last executing test programs: 5.778419901s ago: executing program 3: sched_setscheduler(0x0, 0x0, 0x0) unshare(0x600) inotify_init1(0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) inotify_init1(0x0) r0 = inotify_init1(0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x60) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x60) inotify_rm_watch(r0, r2) 5.597267049s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}}, 0x0) 5.425584285s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12011c00090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201400905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="200004000000c0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000cc0)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x4, "4be05bc9"}, 0x0, 0x0, 0x0, 0x0}) 3.806879878s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x50, &(0x7f0000000100)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@grpid}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@orlov}, {}, {@nombcache}, {@noquota}]}, 0x0, 0x799, &(0x7f00000001c0)="$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") ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) 2.108404462s ago: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b00)={0x7, 0x0, [{0x0, 0x99, &(0x7f0000000780)=""/153}, {0x0, 0x1, &(0x7f0000000c40)=""/1}, {0x0, 0xd9, &(0x7f0000000840)=""/217}, {0x0, 0xfffffffffffffed5, &(0x7f0000000940)=""/149}, {0x0, 0x20, &(0x7f0000000700)=""/32}, {0x0, 0x7e, &(0x7f0000000a00)=""/126}, {0x0, 0x7b, &(0x7f0000000c80)=""/130}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 1.99453729s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 1.900779654s ago: executing program 0: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x1}, @generic={0x5, 0x0, 0x0, 0x2}, @jmp, @jmp]}, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r7, 0x58, &(0x7f0000000580)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r7, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3c, &(0x7f0000000700)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x38, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x4, 0x5, 0x6, 0x47800000, 0x233c, r7, 0x5, '\x00', r8, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r10}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x33}, {0x7, 0x0}}}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) 1.777018883s ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) listen(r0, 0x0) 1.445724006s ago: executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="e8ff3f0000000002280012000c00010076657468"], 0x48}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005070000000000000000001d0102", @ANYRES32=r1, @ANYRES64], 0x48}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001100030400"/20, @ANYRES32=r4], 0x20}}, 0x0) 1.342705631s ago: executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00') r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bbfe80000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001540)=""/4096, 0x1000}], 0x1, 0x0, 0x23}, 0x4000000}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 1.325364744s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}}, 0x0) 1.120341766s ago: executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xf25, 0x2) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000500)="90", 0x1}], 0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001040)={0x0, 0x8, 0x2, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x1]}}}) 1.051899646s ago: executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',debug=A']) 1.050076636s ago: executing program 3: syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0xabb, &(0x7f0000000340)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x851800, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) 1.009728363s ago: executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000003c0)={r3, @in={{0x2, 0x0, @private}}}, &(0x7f0000000340)=0x90) 905.762009ms ago: executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180800000000e05ada2700000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 879.643144ms ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="860088a80500560008005400000060ec97"], 0xfdef) 759.790152ms ago: executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xbe, &(0x7f0000000000), &(0x7f0000000080)=0x4) 725.584557ms ago: executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000300)={0x0, 0x80, 0xfffffffc}) 657.552488ms ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x8000000) syslog(0x2, &(0x7f0000000000)=""/139, 0x8b) 588.659388ms ago: executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b00)={0x7, 0x0, [{0x0, 0x99, &(0x7f0000000780)=""/153}, {0x0, 0x1, &(0x7f0000000c40)=""/1}, {0x0, 0xd9, &(0x7f0000000840)=""/217}, {0x0, 0xfffffffffffffed5, &(0x7f0000000940)=""/149}, {0x0, 0x20, &(0x7f0000000700)=""/32}, {0x0, 0x7e, &(0x7f0000000a00)=""/126}, {0x0, 0x7b, &(0x7f0000000c80)=""/130}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 581.74249ms ago: executing program 1: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() brk(0x55555ede6001) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 554.381314ms ago: executing program 4: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x1}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_submit(0x0, 0x0, 0x0) 511.80035ms ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-160-generic)\x00'}, 0x58) 502.597772ms ago: executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="e8ff3f0000000002280012000c00010076657468"], 0x48}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005070000000000000000001d0102", @ANYRES32=r1, @ANYRES64], 0x48}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001100030400"/20, @ANYRES32=r4], 0x20}}, 0x0) 377.627051ms ago: executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xf25, 0x2) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000500)="90", 0x1}], 0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001040)={0x0, 0x8, 0x2, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x1]}}}) 324.898379ms ago: executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={[0x101]}, 0x8}) 263.570899ms ago: executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$KDFONTOP_GET(r1, 0x4b3b, 0x0) 119.062431ms ago: executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180800000000e05ada2700000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 2: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') truncate(&(0x7f0000000200)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. 2024/06/19 07:58:23 fuzzer started 2024/06/19 07:58:23 dialing manager at 10.128.0.163:30022 [ 59.604710][ T3551] cgroup: Unknown subsys name 'net' [ 59.793384][ T3551] cgroup: Unknown subsys name 'rlimit' 2024/06/19 07:58:25 starting 5 executor processes [ 61.051187][ T3550] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.567037][ T3586] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.567036][ T3587] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.568560][ T3587] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.576111][ T3586] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.583361][ T3587] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.590613][ T3586] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.596378][ T3587] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.617291][ T3586] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.624730][ T3588] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.624929][ T3586] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.632421][ T3588] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.641221][ T3586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.646674][ T3588] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.653596][ T3586] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.659941][ T3588] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.670288][ T3586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.674001][ T3588] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.682177][ T3586] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.690624][ T3588] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.702914][ T3588] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.704625][ T3587] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.710549][ T3588] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.717356][ T3587] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.724180][ T3588] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.731462][ T3587] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.739456][ T3588] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.745481][ T3587] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.759541][ T3587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.793614][ T3586] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.801036][ T3586] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.272063][ T3571] chnl_net:caif_netlink_parms(): no params data found [ 63.282612][ T3581] chnl_net:caif_netlink_parms(): no params data found [ 63.297143][ T3579] chnl_net:caif_netlink_parms(): no params data found [ 63.451631][ T3573] chnl_net:caif_netlink_parms(): no params data found [ 63.465307][ T3572] chnl_net:caif_netlink_parms(): no params data found [ 63.475262][ T3581] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.483410][ T3581] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.491513][ T3581] device bridge_slave_0 entered promiscuous mode [ 63.533362][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.540478][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.548991][ T3571] device bridge_slave_0 entered promiscuous mode [ 63.556834][ T3581] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.564200][ T3581] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.572094][ T3581] device bridge_slave_1 entered promiscuous mode [ 63.579828][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.587205][ T3579] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.595416][ T3579] device bridge_slave_0 entered promiscuous mode [ 63.608925][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.616193][ T3579] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.624488][ T3579] device bridge_slave_1 entered promiscuous mode [ 63.655597][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.662856][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.670703][ T3571] device bridge_slave_1 entered promiscuous mode [ 63.710463][ T3579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.745651][ T3579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.764735][ T3581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.779634][ T3581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.804260][ T3571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.843723][ T3571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.888932][ T3579] team0: Port device team_slave_0 added [ 63.898098][ T3579] team0: Port device team_slave_1 added [ 63.922822][ T3581] team0: Port device team_slave_0 added [ 63.928941][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.936444][ T3572] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.945570][ T3572] device bridge_slave_0 entered promiscuous mode [ 63.963223][ T3571] team0: Port device team_slave_0 added [ 63.971016][ T3573] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.978345][ T3573] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.986428][ T3573] device bridge_slave_0 entered promiscuous mode [ 63.995496][ T3581] team0: Port device team_slave_1 added [ 64.001407][ T3573] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.008618][ T3573] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.016669][ T3573] device bridge_slave_1 entered promiscuous mode [ 64.024221][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.031404][ T3572] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.039478][ T3572] device bridge_slave_1 entered promiscuous mode [ 64.056286][ T3571] team0: Port device team_slave_1 added [ 64.063380][ T3579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.070402][ T3579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.097074][ T3579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.142763][ T3579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.149749][ T3579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.175943][ T3579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.234211][ T3581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.241314][ T3581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.267566][ T3581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.280708][ T3573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.291944][ T3572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.303235][ T3571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.310221][ T3571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.337093][ T3571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.350262][ T3571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.357442][ T3571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.383797][ T3571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.396080][ T3581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.403111][ T3581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.429047][ T3581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.441907][ T3573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.453201][ T3572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.490471][ T3573] team0: Port device team_slave_0 added [ 64.531624][ T3573] team0: Port device team_slave_1 added [ 64.563893][ T3579] device hsr_slave_0 entered promiscuous mode [ 64.570797][ T3579] device hsr_slave_1 entered promiscuous mode [ 64.613610][ T3572] team0: Port device team_slave_0 added [ 64.644195][ T3581] device hsr_slave_0 entered promiscuous mode [ 64.651022][ T3581] device hsr_slave_1 entered promiscuous mode [ 64.657799][ T3581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.665885][ T3581] Cannot create hsr debugfs directory [ 64.673325][ T3572] team0: Port device team_slave_1 added [ 64.681899][ T3571] device hsr_slave_0 entered promiscuous mode [ 64.688964][ T3571] device hsr_slave_1 entered promiscuous mode [ 64.695687][ T3571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.703678][ T3571] Cannot create hsr debugfs directory [ 64.717499][ T3573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.724685][ T3573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.750683][ T3573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.763377][ T3573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.770354][ T3573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.793516][ T3586] Bluetooth: hci2: command tx timeout [ 64.797277][ T3573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.802457][ T3585] Bluetooth: hci0: command tx timeout [ 64.812820][ T3589] Bluetooth: hci1: command tx timeout [ 64.818561][ T3587] Bluetooth: hci4: command tx timeout [ 64.851831][ T3572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.858986][ T3572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.885149][ T3587] Bluetooth: hci3: command tx timeout [ 64.885371][ T3572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.929802][ T3572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.937118][ T3572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.963994][ T3572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.091424][ T3573] device hsr_slave_0 entered promiscuous mode [ 65.098224][ T3573] device hsr_slave_1 entered promiscuous mode [ 65.105679][ T3573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.113342][ T3573] Cannot create hsr debugfs directory [ 65.134298][ T3572] device hsr_slave_0 entered promiscuous mode [ 65.141149][ T3572] device hsr_slave_1 entered promiscuous mode [ 65.148184][ T3572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.155930][ T3572] Cannot create hsr debugfs directory [ 65.397101][ T3579] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.408765][ T3579] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.431967][ T3579] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.457260][ T3579] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.499619][ T3581] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.509433][ T3581] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.543961][ T3581] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.569587][ T3581] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.587702][ T3573] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.598618][ T3573] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.616968][ T3573] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.629555][ T3573] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.726186][ T3572] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.755051][ T3572] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.765411][ T3572] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.778982][ T3572] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.853922][ T3571] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.867034][ T3571] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.877767][ T3571] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.887700][ T3571] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.918446][ T3579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.946323][ T3581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.982119][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.996125][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.024628][ T3581] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.036360][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.045318][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.055846][ T3579] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.080299][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.089448][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.101813][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.109151][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.119184][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.139681][ T3573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.157975][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.167172][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.179601][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.187312][ T3619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.195607][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.204412][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.213004][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.220086][ T3619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.228579][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.244951][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.258495][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.267175][ T3621] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.274302][ T3621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.291118][ T3573] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.308500][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.319531][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.328119][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.336367][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.345730][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.377974][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.387474][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.396573][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.406471][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.415809][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.424576][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.434426][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.443182][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.451648][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.461497][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.470177][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.509199][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.519070][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.528766][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.535989][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.544141][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.553037][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.565514][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.574097][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.586218][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.594800][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.614880][ T3572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.622263][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.630468][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.639912][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.649228][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.656478][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.665108][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.673727][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.699477][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.709322][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.724539][ T3571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.747904][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.760943][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.776880][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.787245][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.812116][ T3572] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.852897][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.862109][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.873225][ T3585] Bluetooth: hci4: command tx timeout [ 66.889638][ T3585] Bluetooth: hci0: command tx timeout [ 66.890432][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.896246][ T3585] Bluetooth: hci1: command tx timeout [ 66.911382][ T3587] Bluetooth: hci2: command tx timeout [ 66.912200][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.931074][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.941331][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.952512][ T3585] Bluetooth: hci3: command tx timeout [ 66.962093][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.971921][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.980906][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.989491][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.999893][ T3571] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.014483][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.026877][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.056355][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.073680][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.082239][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.089442][ T3618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.123379][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.143143][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.151921][ T3618] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.159179][ T3618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.170204][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.194124][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.213548][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.220701][ T3618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.240617][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.257081][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.266643][ T3618] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.273867][ T3618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.281941][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.292141][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.300689][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.332102][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.354300][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.362019][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.370576][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.380154][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.389594][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.404667][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.418992][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.447294][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.460474][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.470582][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.484966][ T3579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.497290][ T3571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.510036][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.546177][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.555811][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.565067][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.573403][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.581016][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.589203][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.597949][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.608681][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.618358][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.637060][ T3581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.663905][ T3573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.693212][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.702071][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.712950][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.721461][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.731154][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.739847][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.748416][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.756924][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.766178][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.786587][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.837319][ T3579] device veth0_vlan entered promiscuous mode [ 67.857162][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.873204][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.882296][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.906153][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.933390][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.941384][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.975176][ T3579] device veth1_vlan entered promiscuous mode [ 68.001812][ T3581] device veth0_vlan entered promiscuous mode [ 68.012851][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.021120][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.040693][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.050268][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.058978][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.069759][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.077753][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.101060][ T3573] device veth0_vlan entered promiscuous mode [ 68.113470][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.121928][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.132307][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.146408][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.161757][ T3581] device veth1_vlan entered promiscuous mode [ 68.187063][ T3579] device veth0_macvtap entered promiscuous mode [ 68.211990][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.221267][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.230258][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.240005][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.249263][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.258466][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.266485][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.278604][ T3571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.298645][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.312247][ T3573] device veth1_vlan entered promiscuous mode [ 68.336657][ T3579] device veth1_macvtap entered promiscuous mode [ 68.350057][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.361270][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.373741][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.387987][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.413420][ T3581] device veth0_macvtap entered promiscuous mode [ 68.425225][ T3581] device veth1_macvtap entered promiscuous mode [ 68.488553][ T3572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.511795][ T3573] device veth0_macvtap entered promiscuous mode [ 68.527808][ T3579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.538946][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.548569][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.556666][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.564797][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.573710][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.582565][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.591513][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.605152][ T3581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.620158][ T3581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.633309][ T3581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.647533][ T3581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.657550][ T3579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.668465][ T3579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.679782][ T3579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.690662][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.699265][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.708341][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.718466][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.727778][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.736825][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.745776][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.769554][ T3573] device veth1_macvtap entered promiscuous mode [ 68.788702][ T3579] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.802231][ T3579] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.813968][ T3579] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.826816][ T3579] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.843110][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.852915][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.883921][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.900051][ T3581] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.909930][ T3581] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.919154][ T3581] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.928865][ T3581] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.951260][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.962028][ T3585] Bluetooth: hci2: command tx timeout [ 68.962067][ T3585] Bluetooth: hci4: command tx timeout [ 68.962598][ T3589] Bluetooth: hci1: command tx timeout [ 68.968788][ T3585] Bluetooth: hci0: command tx timeout [ 68.983155][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.994932][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.005626][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.017754][ T3573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.032986][ T3585] Bluetooth: hci3: command tx timeout [ 69.052950][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.064893][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.080144][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.091702][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.101852][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.117299][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.128754][ T3573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.164897][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.173694][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.186194][ T3573] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.195899][ T3573] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.210279][ T3573] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.219360][ T3573] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.236777][ T3572] device veth0_vlan entered promiscuous mode [ 69.267589][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.284802][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.293762][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.303364][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.351637][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.360181][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.380043][ T3571] device veth0_vlan entered promiscuous mode [ 69.404409][ T3572] device veth1_vlan entered promiscuous mode [ 69.412281][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.421151][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.430382][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.438482][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.458302][ T3571] device veth1_vlan entered promiscuous mode [ 69.505025][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.517292][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.561969][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.571183][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.585881][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.598091][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.609104][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.623213][ T3572] device veth0_macvtap entered promiscuous mode [ 69.647253][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.658776][ T3571] device veth0_macvtap entered promiscuous mode [ 69.666591][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.667781][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.683870][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.693594][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.710041][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.724866][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.736270][ T3571] device veth1_macvtap entered promiscuous mode [ 69.758310][ T3572] device veth1_macvtap entered promiscuous mode [ 69.769146][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.783391][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.797629][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.812267][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.821194][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.841858][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.841962][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.861642][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.863802][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.879780][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.891184][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.901209][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.911762][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.925056][ T3572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.940632][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.951896][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.963149][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.973790][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.984063][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.995879][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.006351][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.016890][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.029978][ T3571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.044009][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.052315][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.062059][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.071158][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.081015][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.094477][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.105543][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.115607][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.126563][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.136860][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.148743][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.162162][ T3572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.185922][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.196170][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.214397][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.225477][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.235352][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.252284][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.269490][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.279890][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.290843][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.300793][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.311375][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.322553][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.333515][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.345133][ T3571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.372789][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.381872][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.393726][ T3572] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.402613][ T3572] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.411343][ T3572] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.421124][ T3572] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.443085][ T3571] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.451953][ T3571] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.465578][ T3571] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.475666][ T3571] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.492911][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.500979][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.538491][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.711197][ T3659] loop2: detected capacity change from 0 to 512 [ 70.736187][ T3661] loop1: detected capacity change from 0 to 256 [ 70.781875][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.792155][ T3661] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.812975][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.836544][ T3659] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 