ 33.228869][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.231837][ T4330] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.268144][ T4330] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.307120][ T4330] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.367311][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.369210][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.377121][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.378780][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.380776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.386232][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.392454][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.394654][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.396247][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.397374][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.399198][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.400694][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.402172][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.403203][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.404880][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.406373][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.408087][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.409149][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.410942][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.412375][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.422230][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.424416][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.441056][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.442837][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.446022][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.447214][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.448523][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.450150][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.451724][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.467116][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.469771][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.471983][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.474122][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.475885][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.480680][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.490560][ T4321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.492159][ T4321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.497117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.498667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.500432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.502107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.504832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.506443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.507998][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.509527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.510995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.512431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.518277][ T4320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.520240][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.524090][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.525737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.527227][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.528624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.529988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.531780][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.533350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.535239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.536649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.546666][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.552751][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.554743][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.557398][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.558562][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.560267][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.562505][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.564762][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.565936][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.576370][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.577869][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.579832][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.581319][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.582668][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.583764][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.586011][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.587551][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.589009][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.590125][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.597872][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.599686][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.601212][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.611565][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.613315][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.615792][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.622411][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.634082][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.636563][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.638128][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.639602][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.640971][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.648839][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.650434][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.651825][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.653457][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.658106][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.660423][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.668423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.669764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.672817][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.682319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.684117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.685607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.686822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.692191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.695633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.697213][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.698376][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.699761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.705584][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.707920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.709409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.710786][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.711922][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.713331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.720822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.722315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.723497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.730934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.732602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.735165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.737199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.738818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.740798][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.742333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.748172][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.759518][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.761210][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.762670][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.764333][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.769579][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.771146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.772780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.781368][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.786208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.788033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.789271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.790907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.798797][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.809272][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.810890][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.812539][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.814081][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.817234][ T4320] device veth0_vlan entered promiscuous mode [ 33.830466][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.832149][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.838076][ T4320] device veth1_vlan entered promiscuous mode [ 33.850552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.852118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.853612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.867635][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.869136][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.870670][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.872104][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.873358][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.875428][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.876864][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.879498][ T4321] device veth0_vlan