70.869574][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.955541][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.963824][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.971814][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.011710][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.019908][ T3659] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.2: missing EA_INODE flag [ 71.032819][ T3585] Bluetooth: hci0: command tx timeout [ 71.038276][ T3585] Bluetooth: hci1: command tx timeout [ 71.045147][ T3587] Bluetooth: hci4: command tx timeout [ 71.045170][ T3589] Bluetooth: hci2: command tx timeout [ 71.057473][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.065373][ T3659] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 2 err=-117 [ 71.083555][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.094853][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.114297][ T3589] Bluetooth: hci3: command tx timeout [ 71.120929][ T3659] EXT4-fs (loop2): 1 orphan inode deleted [ 71.131751][ T3659] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 71.168268][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.195473][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.202210][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.255895][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.425125][ T3581] EXT4-fs (loop2): unmounting filesystem. [ 71.747899][ T3691] loop1: detected capacity change from 0 to 8 [ 71.935647][ T3699] loop4: detected capacity change from 0 to 1024 [ 72.024130][ T3699] ======================================================= [ 72.024130][ T3699] WARNING: The mand mount option has been deprecated and [ 72.024130][ T3699] and is ignored by this kernel. Remove the mand [ 72.024130][ T3699] option from the mount to silence this warning. [ 72.024130][ T3699] ======================================================= [ 72.059208][ C1] vkms_vblank_simulate: vblank timer overrun [ 72.120036][ T3706] loop2: detected capacity change from 0 to 512 [ 72.189419][ T3706] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 72.212711][ T3711] loop0: detected capacity change from 0 to 256 [ 72.283510][ T3711] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 72.316738][ T3709] device veth0_vlan left promiscuous mode [ 72.334451][ T3699] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.350726][ T3706] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.2: missing EA_INODE flag [ 72.358902][ T3699] EXT4-fs (loop4): DAX unsupported by block device. [ 72.409575][ T3706] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 2 err=-117 [ 72.511040][ T3706] EXT4-fs (loop2): 1 orphan inode deleted [ 72.533741][ T3706] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 72.734373][ T3581] EXT4-fs (loop2): unmounting filesystem. [ 73.099224][ T3730] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 73.873706][ T3760] device veth0_vlan left promiscuous mode [ 73.900327][ T3765] loop2: detected capacity change from 0 to 256 [ 73.966950][ T3765] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.345142][ T3777] loop4: detected capacity change from 0 to 1024 [ 74.469069][ T3777] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.511228][ T3777] EXT4-fs (loop4): DAX unsupported by block device. [ 77.166459][ T3794] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 77.639634][ T3810] loop1: detected capacity change from 0 to 512 [ 77.734328][ T3810] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 77.799037][ T3810] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.1: missing EA_INODE flag [ 77.874365][ T3810] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 2 err=-117 [ 77.943452][ T3810] EXT4-fs (loop1): 1 orphan inode deleted [ 77.949264][ T3810] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 78.168016][ T3573] EXT4-fs (loop1): unmounting filesystem. [ 78.425015][ T3835] loop2: detected capacity change from 0 to 1024 [ 78.446241][ T3834] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 78.504216][ T3835] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.676212][ T3835] EXT4-fs (loop2): DAX unsupported by block device. [ 78.944518][ T3714] udevd[3714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 79.203802][ T3589] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 79.203926][ T3585] Bluetooth: hci5: command 0x1003 tx timeout [ 79.203961][ T3586] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.370534][ T3828] loop3: detected capacity change from 0 to 40427 [ 80.492754][ T3828] F2FS-fs (loop3): Found nat_bits in checkpoint [ 80.497911][ T3853] loop1: detected capacity change from 0 to 32768 [ 80.542392][ T3853] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (3853) [ 80.629545][ T3853] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 80.666572][ T3853] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 80.692681][ T3828] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 80.697995][ T3853] BTRFS info (device loop1): using free space tree [ 80.933503][ T3828] overlayfs: failed to resolve './file0': -2 [ 81.041804][ T3902] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 81.053902][ T3853] BTRFS info (device loop1): enabling ssd optimizations [ 81.163853][ T3579] syz-executor.3: attempt to access beyond end of device [ 81.163853][ T3579] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 81.352014][ T3573] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 81.689719][ T46] Bluetooth: hci5: Frame reassembly failed (-84) [ 82.044864][ T155] cfg80211: failed to load regulatory.db [ 82.081215][ T3876] loop2: detected capacity change from 0 to 40427 [ 82.217040][ T3876] F2FS-fs (loop2): Invalid segment/section count (458776 != 24 * 1) [ 82.292497][ T3876] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 82.363334][ T3876] F2FS-fs (loop2): invalid crc value [ 82.411769][ T3876] F2FS-fs (loop2): Found nat_bits in checkpoint [ 82.632522][ T3876] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 82.662455][ T3565] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.679488][ T3876] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 82.768547][ T3924] f2fs_ckpt-7:2: attempt to access beyond end of device [ 82.768547][ T3924] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 82.881722][ T3936] loop4: detected capacity change from 0 to 1024 [ 82.953867][ T3936] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.018238][ T3936] EXT4-fs (loop4): DAX unsupported by block device. [ 83.088553][ T3565] usb 2-1: New USB device found, idVendor=13d3, idProduct=3335, bcdDevice=ff.1d [ 83.103375][ T3565] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.155588][ T3565] usb 2-1: config 0 descriptor?? [ 83.221036][ T3565] r8712u: register rtl8712_netdev_ops to netdev_ops [ 83.236682][ T3565] usb 2-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 83.363795][ T3944] device veth0_vlan left promiscuous mode [ 83.420168][ T3947] mmap: syz-executor.4 (3947) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.462547][ T3565] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 83.479996][ T3565] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 83.499407][ T3565] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 83.512671][ T3587] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 83.561228][ T3565] usb 2-1: USB disconnect, device number 2 [ 83.619616][ T3587] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.641382][ T3952] loop2: detected capacity change from 0 to 512 [ 83.778462][ T3952] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 83.848180][ T3952] ext4 filesystem being mounted at /root/syzkaller-testdir1561528157/syzkaller.5eJ36w/17/file0 supports timestamps until 2038 (0x7fffffff) [ 83.929183][ T3958] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 84.236055][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.256360][ T3585] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.269316][ T3585] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.279849][ T3585] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.300863][ T3589] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.313867][ T3589] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.321397][ T3589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.396422][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.479502][ T3581] EXT4-fs (loop2): unmounting filesystem. [ 84.565269][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.850315][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.514538][ T3984] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 85.635616][ T3649] udevd[3649]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 85.681785][ T3997] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.018079][ T3995] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 86.094944][ T26] audit: type=1326 audit(1718783930.133:2): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=3992 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ef467cf29 code=0x0 [ 86.236894][ T3963] chnl_net:caif_netlink_parms(): no params data found [ 86.385947][ T3995] can: request_module (can-proto-5) failed. [ 86.402818][ T3587] Bluetooth: hci1: command tx timeout [ 86.569396][ T4038] netlink: 69284 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.652987][ T4038] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 86.694046][ T3963] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.701203][ T3963] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.762680][ T3963] device bridge_slave_0 entered promiscuous mode [ 86.794877][ T4044] loop3: detected capacity change from 0 to 2048 [ 86.827511][ T3963] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.844242][ T3963] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.869498][ T3963] device bridge_slave_1 entered promiscuous mode [ 87.075923][ T3963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.142930][ T3963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.289886][ T3963] team0: Port device team_slave_0 added [ 87.508156][ T3963] team0: Port device team_slave_1 added [ 87.692938][ T3963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.700014][ T3963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.765222][ T3963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.799174][ T4081] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 87.831767][ T3963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.863818][ T3963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.912487][ T3963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.969325][ T46] device hsr_slave_0 left promiscuous mode [ 87.981594][ T46] device hsr_slave_1 left promiscuous mode [ 87.988929][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.996655][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.006052][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.013567][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.023308][ T46] device bridge_slave_1 left promiscuous mode [ 88.029481][ T26] audit: type=1326 audit(1718783932.063:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4078 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9f2a7cf29 code=0x0 [ 88.045684][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.068600][ T46] device bridge_slave_0 left promiscuous mode [ 88.075802][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.110951][ T46] device veth1_macvtap left promiscuous mode [ 88.119249][ T46] device veth0_macvtap left promiscuous mode [ 88.134821][ T46] device veth1_vlan left promiscuous mode [ 88.222413][ T155] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.457322][ T4093] loop4: detected capacity change from 0 to 1024 [ 88.482486][ T3587] Bluetooth: hci1: command tx timeout [ 88.534438][ T4093] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 88.563233][ T46] team0 (unregistering): Port device team_slave_1 removed [ 88.598854][ T46] team0 (unregistering): Port device team_slave_0 removed [ 88.626894][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.644658][ T155] usb 2-1: New USB device found, idVendor=13d3, idProduct=3335, bcdDevice=ff.1d [ 88.667370][ T155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.676098][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.711616][ T155] usb 2-1: config 0 descriptor?? [ 88.765819][ T155] r8712u: register rtl8712_netdev_ops to netdev_ops [ 88.772797][ T4087] can: request_module (can-proto-5) failed. [ 88.787254][ T155] usb 2-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 88.835899][ T3571] EXT4-fs (loop4): unmounting filesystem. [ 88.930076][ T46] bond0 (unregistering): Released all slaves [ 88.992626][ T155] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 88.999306][ T155] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 89.021757][ T155] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 89.043715][ T155] usb 2-1: USB disconnect, device number 3 [ 89.225931][ T3963] device hsr_slave_0 entered promiscuous mode [ 89.246277][ T3963] device hsr_slave_1 entered promiscuous mode [ 89.266513][ T3963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.287808][ T3963] Cannot create hsr debugfs directory [ 90.211173][ T26] audit: type=1804 audit(1718783934.213:4): pid=4139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2777820614/syzkaller.Wwgmnk/29/bus" dev="sda1" ino=1950 res=1 errno=0 [ 90.571425][ T3587] Bluetooth: hci1: command tx timeout [ 90.949836][ T26] audit: type=1800 audit(1718783934.213:5): pid=4139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1950 res=0 errno=0 [ 90.979664][ T4148] loop3: detected capacity change from 0 to 256 [ 91.113727][ T26] audit: type=1326 audit(1718783935.143:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4132 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9f2a7cf29 code=0x0 [ 91.262213][ T4151] loop4: detected capacity change from 0 to 2048 [ 91.356329][ T4151] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 91.426467][ T4151] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.455656][ T4160] Illegal XDP return value 4294967274 on prog (id 32) dev syz_tun, expect packet loss! [ 91.757623][ T4168] MPTCP: kernel_bind error, err=-22 [ 91.764701][ T3963] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.835550][ T4140] can: request_module (can-proto-5) failed. [ 91.929840][ T3963] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.939589][ T4174] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 92.082639][ T4178] netlink: 'syz-executor.4': attribute type 25 has an invalid length. [ 92.107954][ T4178] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 92.166018][ T3963] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.242831][ T3963] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.505453][ T4191] loop4: detected capacity change from 0 to 2048 [ 92.608449][ T4191] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 92.632569][ T3589] Bluetooth: hci1: command tx timeout [ 92.657033][ T3963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.672094][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.684239][ T4191] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.701003][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.725645][ T3963] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.765428][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.784247][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.801384][ T4202] loop1: detected capacity change from 0 to 2048 [ 92.828454][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.835772][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.859340][ T4205] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 92.901983][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.910495][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.959583][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.007338][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.014559][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.069711][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.094054][ T4216] loop3: detected capacity change from 0 to 512 [ 93.143785][ T4216] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.153660][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.182946][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.203788][ T4216] EXT4-fs (loop3): invalid inodes per group: 8 [ 93.203788][ T4216] [ 93.211747][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.256386][ T3963] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.302046][ T3963] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.371895][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.381552][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.415825][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.447077][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.502501][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.546517][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.561021][ T4227] loop2: detected capacity change from 0 to 2048 [ 93.584369][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.623583][ T4225] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 93.661650][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.762307][ T4240] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.063839][ T4249] loop1: detected capacity change from 0 to 24 [ 94.580323][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.592775][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.658437][ T3963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.911829][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.724269][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.761147][ T3963] device veth0_vlan entered promiscuous mode [ 95.768872][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.778645][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.824972][ T3589] Bluetooth: Unexpected continuation frame (len 18) [ 95.830492][ T3963] device veth1_vlan entered promiscuous mode [ 95.924316][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.953594][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.966461][ T4290] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 96.076458][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.101252][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.160853][ T3963] device veth0_macvtap entered promiscuous mode [ 96.215202][ T3963] device veth1_macvtap entered promiscuous mode [ 96.309595][ T3963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.316677][ T4297] loop2: detected capacity change from 0 to 4096 [ 96.363346][ T3963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.421880][ T3963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.452419][ T4310] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.483368][ T3963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.532455][ T3963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.563635][ T3963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.592434][ T3963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.641839][ T3963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.674941][ T3963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.703275][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.711710][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.759763][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.785313][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.845378][ T3963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.875286][ T3963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.900939][ T3963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.924139][ T3963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.934809][ T4297] orangefs_mount: mount request failed with -4 [ 96.964489][ T3963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.987086][ T4278] loop4: detected capacity change from 0 to 40427 [ 97.003873][ T4278] F2FS-fs (loop4): Invalid segment/section count (458776 != 24 * 1) [ 97.020876][ T4278] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 97.032752][ T3963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.041231][ T4278] F2FS-fs (loop4): invalid crc value [ 97.051554][ T3963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.065868][ T3963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.091256][ T4278] F2FS-fs (loop4): Found nat_bits in checkpoint [ 97.109900][ T3963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.131592][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.163214][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.233576][ T3963] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.262800][ T3963] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.312495][ T3963] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.321346][ T3963] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.358893][ T4278] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 97.370694][ T4278] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 97.556892][ T4326] f2fs_ckpt-7:4: attempt to access beyond end of device [ 97.556892][ T4326] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 97.686644][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.706402][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.735571][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.750352][ T4348] loop1: detected capacity change from 0 to 512 [ 97.824670][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.842056][ T4348] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.848956][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.886740][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.901293][ T4348] EXT4-fs (loop1): invalid inodes per group: 8 [ 97.901293][ T4348] [ 98.048318][ T4353] loop3: detected capacity change from 0 to 4096 [ 98.191795][ T4363] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.479649][ T4372] loop2: detected capacity change from 0 to 64 [ 98.656242][ T4353] orangefs_mount: mount request failed with -4 [ 98.762287][ T4379] loop1: detected capacity change from 0 to 24 [ 99.302594][ T155] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.448149][ T4402] loop2: detected capacity change from 0 to 2048 [ 99.556280][ T4402] loop2: p3 < > p4 < > [ 99.560914][ T4402] loop2: partition table partially beyond EOD, truncated [ 99.622672][ T4402] loop2: p3 start 4284289 is beyond EOD, truncated [ 99.662695][ T155] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 99.702710][ T4410] loop3: detected capacity change from 0 to 64 [ 99.712513][ T155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.758110][ T155] usb 2-1: config 0 descriptor?? [ 99.938022][ T3587] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.959276][ T3587] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.967862][ T3587] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.977724][ T3587] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.989613][ T3587] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.999427][ T3587] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.083667][ T26] audit: type=1326 audit(1718783944.123:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04f4c7cf29 code=0x0 [ 100.172657][ T155] usb 2-1: Cannot read MAC address [ 100.178861][ T155] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 100.272838][ T155] usb 2-1: USB disconnect, device number 4 [ 100.273502][ T4421] loop3: detected capacity change from 0 to 2048 [ 100.358498][ T4421] loop3: p3 < > p4 < > [ 100.398901][ T4421] loop3: partition table partially beyond EOD, truncated [ 100.433749][ T4421] loop3: p3 start 4284289 is beyond EOD, truncated [ 100.519516][ T4411] chnl_net:caif_netlink_parms(): no params data found [ 100.815759][ T4446] loop2: detected capacity change from 0 to 4096 [ 100.835543][ T4446] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 100.863914][ T4411] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.898088][ T4411] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.898227][ T4449] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 100.931240][ T4411] device bridge_slave_0 entered promiscuous mode [ 100.942096][ T4446] ntfs3: loop2: ino=0, ntfs_iget5 [ 100.957730][ T4446] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 100.964855][ T4411] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.996635][ T4411] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.021119][ T4411] device bridge_slave_1 entered promiscuous mode [ 101.065005][ T4452] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 101.116012][ T4452] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 101.140819][ T4454] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.166432][ T4411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.208316][ T4411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.388278][ T4411] team0: Port device team_slave_0 added [ 101.410854][ T4411] team0: Port device team_slave_1 added [ 101.498258][ T4411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.506126][ T4411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.563292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 101.601908][ T4411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.666938][ T4411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.710544][ T4411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.837466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 101.845959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 101.854399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 101.862793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 101.871130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 101.879483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 101.887811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 101.896247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 101.904714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 102.603689][ T3589] Bluetooth: hci0: command tx timeout [ 102.716348][ T4480] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 102.737995][ T4411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.962803][ T4411] device hsr_slave_0 entered promiscuous mode [ 102.982219][ T4411] device hsr_slave_1 