entered promiscuous mode [ 33.882039][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.883904][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.885759][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.887119][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.891127][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.894768][ T4326] device veth0_vlan entered promiscuous mode [ 33.899456][ T4321] device veth1_vlan entered promiscuous mode [ 33.908980][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.910565][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.911989][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.915476][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.918498][ T4320] device veth0_macvtap entered promiscuous mode [ 33.921002][ T4320] device veth1_macvtap entered promiscuous mode [ 33.926765][ T4326] device veth1_vlan entered promiscuous mode [ 33.937489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.939003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.940439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.941865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.943315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.959275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.960843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.962461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.968364][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.969690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.976486][ T4325] device veth0_vlan entered promiscuous mode [ 33.978649][ T4321] device veth0_macvtap entered promiscuous mode [ 33.980752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.982179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.983619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.988655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.990218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.994847][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.996527][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.999872][ T4326] device veth0_macvtap entered promiscuous mode [ 34.003444][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.005886][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.007164][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.008904][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.011849][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.016652][ T4321] device veth1_macvtap entered promiscuous mode [ 34.026803][ T4325] device veth1_vlan entered promiscuous mode [ 34.028833][ T4326] device veth1_macvtap entered promiscuous mode [ 34.034727][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.036050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.037627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.039109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.040707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.042401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.053476][ T4320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.056144][ T4320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.057409][ T4320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.058753][ T4320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.062486][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.064403][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.066523][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.069642][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.071275][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.072679][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.078631][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.080248][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.081752][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.083336][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.086443][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.098261][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.099979][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.102114][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.103393][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.105134][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.106632][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.108068][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.117830][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.119546][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.120948][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.122436][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.128125][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.131975][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.133562][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.139274][ T4321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.140697][ T4321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.142169][ T4321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.143453][ T4321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.159587][ T4325] device veth0_macvtap entered promiscuous mode [ 34.170630][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.172086][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.173484][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.175628][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.179661][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.181305][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.187814][ T4325] device veth1_macvtap entered promiscuous mode [ 34.188969][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.190179][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.202608][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.204874][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.206353][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.207774][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.209350][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.218918][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.220754][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.222362][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.225293][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.226832][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.228446][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.230630][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.236915][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.238704][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.242480][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.244303][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.246748][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.248135][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.257257][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.259299][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.270658][ T4330] device veth0_vlan entered promiscuous mode [ 34.272221][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.274586][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.276185][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.277790][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.279340][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.281086][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.283310][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.287068][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.288541][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.289998][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.309655][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.310922][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.320407][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.323183][ T4386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.324900][ T4386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.327411][ T4325] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.328883][ T4325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.330254][ T4325] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.331653][ T4325] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.338282][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.344792][ T4330] device veth1_vlan entered promiscuous mode [ 34.360904][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.362122][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.364494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.365904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.367243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.385387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.387106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.389813][ T4403] Cannot find add_set index 0 as target [ 34.399427][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.400686][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.402266][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.405883][ T4330] device veth0_macvtap entered promiscuous mode [ 34.425507][ T4330] device veth1_macvtap entered promiscuous mode [ 34.427232][ T4403] netlink: 'syz.1.2': attribute type 39 has an invalid length. [ 34.544208][ T4386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.546814][ T4386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.550798][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.552313][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.554779][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.559905][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.561668][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.563206][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.565670][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.566995][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.568656][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.570195][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.571704][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.581465][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.589676][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.590935][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.596043][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.604238][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.605992][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.610857][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.613001][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.622038][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.629861][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.634753][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.638506][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.641155][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.642774][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.648098][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.651575][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.655709][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.668333][ T4330] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.669951][ T4330] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.671393][ T4330] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.672807][ T4330] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.720195][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.721623][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.723000][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.746202][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.747540][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.749044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.759122][ T4415] input: syz0 as /devices/virtual/input/input2 [ 34.909776][ T110] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.083797][ T110] usb 1-1: Using ep0 maxpacket: 16 [ 35.087015][ T110] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 35.088452][ T110] usb 1-1: config 0 has no interface number 0 [ 35.089520][ T110] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 35.091418][ T110] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 35.100021][ T110] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 35.104868][ T110] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 35.111801][ T110] usb 1-1: Product: syz [ 35.114047][ T110] usb 1-1: SerialNumber: syz [ 35.124239][ T110] usb 1-1: config 0 descriptor?? [ 35.132573][ T110] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 35.139219][ T110] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input3 [ 35.285289][ T4444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 35.294948][ T4331] Bluetooth: hci1: command 0x041b tx timeout [ 35.294962][ T4335] Bluetooth: hci0: command 0x041b tx timeout [ 35.295911][ T4331] Bluetooth: hci3: command 0x041b tx timeout [ 35.297913][ T4331] Bluetooth: hci2: command 0x041b tx timeout [ 35.297933][ T4327] Bluetooth: hci4: command 0x041b tx timeout [ 35.335444][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 35.337227][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 35.338613][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 35.341669][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 35.342976][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 35.344321][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 35.345438][ T4410] usb 1-1: USB disconnect, device number 2 [ 35.346519][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 35.347479][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 35.350504][ T4410] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 35.495115][ T4444] device hsr_slave_1 left promiscuous mode [ 35.980345][ T4457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.981941][ T4457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.063665][ C0] sched: RT throttling activated [ 37.250264][ T4470] device syzkaller0 entered promiscuous mode [ 37.373946][ T4324] Bluetooth: hci2: command 0x040f tx timeout [ 37.374928][ T4324] Bluetooth: hci3: command 0x040f tx timeout [ 37.375850][ T4324] Bluetooth: hci1: command 0x040f tx timeout [ 37.376759][ T4324] Bluetooth: hci0: command 0x040f tx timeout [ 37.377678][ T4324] Bluetooth: hci4: command 0x040f tx timeout [ 37.505294][ T4484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.507468][ T4484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.079487][ T4514] ======================================================= [ 38.079487][ T4514] WARNING: The mand mount option has been deprecated and [ 38.079487][ T4514] and is ignored by this kernel. Remove the mand [ 38.079487][ T4514] option from the mount to silence this warning. [ 38.079487][ T4514] ======================================================= [ 38.102433][ T4514] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 38.186602][ T4515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.188623][ T4515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.448272][ T4529] 9pnet_virtio: no channels available for device syz [ 39.461467][ T4324] Bluetooth: hci0: command 0x0419 tx timeout [ 39.461502][ T4327] Bluetooth: hci1: command 0x0419 tx timeout [ 39.461519][ T4335] Bluetooth: hci4: command 0x0419 tx timeout [ 39.464707][ T4327] Bluetooth: hci3: command 0x0419 tx timeout [ 39.464866][ T4335] Bluetooth: hci2: command 0x0419 tx timeout [ 40.525335][ T3774] cfg80211: failed to load regulatory.db [ 40.606973][ T4534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'. [ 40.815341][ T4534] device hsr_slave_1 left promiscuous mode [ 41.221906][ T4580] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 41.534609][ T4331] Bluetooth: hci4: command 0x0405 tx timeout [ 42.598869][ T4621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.601951][ T4621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.057434][ T4656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.67'. [ 43.063651][ T4324] Bluetooth: hci1: Malformed LE Event: 0x0d [ 43.150821][ T4668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.70'. [ 43.326906][ T4688] tipc: Started in network mode [ 43.327879][ T4688] tipc: Node identity f614212a95da, cluster identity 4711 [ 43.337086][ T4688] tipc: Enabled bearer , priority 0 [ 43.352260][ T4688] device syzkaller0 entered promiscuous mode [ 43.455520][ T4688] tipc: Resetting bearer [ 43.464071][ T4685] tipc: Resetting bearer [ 43.554502][ T4685] tipc: Disabling bearer [ 43.560008][ T4711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.78'. [ 43.624342][ T4711] netlink: 56 bytes leftover after parsing attributes in process `syz.3.78'. [ 44.505572][ T4743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.92'. [ 44.606801][ T4747] netlink: 'syz.4.93': attribute type 10 has an invalid length. [ 44.619598][ T4747] team0: Port device netdevsim0 added [ 44.722371][ T4759] input: syz0 as /devices/virtual/input/input4 [ 44.893802][ T4324] Bluetooth: hci5: command 0x1003 tx timeout [ 44.894890][ T4331] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 45.365005][ T4790] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.366507][ T4790] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.367756][ T4790] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.369113][ T4790] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.375895][ T4790] Zero length message leads to an empty skb [ 45.488466][ T4777] loop4: detected capacity change from 0 to 128 [ 46.003795][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 46.183734][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 46.186476][ T22] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 46.187817][ T22] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 46.189275][ T22] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 46.190727][ T22] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 46.192192][ T22] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 46.198919][ T22] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 46.200229][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.339183][ T4834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.341473][ T4834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.449492][ T4836] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 47.102088][ T4850] binder: 4849:4850 tried to acquire reference to desc 0, got 1 instead [ 47.111635][ T7] binder: send failed reply for transaction 6 to 4849:4850 [ 47.124859][ T7] binder: undelivered TRANSACTION_COMPLETE [ 47.126121][ T7] binder: undelivered TRANSACTION_ERROR: 29189 [ 47.138679][ T4852] dlm: Unknown command passed to DLM device : 3 [ 47.138679][ T4852] [ 47.179434][ T7] usb 1-1: USB disconnect, device number 3 [ 47.194144][ T4331] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 47.195812][ T4331] CPU: 0 PID: 4331 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 47.196937][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 47.198531][ T4331] Workqueue: hci0 hci_rx_work [ 47.199241][ T4331] Call trace: [ 47.199714][ T4331] dump_backtrace+0x1c0/0x1ec [ 47.200486][ T4331] show_stack+0x2c/0x3c [ 47.201171][ T4331] __dump_stack+0x30/0x40 [ 47.201966][ T4331] dump_stack_lvl+0xf4/0x15c [ 47.202726][ T4331] dump_stack+0x1c/0x5c [ 47.203410][ T4331] sysfs_create_dir_ns+0x244/0x264 [ 47.204204][ T4331] kobject_add_internal+0x598/0xb08 [ 47.205043][ T4331] kobject_add+0x140/0x20c [ 47.205756][ T4331] device_add+0x3f0/0xf90 [ 47.206451][ T4331] hci_conn_add_sysfs+0xbc/0x1c8 [ 47.207255][ T4331] le_conn_complete_evt+0xcc8/0x1244 [ 47.208054][ T4331] hci_le_conn_complete_evt+0x114/0x3f4 [ 47.208926][ T4331] hci_le_meta_evt+0x2c0/0x4a0 [ 47.209722][ T4331] hci_event_packet+0x6b8/0xf18 [ 47.210488][ T4331] hci_rx_work+0x328/0xa84 [ 47.211141][ T4331] process_one_work+0x7f8/0x13a4 [ 47.211913][ T4331] worker_thread+0x8c4/0xfec [ 47.212628][ T4331] kthread+0x250/0x2d8 [ 47.213217][ T4331] ret_from_fork+0x10/0x20 [ 47.223634][ T4857] batman_adv: batadv0: Adding interface: macsec1 [ 47.229712][ T4331] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 47.232052][ T4331] Bluetooth: hci0: failed to register connection device [ 47.240281][ T4857] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.251111][ T4857] batman_adv: batadv0: Interface activated: macsec1 [ 48.384083][ T4888] netlink: 'syz.2.151': attribute type 7 has an invalid length. [ 48.930360][ T4893] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.387491][ T4896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.153'. [ 49.676310][ T4893] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.763644][ T4893] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.867129][ T4893] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.981895][ T4893] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.985373][ T4893] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.988497][ T4893] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.991444][ T4893] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.230654][ T4912] netdevsim netdevsim4: Direct firmware load for þ failed with error -2 [ 50.232234][ T4912] netdevsim netdevsim4: Falling back to sysfs fallback for: þ [ 50.527983][ T4918] process 'syz.0.161' launched './file2' with NULL argv: empty string added [ 50.628653][ T4917] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 52.011873][ T4947] overlayfs: failed to clone upperpath [ 52.176121][ T4954] fuse: Bad value for 'fd' [ 52.429919][ T4962] syz.0.176 uses obsolete (PF_INET,SOCK_PACKET) [ 52.691082][ T4971] input: syz0 as /devices/virtual/input/input5 [ 52.722324][ T4975] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.724022][ T4975] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.814923][ T4977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'. [ 52.909044][ T4990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.912165][ T4990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.036128][ T4997] 9pnet_fd: p9_fd_create_tcp (4997): problem binding to privport [ 53.043630][ T4997] fuse: Bad value for 'fd' [ 53.174293][ T5002] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 53.186155][ T5002] lo speed is unknown, defaulting to 1000 [ 53.187195][ T5002] lo speed is unknown, defaulting to 1000 [ 53.189103][ T5002] lo speed is unknown, defaulting to 1000 [ 53.191252][ T5002] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 53.198930][ T5002] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 53.216918][ T5002] lo speed is unknown, defaulting to 1000 [ 53.218208][ T5002] lo speed is unknown, defaulting to 1000 [ 53.221421][ T5002] lo speed is unknown, defaulting to 1000 [ 53.222571][ T5002] lo speed is unknown, defaulting to 1000 [ 53.230964][ T5002] lo speed is unknown, defaulting to 1000 [ 53.308023][ T5009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.310202][ T5009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.499654][ T5024] netlink: 27 bytes leftover after parsing attributes in process `syz.3.201'. [ 54.708312][ T5036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'. [ 54.710614][ T5034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 54.856352][ T5043] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 54.857480][ T5043] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 54.888334][ T5043] vhci_hcd vhci_hcd.0: Device attached [ 54.911443][ T5043] netlink: 44 bytes leftover after parsing attributes in process `syz.0.200'. [ 55.029798][ T5053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.031264][ T5053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.143927][ T4369] usb 2-1: new high-speed USB device number 2 using vhci_hcd [ 55.221161][ T5045] vhci_hcd: connection reset by peer [ 55.223509][ T9] vhci_hcd: stop threads [ 55.224539][ T9] vhci_hcd: release socket [ 55.228054][ T9] vhci_hcd: disconnect device [ 55.392402][ T5061] device syzkaller0 entered promiscuous mode [ 55.585073][ T5065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.586624][ T5065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.827762][ T5075] binder: 5074:5075 tried to acquire reference to desc 0, got 1 instead [ 55.829847][ T3774] binder: release 5074:5075 transaction 13 out, still active [ 55.831134][ T3774] binder: undelivered TRANSACTION_COMPLETE [ 55.838550][ T3774] binder: send failed reply for transaction 13, target dead [ 55.851093][ T5077] 9pnet_virtio: no channels available for device syz [ 55.979450][ T5085] device syzkaller0 entered promiscuous mode [ 56.557622][ T5108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.570458][ T5108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.796454][ T27] audit: type=1326 audit(56.780:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5107 comm="syz.1.237" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9577128 code=0x0 [ 56.935950][ T5115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 57.066778][ T5115] netlink: 56 bytes leftover after parsing attributes in process `syz.2.239'. [ 57.547535][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 57.565810][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 57.586858][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 57.593547][ T5123] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 57.605123][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 57.636975][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 57.642410][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 57.658810][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 57.981703][ T5129] mmap: syz.2.243 (5129) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.422607][ T5166] binder: 5165:5166 tried to acquire reference to desc 0, got 1 instead [ 58.432911][ T110] binder: release 5165:5166 transaction 22 out, still active [ 58.434269][ T110] binder: undelivered TRANSACTION_COMPLETE [ 58.435378][ T110] binder: send failed reply for transaction 29 to 5165:5166 [ 58.436504][ T110] binder: undelivered transaction 30, process died. [ 58.440546][ T110] binder: undelivered TRANSACTION_COMPLETE [ 58.441510][ T110] binder: undelivered TRANSACTION_COMPLETE [ 58.442437][ T110] binder: undelivered TRANSACTION_ERROR: 29189 [ 59.051102][ T5189] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 59.053260][ T5189] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 59.310422][ T5191] netlink: 132 bytes leftover after parsing attributes in process `syz.2.265'. [ 59.312753][ T5191] netlink: 132 bytes leftover after parsing attributes in process `syz.2.265'. [ 59.430039][ T5208] binder: 5207:5208 got transaction to invalid handle, 2 [ 59.443162][ T5208] loop3: detected capacity change from 0 to 256 [ 59.455512][ T5208] FAT-fs (loop3): "posix" option is obsolete, not supported now [ 59.476701][ T5208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.270'. [ 59.480474][ T5208] bridge: RTM_NEWNEIGH with invalid ether address [ 59.486899][ T5208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.270'. [ 59.490612][ T5208] bridge: RTM_NEWNEIGH with invalid ether address [ 59.513935][ T5206] loop0: detected capacity change from 0 to 32768 [ 59.529514][ T5206] [ 59.529514][ T5206] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 59.529514][ T5206] [ 59.584690][ T4326] [ 59.584690][ T4326] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 59.584690][ T4326] [ 59.586416][ T4326] [ 59.586416][ T4326] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 59.586416][ T4326] [ 59.597953][ T5215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.273'. [ 59.761723][ T5231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'. [ 60.042422][ T5254] virtio-fs: tag <./cgroup> not found [ 60.253867][ T4369] vhci_hcd: vhci_device speed not set [ 60.675105][ T5283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'. [ 60.683289][ T5283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'. [ 61.349066][ T5295] netlink: 204 bytes leftover after parsing attributes in process `syz.0.305'. [ 61.793092][ T27] audit: type=1326 audit(61.770:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82177128 code=0x7ffc0000 [ 61.799187][ T27] audit: type=1326 audit(61.780:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffff82177128 code=0x7ffc0000 [ 61.815074][ T27] audit: type=1326 audit(61.800:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82177128 code=0x7ffc0000 [ 61.922371][ T27] audit: type=1326 audit(61.900:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=33 compat=0 ip=0xffff82177128 code=0x7ffc0000 [ 61.925768][ T27] audit: type=1326 audit(61.900:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82177128 code=0x7ffc0000 [ 61.929203][ T27] audit: type=1326 audit(61.900:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82177128 code=0x7ffc0000 [ 62.005226][ T5305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 62.015241][ T5305] netlink: 68 bytes leftover after parsing attributes in process `syz.0.307'. [ 62.030768][ T4331] Bluetooth: hci0: Invalid handle: 0x83c9 > 0x0eff [ 62.046134][ T27] audit: type=1326 audit(62.030:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=233 compat=0 ip=0xffff82177128 code=0x7ffc0000 [ 63.368117][ T5319] netlink: 112 bytes leftover after parsing attributes in process `syz.1.313'. [ 64.524135][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.525274][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.683374][ T5342] netlink: 'syz.1.317': attribute type 10 has an invalid length. [ 64.694534][ T5342] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.696485][ T5342] bond0: (slave team0): Enslaving as an active interface with an up link [ 64.848002][ T5349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 65.253032][ T5378] Set syz1 is full, maxelem 768 reached [ 65.365173][ T5388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.368811][ T5388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.476390][ T5399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.477818][ T5399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.681636][ T5419] Bluetooth: MGMT ver 1.22 [ 67.899803][ T5435] ax25_connect(): syz.4.346 uses autobind, please contact jreuter@yaina.de [ 67.947387][ T4327] Bluetooth: hci2: unexpected event 0x10 length: 6 > 1 [ 67.948129][ T4327] Bluetooth: hci2: hardware error 0xbb [ 68.753790][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 68.870140][ T5463] Illegal XDP return value 51 on prog (id 10) dev syz_tun, expect packet loss! [ 68.953838][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 68.956521][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 68.958558][ T7] usb 1-1: config 6 has an invalid interface number: 82 but max is 0 [ 68.959850][ T7] usb 1-1: config 6 has no interface number 0 [ 68.960795][ T7] usb 1-1: config 6 interface 82 has no altsetting 0 [ 68.963376][ T7] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01a2, bcdDevice=97.34 [ 68.965229][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.974103][ T7] usb 1-1: Product: syz [ 68.977523][ T7] usb 1-1: Manufacturer: syz [ 68.978278][ T7] usb 1-1: SerialNumber: syz [ 69.193816][ T7] ftdi_sio 1-1:6.82: FTDI USB Serial Device converter detected [ 69.195814][ T7] ftdi_sio ttyUSB0: unknown device type: 0x9734 [ 69.203067][ T7] usb 1-1: USB disconnect, device number 4 [ 69.206932][ T5480] 9pnet_virtio: no channels available for device syz [ 69.213949][ T7] ftdi_sio 1-1:6.82: device disconnected [ 69.442836][ T4324] Bluetooth: hci1: unexpected event 0x07 length: 6 < 255 [ 69.994897][ T5507] tipc: Started in network mode [ 69.995771][ T5507] tipc: Node identity 4, cluster identity 4711 [ 69.996806][ T5507] tipc: Node number set to 4 [ 70.173791][ T4327] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 70.989396][ T4327] Bluetooth: hci5: command 0x1003 tx timeout [ 70.990828][ T4331] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 71.977955][ T5565] binder: 5564:5565 tried to acquire reference to desc 0, got 1 instead [ 71.980095][ T5565] binder: 5564:5565 unknown command 0 [ 71.981345][ T5565] binder: 5564:5565 ioctl c0306201 200007c0 returned -22 [ 71.986839][ T4369] binder_debug: 4 callbacks suppressed [ 71.986852][ T4369] binder: release 5564:5565 transaction 36 out, still active [ 71.988844][ T4369] binder: undelivered TRANSACTION_COMPLETE [ 72.012341][ T3774] binder: send failed reply for transaction 36, target dead [ 72.175621][ T4331] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 72.177197][ T4331] CPU: 0 PID: 4331 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 72.178278][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 72.179763][ T4331] Workqueue: hci4 hci_rx_work [ 72.180448][ T4331] Call trace: [ 72.180935][ T4331] dump_backtrace+0x1c0/0x1ec [ 72.181646][ T4331] show_stack+0x2c/0x3c [ 72.182318][ T4331] __dump_stack+0x30/0x40 [ 72.183033][ T4331] dump_stack_lvl+0xf4/0x15c [ 72.183814][ T4331] dump_stack+0x1c/0x5c [ 72.184420][ T4331] sysfs_create_dir_ns+0x244/0x264 [ 72.185269][ T4331] kobject_add_internal+0x598/0xb08 [ 72.186077][ T4331] kobject_add+0x140/0x20c [ 72.186814][ T4331] device_add+0x3f0/0xf90 [ 72.187522][ T4331] hci_conn_add_sysfs+0xbc/0x1c8 [ 72.188311][ T4331] le_conn_complete_evt+0xcc8/0x1244 [ 72.189110][ T4331] hci_le_conn_complete_evt+0x114/0x3f4 [ 72.189962][ T4331] hci_le_meta_evt+0x2c0/0x4a0 [ 72.190719][ T4331] hci_event_packet+0x6b8/0xf18 [ 72.191456][ T4331] hci_rx_work+0x328/0xa84 [ 72.192120][ T4331] process_one_work+0x7f8/0x13a4 [ 72.192945][ T4331] worker_thread+0x8c4/0xfec [ 72.193679][ T4331] kthread+0x250/0x2d8 [ 72.194297][ T4331] ret_from_fork+0x10/0x20 [ 72.200507][ T4331] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 72.202678][ T4331] Bluetooth: hci4: failed to register connection device [ 72.602022][ T5594] fuse: Bad value for 'fd' [ 73.773942][ T27] audit: type=1326 audit(73.740:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5606 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82177128 code=0x7ffc0000 [ 73.777259][ T27] audit: type=1326 audit(73.740:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5606 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82177128 code=0x7ffc0000 [ 73.786065][ T27] audit: type=1326 audit(73.770:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5606 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82177128 code=0x7ffc0000 [ 73.789333][ T27] audit: type=1326 audit(73.770:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5606 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82177128 code=0x7ffc0000 [ 73.830477][ T27] audit: type=1326 audit(73.770:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5606 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=88 compat=0 ip=0xffff82177128 code=0x7ffc0000 [ 73.853309][ T27] audit: type=1326 audit(73.770:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5606 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82177128 code=0x7ffc0000 [ 73.853351][ T27] audit: type=1326 audit(73.770:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5606 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82177128 code=0x7ffc0000 [ 73.853367][ T27] audit: type=1326 audit(73.770:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5606 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff82177128 code=0x7ffc0000 [ 73.853381][ T27] audit: type=1326 audit(73.770:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5606 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff82177128 code=0x7ffc0000 [ 73.891784][ T5611] capability: warning: `syz.0.402' uses 32-bit capabilities (legacy support in use) [ 74.056599][ T5627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 76.918501][ T27] audit: type=1326 audit(76.900:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.0.430" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82177128 code=0x7ffc0000 [ 78.246958][ T4331] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 78.249819][ T4331] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 78.251343][ T4331] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 78.252995][ T4331] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 78.254861][ T4331] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 78.256204][ T4331] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 78.394887][ T5709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.396506][ T5709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.421321][ T5699] chnl_net:caif_netlink_parms(): no params data found [ 78.501593][ T5699] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.503117][ T5699] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.505773][ T5699] device bridge_slave_0 entered promiscuous mode [ 78.508181][ T5699] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.509842][ T5699] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.511346][ T5699] device bridge_slave_1 entered promiscuous mode [ 78.522193][ T5699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.525117][ T5699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.538123][ T5699] team0: Port device team_slave_0 added [ 78.540110][ T5699] team0: Port device team_slave_1 added [ 78.546023][ T5699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.547264][ T5699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.551082][ T5699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.553504][ T5699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.558463][ T5699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.562227][ T5699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.689527][ T5720] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 80.384267][ T4331] Bluetooth: hci5: command 0x0409 tx timeout [ 80.399257][ T4585] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 80.413822][ T4324] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 80.415188][ T4324] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.426281][ T5699] device hsr_slave_0 entered promiscuous mode [ 80.461926][ T5726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.464073][ T5699] device hsr_slave_1 entered promiscuous mode [ 80.503744][ T5699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.505110][ T5699] Cannot create hsr debugfs directory [ 80.543832][ T4585] usb 1-1: device descriptor read/64, error -71 [ 80.609817][ T5699] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 80.644897][ T5699] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 80.714996][ T5699] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 80.735850][ T5699] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 80.777248][ T5743] binder: 5742:5743 tried to acquire reference to desc 0, got 1 instead [ 80.779378][ T5743] binder: 5742:5743 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 80.781362][ T5743] binder: 5743 RLIMIT_NICE not set [ 80.782116][ T5743] binder: 5743 RLIMIT_NICE not set [ 80.783077][ T5743] binder: 5742:5743 got reply transaction with bad transaction stack, transaction 47 has target 5742:5743 [ 80.786847][ T5743] binder: 5742:5743 transaction reply to 0:0 failed 48/29201/-71, size 0-0 line 2961 [ 80.788683][ T4369] binder: release 5742:5743 transaction 47 out, still active [ 80.789937][ T4369] binder: undelivered TRANSACTION_COMPLETE [ 80.790839][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.798421][ T4369] binder: release 5742:5743 transaction 47 in, still active [ 80.799547][ T4369] binder: send failed reply for transaction 47, target dead [ 80.812748][ T5699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.814211][ T4585] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 80.825580][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.827130][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.830321][ T5699] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.833651][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.835503][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.836957][ T4586] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.838064][ T4586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.840190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.846498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.848087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.849431][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.850514][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.857757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.862031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.865831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.868817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.872916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.879998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.881947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.889837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.891566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.895059][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.958716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.960084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.964007][ T4585] usb 1-1: device descriptor read/64, error -71 [ 80.966954][ T5699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.079722][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 81.079732][ T27] audit: type=1326 audit(81.060:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9577128 code=0x7ffc0000 [ 81.084625][ T4585] usb usb1-port1: attempt power cycle [ 81.085603][ T27] audit: type=1326 audit(81.060:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9577128 code=0x7ffc0000 [ 81.092358][ T27] audit: type=1326 audit(81.070:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffa9577128 code=0x7ffc0000 [ 81.099805][ T27] audit: type=1326 audit(81.070:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9577128 code=0x7ffc0000 [ 81.114171][ T27] audit: type=1326 audit(81.100:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffa9577128 code=0x7ffc0000 [ 81.123247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.125210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.126762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.128134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.138247][ T5699] device veth0_vlan entered promiscuous mode [ 81.140013][ T27] audit: type=1326 audit(81.120:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9577128 code=0x7ffc0000 [ 81.143297][ T5699] device veth1_vlan entered promiscuous mode [ 81.150882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.152550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.157890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.161640][ T5699] device veth0_macvtap entered promiscuous mode [ 81.165080][ T5699] device veth1_macvtap entered promiscuous mode [ 81.172030][ T5699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.177994][ T5699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.179504][ T5699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.181039][ T5699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.182783][ T5699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.185890][ T5699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.187791][ T5699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.188083][ T27] audit: type=1326 audit(81.170:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=190 compat=0 ip=0xffffa9577128 code=0x7ffc0000 [ 81.189319][ T5699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.197408][ T5699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.199154][ T5699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.201953][ T5699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.209462][ T27] audit: type=1326 audit(81.190:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9577128 code=0x7ffc0000 [ 81.212898][ T27] audit: type=1326 audit(81.190:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9577128 code=0x7ffc0000 [ 81.490266][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.493754][ T4585] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 81.494937][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.496766][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.498223][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.504249][ T5699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.505867][ T5699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.507305][ T5699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.508844][ T5699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.510466][ T5699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.517812][ T5699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.520522][ T5699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.523548][ T5699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.528228][ T5699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.531066][ T5699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.534671][ T5699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.536565][ T4585] usb 1-1: device descriptor read/8, error -71 [ 81.538526][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.541421][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.604950][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.609336][ T5699] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.610819][ T5699] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.612246][ T5699] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.614043][ T5699] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.675632][ T5777] IPVS: length: 528 != 8 [ 81.688141][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.712897][ T1573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.714458][ T1573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.725354][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.775231][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.778688][ T1573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.779883][ T1573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.781070][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.794496][ T5779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.795971][ T5779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.950918][ T5793] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 82.413863][ T4327] Bluetooth: hci5: command 0x041b tx timeout [ 82.669429][ T5871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.671160][ T5871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.986692][ T27] audit: type=1326 audit(82.970:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.0.483" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82177128 code=0x7ffc0000 [ 83.931624][ T154] device hsr_slave_0 left promiscuous mode [ 83.999833][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.001108][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.003061][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.004726][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.006202][ T154] device bridge_slave_1 left promiscuous mode [ 84.008297][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.045137][ T154] device bridge_slave_0 left promiscuous mode [ 84.046357][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.126797][ T5929] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 84.164137][ T154] device veth1_macvtap left promiscuous mode [ 84.165457][ T154] device veth0_macvtap left promiscuous mode [ 84.166514][ T154] device veth1_vlan left promiscuous mode [ 84.167632][ T154] device veth0_vlan left promiscuous mode [ 84.493891][ T4324] Bluetooth: hci5: command 0x040f tx timeout [ 85.059076][ T5948] binder: 5947:5948 tried to acquire reference to desc 0, got 1 instead [ 85.061114][ T5948] binder: 5947:5948 got reply transaction with bad transaction stack, transaction 53 has target 5947:0 [ 85.062954][ T5948] binder: 5947:5948 transaction reply to 0:0 failed 54/29201/-71, size 0-0 line 2961 [ 85.065566][ T3897] binder: release 5947:5948 transaction 53 out, still active [ 85.066808][ T3897] binder: undelivered TRANSACTION_COMPLETE [ 85.067659][ T3897] binder: undelivered TRANSACTION_ERROR: 29201 [ 86.156463][ T154] team0 (unregistering): Port device team_slave_1 removed [ 86.315582][ T154] team0 (unregistering): Port device team_slave_0 removed [ 86.474209][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.583873][ T4327] Bluetooth: hci5: command 0x0419 tx timeout [ 86.674181][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.185682][ T154] bond0 (unregistering): Released all slaves [ 88.500107][ T5937] device sit1 entered promiscuous mode [ 88.612618][ T5976] netlink: 68 bytes leftover after parsing attributes in process `syz.1.505'. [ 88.637245][ T5981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.667397][ T5981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.846534][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 88.992359][ T6017] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 89.026809][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 89.029123][ T7] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 89.030421][ T7] usb 1-1: config 179 has no interface number 