entered promiscuous mode [ 103.010680][ T4411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.034521][ T4411] Cannot create hsr debugfs directory [ 103.048459][ T4491] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.337102][ T4510] loop3: detected capacity change from 0 to 256 [ 104.362689][ T4511] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 104.401186][ T4510] FAT-fs (loop3): bogus sectors per cluster 0 [ 104.425908][ T4510] FAT-fs (loop3): Can't find a valid FAT filesystem [ 104.616637][ T4411] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.632769][ T3589] Bluetooth: hci0: command tx timeout [ 104.769813][ T4411] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.954611][ T4411] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.072893][ T4520] loop1: detected capacity change from 0 to 256 [ 105.084928][ T4411] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.158897][ T4520] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xbd37e1ce, utbl_chksum : 0xe619d30d) [ 105.493769][ T4411] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.531431][ T4411] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.560566][ T4411] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.579679][ T4411] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.794217][ T4411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.837371][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.864680][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.893875][ T4411] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.918760][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.937344][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.967750][ T3917] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.974973][ T3917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.021976][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.040336][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.061053][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.081016][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.088242][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.146607][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.168030][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.200626][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.226039][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.235800][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.256065][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.315224][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.361224][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.373086][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.390452][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.478951][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.489152][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.723407][ T3589] Bluetooth: hci0: command tx timeout [ 107.161107][ T4562] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.742728][ T3565] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.793196][ T3589] Bluetooth: hci0: command tx timeout [ 108.923852][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.933847][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.948651][ T4411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.012491][ T3565] usb 3-1: Using ep0 maxpacket: 32 [ 109.295024][ T3565] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 109.319850][ T3565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.361840][ T3565] usb 3-1: Product: syz [ 109.390042][ T3565] usb 3-1: Manufacturer: syz [ 109.421129][ T3565] usb 3-1: SerialNumber: syz [ 109.493179][ T3565] usb 3-1: config 0 descriptor?? [ 110.587320][ T4604] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 110.632839][ T3565] (unnamed net_device) (uninitialized): Assigned a random MAC address: 82:68:62:8a:aa:f1 [ 110.671878][ T3565] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 110.692726][ T155] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.701418][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.706132][ T3565] usb 3-1: USB disconnect, device number 2 [ 110.723696][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.796782][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.814398][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.835197][ T4411] device veth0_vlan entered promiscuous mode [ 111.065131][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.074728][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.079154][ T155] usb 4-1: Using ep0 maxpacket: 8 [ 111.098011][ T4411] device veth1_vlan entered promiscuous mode [ 111.224896][ T155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 111.239268][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 111.248656][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 111.254589][ T155] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 111.258508][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.278191][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.327916][ T4411] device veth0_macvtap entered promiscuous mode [ 111.438592][ T155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.524612][ T4411] device veth1_macvtap entered promiscuous mode [ 111.552283][ T155] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.640301][ T4411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.685984][ T4411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.732549][ T4411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.743518][ T155] usb 4-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice= 5.2a [ 111.785215][ T155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.799181][ T4411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.819270][ T155] usb 4-1: Product: syz [ 111.831910][ T4411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.850143][ T155] usb 4-1: Manufacturer: syz [ 111.872574][ T155] usb 4-1: SerialNumber: syz [ 111.882547][ T4411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.894343][ T155] usb 4-1: config 0 descriptor?? [ 111.907114][ T4411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.937743][ T155] omninet 4-1:0.0: ZyXEL - omni.net usb converter detected [ 111.957609][ T4411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.971427][ T155] usb 4-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 111.990863][ T4411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.020419][ T4411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.079614][ T4411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.193574][ T4411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.205040][ T4411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.214988][ T4411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.231379][ T3592] usb 4-1: USB disconnect, device number 2 [ 112.238916][ T4411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.455017][ T3592] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 112.493845][ T4411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.711932][ T3592] omninet 4-1:0.0: device disconnected [ 113.030910][ T4645] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 113.052402][ T4411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.125799][ T4411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.137482][ T4411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.147471][ T4411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.158918][ T4411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.180947][ T4411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.199605][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.223704][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.263133][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.297208][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.327599][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.362294][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.185173][ T4411] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.195603][ T4411] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.204420][ T4411] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.213285][ T4411] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.474246][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.502713][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.683921][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.736911][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.759544][ T4674] syz-executor.1 sent an empty control message without MSG_MORE. [ 114.791224][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.818079][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.124606][ T3592] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.923097][ T3592] usb 1-1: Using ep0 maxpacket: 8 [ 116.057230][ T3592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 116.082525][ T3592] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 116.113868][ T3592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.142762][ T3592] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.373881][ T3592] usb 1-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice= 5.2a [ 116.586337][ T3592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.790104][ T3592] usb 1-1: Product: syz [ 116.903834][ T3592] usb 1-1: Manufacturer: syz [ 117.012955][ T3592] usb 1-1: SerialNumber: syz [ 117.235316][ T3592] usb 1-1: config 0 descriptor?? [ 117.293897][ T3592] omninet 1-1:0.0: ZyXEL - omni.net usb converter detected [ 117.313528][ T3592] usb 1-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 117.530945][ T3917] usb 1-1: USB disconnect, device number 2 [ 117.583071][ T3917] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 117.626861][ T3917] omninet 1-1:0.0: device disconnected [ 119.193549][ T4749] loop3: detected capacity change from 0 to 128 [ 119.360912][ T4749] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 120.106319][ T26] audit: type=1804 audit(1718783964.143:8): pid=4749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3260784058/syzkaller.SI347w/87/file0/bus" dev="loop3" ino=1048610 res=1 errno=0 [ 120.161770][ T4760] loop2: detected capacity change from 0 to 512 [ 120.201159][ T4760] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 120.415761][ T3917] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.438907][ T4772] loop3: detected capacity change from 0 to 2048 [ 120.479836][ T4772] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 120.495448][ T3998] udevd[3998]: incorrect nilfs2 checksum on /dev/loop3 [ 120.516416][ T4760] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #3: comm syz-executor.2: corrupted inode contents [ 120.538430][ T4760] EXT4-fs error (device loop2): ext4_dirty_inode:6072: inode #3: comm syz-executor.2: mark_inode_dirty error [ 120.539831][ T4776] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.813631][ T4760] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #3: comm syz-executor.2: corrupted inode contents [ 120.990096][ T4760] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz-executor.2: mark_inode_dirty error [ 121.360722][ T4760] Quota error (device loop2): write_blk: dquota write failed [ 121.394131][ T4760] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 121.463339][ T4760] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz-executor.2: Failed to acquire dquot type 0 [ 121.502025][ T4760] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #16: comm syz-executor.2: corrupted inode contents [ 121.527780][ T4760] EXT4-fs error (device loop2): ext4_dirty_inode:6072: inode #16: comm syz-executor.2: mark_inode_dirty error [ 121.535005][ T3917] usb 2-1: Using ep0 maxpacket: 8 [ 121.543856][ T4760] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #16: comm syz-executor.2: corrupted inode contents [ 121.562390][ T3565] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.586786][ T4760] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz-executor.2: mark_inode_dirty error [ 121.599922][ T4760] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #16: comm syz-executor.2: corrupted inode contents [ 121.615347][ T4760] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 121.630350][ T4760] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #16: comm syz-executor.2: corrupted inode contents [ 121.643666][ T4760] EXT4-fs error (device loop2): ext4_truncate:4300: inode #16: comm syz-executor.2: mark_inode_dirty error [ 121.671378][ T4760] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 121.696706][ T3917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 121.713736][ T4760] EXT4-fs (loop2): 1 truncate cleaned up [ 121.719454][ T4760] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 121.728838][ T3917] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 121.739314][ T3917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.751115][ T3917] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.760276][ T4760] ext4 filesystem being mounted at /root/syzkaller-testdir1561528157/syzkaller.5eJ36w/82/file1 