0 [ 89.031638][ T7] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 89.033248][ T7] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 89.035900][ T7] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 89.039724][ T7] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 89.043070][ T7] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 89.051764][ T7] usb 1-1: config 179 interface 65 has no altsetting 0 [ 89.053937][ T7] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 89.056992][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.097928][ T7] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6 [ 89.254770][ T6029] binder: 6028:6029 tried to acquire reference to desc 0, got 1 instead [ 89.261413][ T6029] binder: 6028:6029 sending u0000000000000003 node 61, cookie mismatch 0000000000000000 != 00000000000000f0 [ 89.266787][ T6029] binder_debug: 1 callbacks suppressed [ 89.266802][ T6029] binder: 6029:6028 translate binder failed [ 89.273924][ T6029] binder: 6028:6029 transaction call to 6028:0 failed 59/29201/-22, size 72-24 line 3374 [ 89.284293][ T4585] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.481294][ T3897] usb 1-1: USB disconnect, device number 9 [ 89.482348][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 89.495520][ T3897] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 89.756121][ T27] kauditd_printk_skb: 39 callbacks suppressed [ 89.756131][ T27] audit: type=1326 audit(89.740:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9577128 code=0x7ffc0000 [ 89.796503][ T27] audit: type=1326 audit(89.780:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffffa9577128 code=0x7ffc0000 [ 89.799964][ T27] audit: type=1326 audit(89.780:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9577128 code=0x7ffc0000 [ 89.802984][ T27] audit: type=1326 audit(89.780:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa9577128 code=0x7ffc0000 [ 89.819647][ T27] audit: type=1326 audit(89.780:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9577128 code=0x7ffc0000 [ 89.823117][ T27] audit: type=1326 audit(89.780:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa9577128 code=0x7ffc0000 [ 89.836914][ T27] audit: type=1326 audit(89.780:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9577128 code=0x7ffc0000 [ 89.840434][ T27] audit: type=1326 audit(89.780:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffa9577128 code=0x7ffc0000 [ 89.847035][ T27] audit: type=1326 audit(89.780:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9577128 code=0x7ffc0000 [ 89.850346][ T27] audit: type=1326 audit(89.780:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=194 compat=0 ip=0xffffa9577128 code=0x7ffc0000 [ 90.034808][ T6066] netlink: 28 bytes leftover after parsing attributes in process `syz.5.521'. [ 92.885578][ T6173] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 93.010842][ T6188] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 93.012212][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 93.033640][ T6182] loop1: detected capacity change from 0 to 2048 [ 93.071436][ T6182] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 93.078312][ T6182] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 93.081914][ T6182] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.117010][ T6192] loop5: detected capacity change from 0 to 4096 [ 93.417635][ T6210] loop4: detected capacity change from 0 to 4096 [ 93.588230][ T6218] loop1: detected capacity change from 0 to 64 [ 93.620677][ T6218] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 93.629500][ T6218] overlayfs: failed to look up (110) for ino (-13) [ 93.752009][ T6224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.756457][ T6224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.758192][ T6231] siw: device registration error -23 [ 93.871913][ T6234] loop1: detected capacity change from 0 to 32768 [ 93.879786][ T6234] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.573 (6234) [ 93.890083][ T6234] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.891895][ T6234] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 93.893308][ T6234] BTRFS info (device loop1): force clearing of disk cache [ 93.895995][ T6234] BTRFS info (device loop1): max_inline at 0 [ 93.896950][ T6234] BTRFS info (device loop1): enabling auto defrag [ 93.898164][ T6234] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 93.899648][ T6234] BTRFS info (device loop1): force zstd compression, level 3 [ 93.900808][ T6234] BTRFS info (device loop1): enabling disk space caching [ 93.901839][ T6234] BTRFS info (device loop1): disk space caching is enabled [ 93.916452][ T6234] BTRFS info (device loop1): enabling ssd optimizations [ 93.920514][ T6234] BTRFS info (device loop1): rebuilding free space tree [ 93.933273][ T6234] BTRFS info (device loop1): disabling free space tree [ 93.935577][ T6234] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 93.937253][ T6234] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 94.021147][ T4930] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 94.048049][ T4320] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.154006][ T6263] rdma_rxe: rxe_register_device failed with error -23 [ 94.155053][ T6263] rdma_rxe: failed to add syz_tun [ 94.322973][ T6273] rdma_rxe: rxe_register_device failed with error -23 [ 94.325164][ T6273] rdma_rxe: failed to add syz_tun [ 94.392530][ T6279] lo speed is unknown, defaulting to 1000 [ 94.396372][ T6279] lo speed is unknown, defaulting to 1000 [ 94.397407][ T6279] lo speed is unknown, defaulting to 1000 [ 94.422284][ T6279] infiniband sz1: set active [ 94.424248][ T14] lo speed is unknown, defaulting to 1000 [ 94.427705][ T6279] infiniband sz1: added lo [ 94.460000][ T6279] RDS/IB: sz1: added [ 94.463569][ T6279] smc: adding ib device sz1 with port count 1 [ 94.471155][ T6279] smc: ib device sz1 port 1 has pnetid [ 94.473401][ T14] lo speed is unknown, defaulting to 1000 [ 94.486773][ T6279] lo speed is unknown, defaulting to 1000 [ 94.518752][ T6279] lo speed is unknown, defaulting to 1000 [ 94.631745][ T6279] lo speed is unknown, defaulting to 1000 [ 94.770668][ T6279] lo speed is unknown, defaulting to 1000 [ 94.841893][ T6279] lo speed is unknown, defaulting to 1000 [ 94.846345][ T6294] loop5: detected capacity change from 0 to 2048 [ 94.866224][ T6294] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 94.873769][ T6294] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 94.884209][ T6294] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.005200][ T6281] loop1: detected capacity change from 0 to 40427 [ 95.032907][ T5965] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.039610][ T6300] loop5: detected capacity change from 0 to 4096 [ 95.189383][ T6316] rdma_rxe: rxe_register_device failed with error -23 [ 95.192202][ T6316] rdma_rxe: failed to add syz_tun [ 95.204349][ T6317] loop1: detected capacity change from 0 to 64 [ 95.229577][ T6317] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 95.295104][ T6324] loop1: detected capacity change from 0 to 1024 [ 95.296556][ T6324] EXT4-fs: Ignoring removed oldalloc option [ 95.297532][ T6324] EXT4-fs: Ignoring removed orlov option [ 95.337190][ T6324] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 95.447453][ T6324] EXT4-fs error (device loop1): ext4_ext_remove_space:2858: inode #15: comm syz.1.604: path[1].p_hdr == NULL [ 95.526418][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 95.560268][ T6346] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 95.871642][ T6380] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 96.006382][ T6369] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.625 (6369) [ 96.041464][ T6369] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.056102][ T6369] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm [ 96.057606][ T6369] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 96.059281][ T6369] BTRFS info (device loop5): trying to use backup root at mount time [ 96.060466][ T6369] BTRFS info (device loop5): setting nodatasum [ 96.061425][ T6369] BTRFS info (device loop5): enabling ssd optimizations [ 96.062530][ T6369] BTRFS info (device loop5): using spread ssd allocation scheme [ 96.063644][ T6369] BTRFS info (device loop5): turning on flush-on-commit [ 96.071443][ T6369] BTRFS info (device loop5): force zlib compression, level 3 [ 96.072714][ T6369] BTRFS info (device loop5): using free space tree [ 96.130889][ T6407] EXT4-fs: Ignoring removed oldalloc option [ 96.134871][ T6407] EXT4-fs: Ignoring removed orlov option [ 96.180382][ T6407] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 96.262947][ T6438] netem: change failed [ 96.267629][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 96.317898][ T5699] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.415212][ T6451] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 96.416644][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 96.675572][ T6475] EXT4-fs: Ignoring removed oldalloc option [ 96.677911][ T6475] EXT4-fs: Ignoring removed orlov option [ 96.697918][ T6480] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 96.699899][ T6475] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 96.702861][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 96.709537][ T6480] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 96.715169][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 96.773794][ T5699] EXT4-fs (loop5): unmounting filesystem. [ 96.796391][ T6491] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 96.797884][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 97.024378][ T6513] EXT4-fs: Ignoring removed oldalloc option [ 97.026425][ T6513] EXT4-fs: Ignoring removed orlov option [ 97.044012][ T6513] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 97.177969][ T5699] EXT4-fs (loop5): unmounting filesystem. [ 97.387504][ T6560] EXT4-fs: Ignoring removed oldalloc option [ 97.394444][ T6560] EXT4-fs: Ignoring removed orlov option [ 97.399408][ T6563] rdma_rxe: rxe_register_device failed with error -23 [ 97.400923][ T6563] rdma_rxe: failed to add syz_tun [ 97.427359][ T6560] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 97.510928][ T5699] EXT4-fs (loop5): unmounting filesystem. [ 97.738217][ T6595] EXT4-fs: Ignoring removed oldalloc option [ 97.739330][ T6595] EXT4-fs: Ignoring removed orlov option [ 97.761329][ T6599] rdma_rxe: rxe_register_device failed with error -23 [ 97.762612][ T6599] rdma_rxe: failed to add lo [ 97.785835][ T6595] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 97.847212][ T5699] EXT4-fs (loop5): unmounting filesystem. [ 97.978487][ T6607] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.720 (6607) [ 97.985270][ T6607] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.986965][ T6607] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 97.998132][ T6607] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 97.999923][ T6607] BTRFS info (device loop4): trying to use backup root at mount time [ 98.001116][ T6607] BTRFS info (device loop4): setting nodatasum [ 98.002063][ T6607] BTRFS info (device loop4): enabling ssd optimizations [ 98.003166][ T6607] BTRFS info (device loop4): using spread ssd allocation scheme [ 98.020788][ T6607] BTRFS info (device loop4): turning on flush-on-commit [ 98.021842][ T6607] BTRFS info (device loop4): force zlib compression, level 3 [ 98.022878][ T6607] BTRFS info (device loop4): using free space tree [ 98.023371][ T6625] net_ratelimit: 5 callbacks suppressed [ 98.023379][ T6625] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 98.031450][ T6627] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 98.032764][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 98.110806][ T6635] set_capacity_and_notify: 14 callbacks suppressed [ 98.110817][ T6635] loop5: detected capacity change from 0 to 4096 [ 98.134009][ T6648] loop1: detected capacity change from 0 to 1024 [ 98.135583][ T6648] EXT4-fs: Ignoring removed oldalloc option [ 98.136534][ T6648] EXT4-fs: Ignoring removed orlov option [ 98.182465][ T6648] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 98.264152][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 98.317523][ T4330] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.343419][ T6679] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 98.378845][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 98.419356][ T5964] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (5964) [ 98.664037][ T6706] loop4: detected capacity change from 0 to 1024 [ 98.671511][ T6706] EXT4-fs: Ignoring removed oldalloc option [ 98.675240][ T6706] EXT4-fs: Ignoring removed orlov option [ 98.723028][ T6706] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 98.775195][ T6716] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 98.788740][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 98.831476][ T6720] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 98.838633][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 98.991503][ T6734] loop4: detected capacity change from 0 to 4096 [ 99.023550][ T6740] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 99.213775][ T4324] Bluetooth: hci5: command 0x0406 tx timeout [ 99.562784][ T6804] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 99.564801][ T6770] loop1: detected capacity change from 0 to 32768 [ 99.566624][ T6770] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 99.667667][ T6807] loop5: detected capacity change from 0 to 4096 [ 99.750436][ T6826] loop4: detected capacity change from 0 to 1024 [ 99.751982][ T6826] EXT4-fs: Ignoring removed oldalloc option [ 99.753097][ T6826] EXT4-fs: Ignoring removed orlov option [ 99.775727][ T5963] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 99.814685][ T6826] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 99.938955][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 100.171741][ T6848] loop1: detected capacity change from 0 to 32768 [ 100.189622][ T6848] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 100.252114][ T6880] loop4: detected capacity change from 0 to 1024 [ 100.253589][ T6880] EXT4-fs: Ignoring removed oldalloc option [ 100.288029][ T6880] EXT4-fs: Ignoring removed orlov option [ 100.333311][ T6880] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 100.369100][ T5963] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 100.393543][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 100.486308][ T6905] loop1: detected capacity change from 0 to 4096 [ 100.663403][ T6909] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.666320][ T6909] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 100.667657][ T6909] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 100.669160][ T6909] BTRFS info (device loop4): trying to use backup root at mount time [ 100.670462][ T6909] BTRFS info (device loop4): setting nodatasum [ 100.671360][ T6909] BTRFS info (device loop4): enabling ssd optimizations [ 100.672492][ T6909] BTRFS info (device loop4): using spread ssd allocation scheme [ 100.683921][ T6909] BTRFS info (device loop4): turning on flush-on-commit [ 100.686993][ T6909] BTRFS info (device loop4): force zlib compression, level 3 [ 100.688193][ T6909] BTRFS info (device loop4): using free space tree [ 100.912498][ T4330] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.165351][ T6993] EXT4-fs: Ignoring removed bh option [ 101.189442][ T6993] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 101.447698][ T5699] EXT4-fs (loop5): unmounting filesystem. [ 101.779148][ T7032] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.883 (7032) [ 101.789276][ T7032] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.791223][ T7051] overlayfs: unrecognized mount option "/" or missing value [ 101.793019][ T7032] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 101.802532][ T7032] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 101.804689][ T7032] BTRFS info (device loop1): trying to use backup root at mount time [ 101.809442][ T7032] BTRFS info (device loop1): setting nodatasum [ 101.810644][ T7032] BTRFS info (device loop1): enabling ssd optimizations [ 101.816397][ T7032] BTRFS info (device loop1): using spread ssd allocation scheme [ 101.817555][ T7032] BTRFS info (device loop1): turning on flush-on-commit [ 101.818606][ T7032] BTRFS info (device loop1): force zlib compression, level 3 [ 101.819815][ T7032] BTRFS info (device loop1): using free space tree [ 102.073347][ T4320] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.211906][ T7117] EXT4-fs: Ignoring removed oldalloc option [ 102.212983][ T7117] EXT4-fs: Ignoring removed orlov option [ 102.249271][ T7117] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 102.356268][ T7117] ================================================================== [ 102.357514][ T7117] BUG: KASAN: use-after-free in ext4_find_extent+0x8f4/0xaa8 [ 102.358630][ T7117] Read of size 4 at addr ffff0000fe2b9e18 by task syz.5.910/7117 [ 102.359829][ T7117] [ 102.360180][ T7117] CPU: 0 PID: 7117 Comm: syz.5.910 Not tainted syzkaller #0 [ 102.361271][ T7117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 102.362818][ T7117] Call trace: [ 102.363294][ T7117] dump_backtrace+0x1c0/0x1ec [ 102.363979][ T7117] show_stack+0x2c/0x3c [ 102.364596][ T7117] __dump_stack+0x30/0x40 [ 102.365229][ T7117] dump_stack_lvl+0xf4/0x15c [ 102.365896][ T7117] print_address_description+0x88/0x218 [ 102.366699][ T7117] print_report+0x50/0x68 [ 102.367382][ T7117] kasan_report+0xa8/0xfc [ 102.368017][ T7117] __asan_report_load4_noabort+0x2c/0x38 [ 102.368836][ T7117] ext4_find_extent+0x8f4/0xaa8 [ 102.369518][ T7117] ext4_ext_remove_space+0x2c0/0x3ac4 [ 102.370389][ T7117] ext4_punch_hole+0x694/0xb58 [ 102.371151][ T7117] ext4_fallocate+0x224/0x1abc [ 102.371861][ T7117] vfs_fallocate+0x4a4/0x5f4 [ 102.372577][ T7117] ioctl_preallocate+0x20c/0x2b4 [ 102.373417][ T7117] do_vfs_ioctl+0x1874/0x2100 [ 102.374170][ T7117] __arm64_sys_ioctl+0xe4/0x1c8 [ 102.375010][ T7117] invoke_syscall+0x98/0x2b4 [ 102.375749][ T7117] el0_svc_common+0x138/0x258 [ 102.376509][ T7117] do_el0_svc+0x58/0x130 [ 102.377166][ T7117] el0_svc+0x58/0x128 [ 102.377775][ T7117] el0t_64_sync_handler+0x84/0xf0 [ 102.378568][ T7117] el0t_64_sync+0x18c/0x190 [ 102.379240][ T7117] [ 102.379570][ T7117] The buggy address belongs to the physical page: [ 102.380567][ T7117] page:0000000029fe2a4a refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x13e2b9 [ 102.382117][ T7117] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 102.383204][ T7117] raw: 05ffc00000000000 dead000000000100 dead000000000122 0000000000000000 [ 102.384479][ T7117] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 102.385754][ T7117] page dumped because: kasan: bad access detected [ 102.386713][ T7117] [ 102.387064][ T7117] Memory state around the buggy address: [ 102.387902][ T7117] ffff0000fe2b9d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 102.389270][ T7117] ffff0000fe2b9d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 102.390656][ T7117] >ffff0000fe2b9e00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 102.392052][ T7117] ^ [ 102.392885][ T7117] ffff0000fe2b9e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 102.394287][ T7117] ffff0000fe2b9f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 102.395503][ T7117] ================================================================== [ 102.427412][ T7117] Disabling lock debugging due to kernel taint [ 102.429872][ T7117] EXT4-fs error (device loop5): ext4_ext_split:1085: inode #15: comm syz.5.910: p_ext > EXT_MAX_EXTENT! [ 102.443365][ T5699] EXT4-fs (loop5): unmounting filesystem.