supports timestamps until 2038 (0x7fffffff) [ 121.819474][ T4793] loop3: detected capacity change from 0 to 128 [ 121.829317][ T4793] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 121.839060][ T3565] usb 1-1: Using ep0 maxpacket: 32 [ 121.874856][ T26] audit: type=1804 audit(1718783965.913:9): pid=4793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3260784058/syzkaller.SI347w/94/file0/bus" dev="loop3" ino=1048611 res=1 errno=0 [ 121.883263][ T4760] EXT4-fs error (device loop2): ext4_generic_delete_entry:2680: inode #2: block 3: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=44, inode=12, rec_len=8, size=4096 fake=0 [ 121.932585][ T3917] usb 2-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice= 5.2a [ 121.933825][ T4760] EXT4-fs error (device loop2) in ext4_delete_entry:2751: Corrupt filesystem [ 121.953595][ T3917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.976178][ T4760] EXT4-fs warning (device loop2): ext4_rename_delete:3735: inode #2: comm syz-executor.2: Deleting old file: nlink 5, error=-117 [ 121.986431][ T3917] usb 2-1: Product: syz [ 122.001608][ T3917] usb 2-1: Manufacturer: syz [ 122.015569][ T3917] usb 2-1: SerialNumber: syz [ 122.027123][ T3917] usb 2-1: config 0 descriptor?? [ 122.052062][ T4760] syz-executor.2 (4760) used greatest stack depth: 18648 bytes left [ 122.074006][ T3917] omninet 2-1:0.0: ZyXEL - omni.net usb converter detected [ 122.101575][ T3917] usb 2-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 122.107125][ T3581] EXT4-fs (loop2): unmounting filesystem. [ 122.133507][ T3565] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 122.152440][ T3565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.181610][ T3565] usb 1-1: Product: syz [ 122.189297][ T3565] usb 1-1: Manufacturer: syz [ 122.195266][ T3565] usb 1-1: SerialNumber: syz [ 122.211438][ T3565] usb 1-1: config 0 descriptor?? [ 122.294443][ T3652] usb 2-1: USB disconnect, device number 5 [ 122.312056][ T3652] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 122.323167][ T3652] omninet 2-1:0.0: device disconnected [ 122.370462][ T4800] loop3: detected capacity change from 0 to 2048 [ 122.398625][ T4800] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 122.436176][ T4807] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.922509][ T3565] (unnamed net_device) (uninitialized): Assigned a random MAC address: 5e:85:48:a6:92:0c [ 122.963190][ T3565] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 122.994283][ T3565] usb 1-1: USB disconnect, device number 3 [ 124.063663][ T3587] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 124.075643][ T3587] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.083976][ T3587] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.093199][ T3587] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 124.100838][ T3587] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 124.108283][ T3587] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.330196][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.384857][ T26] audit: type=1326 audit(1718783968.423:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4846 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04f4c7cf29 code=0x7ffc0000 [ 124.486135][ T26] audit: type=1326 audit(1718783968.423:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4846 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04f4c7cf29 code=0x7ffc0000 [ 124.523778][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.561908][ T26] audit: type=1326 audit(1718783968.423:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4846 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04f4c7cf29 code=0x7ffc0000 [ 124.644875][ T26] audit: type=1326 audit(1718783968.463:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4846 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04f4c7cf29 code=0x7ffc0000 [ 124.676250][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.690816][ T26] audit: type=1326 audit(1718783968.463:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4846 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04f4c7cf29 code=0x7ffc0000 [ 124.742048][ T26] audit: type=1326 audit(1718783968.463:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4846 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f04f4c7a6a7 code=0x7ffc0000 [ 124.789662][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.937919][ T4831] chnl_net:caif_netlink_parms(): no params data found [ 125.032974][ T4867] netlink: 576 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.255972][ T4831] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.299359][ T4831] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.316570][ T4831] device bridge_slave_0 entered promiscuous mode [ 125.396143][ T4831] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.408728][ T4831] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.433842][ T4831] device bridge_slave_1 entered promiscuous mode [ 125.523410][ T4895] loop3: detected capacity change from 0 to 2048 [ 125.530853][ T4895] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.537607][ T4895] EXT4-fs: Ignoring removed orlov option [ 125.557900][ T4831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.607604][ T4831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.608609][ T4895] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 125.652139][ T3990] Bluetooth: (null): Invalid header checksum [ 125.660826][ T3990] Bluetooth: (null): Invalid header checksum [ 125.723335][ T3990] Bluetooth: (null): Invalid header checksum [ 125.809204][ T4831] team0: Port device team_slave_0 added [ 125.832981][ T102] Bluetooth: (null): Invalid header checksum [ 125.838284][ T4831] team0: Port device team_slave_1 added [ 125.914250][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.929171][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.963020][ T102] Bluetooth: (null): Invalid header checksum [ 126.018100][ T4831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.050826][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.064070][ T11] Bluetooth: (null): Invalid header checksum [ 126.069744][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.124128][ T4831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.152641][ T3587] Bluetooth: hci5: command tx timeout [ 126.172868][ T102] Bluetooth: (null): Invalid header checksum [ 126.381119][ T4831] device hsr_slave_0 entered promiscuous mode [ 126.405449][ T4831] device hsr_slave_1 entered promiscuous mode [ 126.431079][ T4831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.433401][ T4916] loop2: detected capacity change from 0 to 64 [ 126.449325][ T4831] Cannot create hsr debugfs directory [ 126.498467][ T4916] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 126.582732][ T4916] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 126.613928][ T4916] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 126.638077][ T4920] loop1: detected capacity change from 0 to 128 [ 126.833955][ T46] device hsr_slave_0 left promiscuous mode [ 126.845635][ T3579] EXT4-fs (loop3): unmounting filesystem. [ 126.853486][ T46] device hsr_slave_1 left promiscuous mode [ 126.865780][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.924019][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.933798][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.941335][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.984018][ T46] device bridge_slave_1 left promiscuous mode [ 126.985534][ T4933] "syz-executor.2" (4933) uses obsolete ecb(arc4) skcipher [ 126.990365][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.039759][ T46] device bridge_slave_0 left promiscuous mode [ 127.057422][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.105893][ T46] device veth1_macvtap left promiscuous mode [ 127.130861][ T46] device veth0_macvtap left promiscuous mode [ 127.148605][ T46] device veth1_vlan left promiscuous mode [ 127.167816][ T46] device veth0_vlan left promiscuous mode [ 127.801249][ T46] team0 (unregistering): Port device team_slave_1 removed [ 127.828316][ T46] team0 (unregistering): Port device team_slave_0 removed [ 127.853243][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.875491][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.981890][ T46] bond0 (unregistering): Released all slaves [ 128.058218][ T4947] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.232682][ T3587] Bluetooth: hci5: command tx timeout [ 128.351369][ T4965] loop2: detected capacity change from 0 to 256 [ 128.621107][ T4831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.685214][ T4831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.709040][ T4831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.744610][ T4983] "syz-executor.2" (4983) uses obsolete ecb(arc4) skcipher [ 128.759802][ T4831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 129.058261][ T4831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.124917][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.140483][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.183374][ T4831] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.243480][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.270185][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.295787][ T3652] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.303028][ T3652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.373301][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.393449][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.419997][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.429301][ T3917] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.436497][ T3917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.466848][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.527459][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.552158][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.598555][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.632646][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.673832][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.700663][ T4831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.729098][ T4831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.755253][ T5025] loop1: detected capacity change from 0 to 128 [ 129.771365][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.780796][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.798332][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.816887][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.829770][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.875392][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.285551][ T5047] process 'syz-executor.0' launched '/dev/fd/-1/./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 130.312683][ T3587] Bluetooth: hci5: command tx timeout [ 130.461359][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.469758][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.483555][ T4831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.755056][ T5074] loop1: detected capacity change from 0 to 128 [ 130.936648][ T5080] "syz-executor.0" (5080) uses obsolete ecb(arc4) skcipher [ 130.950405][ T5075] kvm: emulating exchange as write [ 131.162734][ T3592] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 131.199660][ T5090] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 131.406698][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.415110][ T3592] usb 4-1: Using ep0 maxpacket: 32 [ 131.432526][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.501659][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.519927][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.542834][ T3592] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.567637][ T4831] device veth0_vlan entered promiscuous mode [ 131.573899][ T3592] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.613539][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.628081][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.639913][ T4831] device veth1_vlan entered promiscuous mode [ 131.712673][ T3592] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 131.727682][ T3592] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 131.751213][ T3592] usb 4-1: Product: syz [ 131.757488][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.766719][ T3592] usb 4-1: Manufacturer: syz [ 131.784225][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.805479][ T4831] device veth0_macvtap entered promiscuous mode [ 131.823649][ T3592] hub 4-1:4.0: USB hub found [ 131.835629][ T4831] device veth1_macvtap entered promiscuous mode [ 131.911543][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.920682][ T5110] loop1: detected capacity change from 0 to 128 [ 131.929184][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.953033][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.973964][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.005094][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.021165][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.032807][ T3592] hub 4-1:4.0: 2 ports detected [ 132.040007][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.050995][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.062252][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.073406][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.085750][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.097474][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.128687][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.140392][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.158755][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.171070][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.188914][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.203987][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.215106][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.225398][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.244886][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.280011][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.300468][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 132.310442][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 132.340731][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.356244][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.376560][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.396394][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.422779][ T4831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.454122][ T4831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.472694][ T3587] Bluetooth: hci5: command tx timeout [ 132.479155][ T4831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.487999][ T4831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.621224][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.635758][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.642166][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.649050][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.678184][ T5133] loop1: detected capacity change from 0 to 2048 [ 132.685829][ T5133] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.692545][ T5133] EXT4-fs: Ignoring removed orlov option [ 132.728769][ T5133] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 132.731837][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.779282][ T11] Bluetooth: (null): Invalid header checksum [ 132.807795][ T11] Bluetooth: (null): Invalid header checksum [ 132.869475][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.878541][ T3990] Bluetooth: (null): Invalid header checksum [ 132.903337][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.957872][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.983650][ T11] Bluetooth: (null): Invalid header checksum [ 133.093717][ T3990] Bluetooth: (null): Invalid header checksum [ 133.322625][ T3592] hub 4-1:4.0: activate --> -90 [ 133.438830][ T5147] syz-executor.2 (pid 5147) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 133.975931][ T5138] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 134.277484][ T32] usb 4-1: USB disconnect, device number 3 [ 134.361888][ T5166] loop4: detected capacity change from 0 to 256 [ 134.901675][ T5192] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.963513][ T3573] EXT4-fs (loop1): unmounting filesystem. [ 134.978917][ T5192] device veth3 entered promiscuous mode [ 135.326995][ T5210] loop3: detected capacity change from 0 to 2048 [ 135.411159][ T5214] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.472470][ T5210] loop3: detected capacity change from 2048 to 0 [ 135.482702][ T5218] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 135.508618][ C0] I/O error, dev loop3, sector 84 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.518029][ T5210] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=0) [ 135.642276][ C1] I/O error, dev loop3, sector 100 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.651920][ T3579] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=226) [ 135.673283][ T3579] NILFS (loop3): error -5 truncating bmap (ino=15) [ 135.710926][ C1] I/O error, dev loop3, sector 66 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.732406][ T3579] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 135.742421][ T3579] NILFS (loop3): error -5 truncating bmap (ino=16) [ 135.763070][ C1] I/O error, dev loop3, sector 90 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.782494][ T3579] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=34) [ 135.791390][ T3579] NILFS (loop3): error -5 truncating bmap (ino=17) [ 135.816793][ C1] I/O error, dev loop3, sector 84 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.826178][ T5214] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=0) [ 135.845852][ C1] I/O error, dev loop3, sector 84 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.855316][ T5214] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=0) [ 135.867234][ T5234] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.889948][ C1] I/O error, dev loop3, sector 84 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.899379][ T5214] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=0) [ 135.919213][ C1] I/O error, dev loop3, sector 84 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.928966][ T5214] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=0) [ 135.954470][ C1] I/O error, dev loop3, sector 84 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.964066][ T3579] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=0) [ 135.975974][ T5234] device veth3 entered promiscuous mode [ 135.984295][ C1] I/O error, dev loop3, sector 84 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 136.001200][ T3579] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=0) [ 136.015374][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 136.015389][ T26] audit: type=1326 audit(1718783980.053:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5238 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74aea7cf29 code=0x7ffc0000 [ 136.054596][ T3579] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=0) [ 136.070373][ T3579] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=0) [ 136.095580][ T3579] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 136.111121][ T26] audit: type=1326 audit(1718783980.053:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5238 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74aea7cf29 code=0x7ffc0000 [ 136.133863][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.161734][ T102] loop: Write error at byte offset 9223372036855820287, length 1024. [ 136.171960][ C1] Buffer I/O error on dev loop3, logical block 1020, lost sync page write [ 136.181067][ T3579] NILFS (loop3): unable to write superblock: err=-5 [ 136.188643][ T102] loop: Write error at byte offset 9223372036854776831, length 1024. [ 136.197969][ T26] audit: type=1326 audit(1718783980.083:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5238 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74aea7cf29 code=0x7ffc0000 [ 136.220712][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.233638][ C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 136.242069][ T3579] NILFS (loop3): unable to write superblock: err=-5 [ 136.252264][ T3579] ================================================================== [ 136.260384][ T3579] BUG: KASAN: use-after-free in lru_add_fn+0x2d4/0x1ac0 [ 136.267384][ T3579] Read of size 8 at addr ffff8880520f7890 by task syz-executor.3/3579 [ 136.275569][ T3579] [ 136.277930][ T3579] CPU: 1 PID: 3579 Comm: syz-executor.3 Not tainted 6.1.94-syzkaller #0 [ 136.286277][ T3579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 136.296477][ T3579] Call Trace: [ 136.299772][ T3579] [ 136.302718][ T3579] dump_stack_lvl+0x1e3/0x2cb [ 136.307444][ T3579] ? nf_tcp_handle_invalid+0x642/0x642 [ 136.312922][ T3579] ? panic+0x764/0x764 [ 136.316997][ T3579] ? _printk+0xd1/0x111 [ 136.321154][ T3579] ? __virt_addr_valid+0x17f/0x520 [ 136.326273][ T3579] ? __virt_addr_valid+0x17f/0x520 [ 136.331393][ T3579] print_report+0x15f/0x4f0 [ 136.335903][ T3579] ? __virt_addr_valid+0x17f/0x520 [ 136.341028][ T3579] ? __virt_addr_valid+0x17f/0x520 [ 136.346146][ T3579] ? __virt_addr_valid+0x44a/0x520 [ 136.351266][ T3579] ? __phys_addr+0xb6/0x170 [ 136.355805][ T3579] ? lru_add_fn+0x2d4/0x1ac0 [ 136.360407][ T3579] kasan_report+0x136/0x160 [ 136.364931][ T3579] ? lru_add_fn+0x2d4/0x1ac0 [ 136.369527][ T3579] ? lru_add_fn+0x214/0x1ac0 [ 136.374120][ T3579] kasan_check_range+0x27f/0x290 [ 136.379062][ T3579] lru_add_fn+0x2d4/0x1ac0 [ 136.383483][ T3579] folio_batch_move_lru+0x31a/0x720 [ 136.388689][ T3579] ? folio_add_lru+0xd70/0xd70 [ 136.393458][ T3579] ? lru_add_drain_cpu+0x8b0/0x8b0 [ 136.398575][ T3579] lru_add_drain_cpu+0x108/0x8b0 [ 136.403513][ T3579] ? percpu_counter_add_batch+0x142/0x160 [ 136.409239][ T3579] ? folio_add_lru_vma+0x1f0/0x1f0 [ 136.414351][ T3579] ? folio_account_redirty+0x1b3/0x670 [ 136.419819][ T3579] ? lru_add_drain+0x75/0x3e0 [ 136.424495][ T3579] lru_add_drain+0x11e/0x3e0 [ 136.429088][ T3579] __pagevec_release+0x51/0xf0 [ 136.433855][ T3579] write_cache_pages+0x12bb/0x15c0 [ 136.438982][ T3579] ? generic_writepages+0x160/0x160 [ 136.444187][ T3579] ? tag_pages_for_writeback+0x6a0/0x6a0 [ 136.449839][ T3579] ? blk_start_plug+0x95/0x110 [ 136.454616][ T3579] do_writepages+0x40f/0x670 [ 136.459217][ T3579] ? __writepage+0x120/0x120 [ 136.463824][ T3579] ? __lock_acquire+0x1f80/0x1f80 [ 136.468856][ T3579] ? do_raw_spin_lock+0x14a/0x370 [ 136.473888][ T3579] __writeback_single_inode+0x15d/0x11e0 [ 136.479540][ T3579] writeback_single_inode+0x22c/0x960 [ 136.484930][ T3579] ? write_inode_now+0x260/0x260 [ 136.489887][ T3579] write_inode_now+0x1cf/0x260 [ 136.494663][ T3579] ? bdi_split_work_to_wbs+0x990/0x990 [ 136.500141][ T3579] ? do_raw_spin_unlock+0x137/0x8a0 [ 136.505349][ T3579] iput+0x616/0x980 [ 136.509168][ T3579] nilfs_put_super+0xd3/0x150 [ 136.513859][ T3579] ? nilfs_free_inode+0x70/0x70 [ 136.518720][ T3579] generic_shutdown_super+0x130/0x340 [ 136.524105][ T3579] kill_block_super+0x7a/0xe0 [ 136.528788][ T3579] deactivate_locked_super+0xa0/0x110 [ 136.534166][ T3579] cleanup_mnt+0x490/0x520 [ 136.538591][ T3579] ? lockdep_hardirqs_on+0x94/0x130 [ 136.543799][ T3579] task_work_run+0x246/0x300 [ 136.548399][ T3579] ? task_work_cancel+0x2b0/0x2b0 [ 136.553441][ T3579] ? exit_to_user_mode_loop+0x39/0x100 [ 136.558901][ T3579] exit_to_user_mode_loop+0xde/0x100 [ 136.564188][ T3579] exit_to_user_mode_prepare+0xb1/0x140 [ 136.569734][ T3579] syscall_exit_to_user_mode+0x60/0x270 [ 136.575313][ T3579] do_syscall_64+0x47/0xb0 [ 136.579740][ T3579] ? clear_bhb_loop+0x45/0xa0 [ 136.584430][ T3579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.590333][ T3579] RIP: 0033:0x7f04f4c7e257 [ 136.594762][ T3579] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 136.614373][ T3579] RSP: 002b:00007fffe03ba988 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 136.622795][ T3579] RAX: 0000000000000000 RBX: 0000000000000064 RCX: 00007f04f4c7e257 [ 136.630767][ T3579] RDX: 0000000000000200 RSI: 0000000000000009 RDI: 00007fffe03bbb30 [ 136.638739][ T3579] RBP: 00007f04f4cd96c6 R08: 0000000000000000 R09: 0000000000000000 [ 136.646813][ T3579] R10: 0000000000000100 R11: 0000000000000202 R12: 00007fffe03bbb30 [ 136.654790][ T3579] R13: 00007f04f4cd96c6 R14: 0000555557195430 R15: 0000000000000007 [ 136.662774][ T3579] [ 136.665792][ T3579] [ 136.668111][ T3579] Allocated by task 5210: [ 136.672443][ T3579] kasan_set_track+0x4b/0x70 [ 136.677046][ T3579] __kasan_slab_alloc+0x65/0x70 [ 136.681890][ T3579] slab_post_alloc_hook+0x52/0x3a0 [ 136.687004][ T3579] kmem_cache_alloc_lru+0x10c/0x2d0 [ 136.692206][ T3579] nilfs_alloc_inode+0x2a/0xe0 [ 136.696976][ T3579] iget5_locked+0x9c/0x270 [ 136.701397][ T3579] nilfs_iget_locked+0x127/0x180 [ 136.706344][ T3579] nilfs_ifile_read+0x2e/0x170 [ 136.711109][ T3579] nilfs_attach_checkpoint+0x260/0x4d0 [ 136.716571][ T3579] nilfs_fill_super+0x349/0x660 [ 136.721431][ T3579] nilfs_mount+0x679/0x9a0 [ 136.725855][ T3579] legacy_get_tree+0xeb/0x180 [ 136.730538][ T3579] vfs_get_tree+0x88/0x270 [ 136.734960][ T3579] do_new_mount+0x2ba/0xb40 [ 136.739467][ T3579] __se_sys_mount+0x2d5/0x3c0 [ 136.744148][ T3579] do_syscall_64+0x3b/0xb0 [ 136.748574][ T3579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.754476][ T3579] [ 136.756805][ T3579] Freed by task 26: [ 136.760608][ T3579] kasan_set_track+0x4b/0x70 [ 136.765207][ T3579] kasan_save_free_info+0x27/0x40 [ 136.770233][ T3579] ____kasan_slab_free+0xd6/0x120 [ 136.775276][ T3579] kmem_cache_free+0x292/0x510 [ 136.780045][ T3579] rcu_core+0xad5/0x1810 [ 136.784294][ T3579] handle_softirqs+0x2ee/0xa40 [ 136.789066][ T3579] __irq_exit_rcu+0x157/0x240 [ 136.793751][ T3579] irq_exit_rcu+0x5/0x20 [ 136.798001][ T3579] sysvec_apic_timer_interrupt+0x91/0xb0 [ 136.803639][ T3579] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 136.809628][ T3579] [ 136.811946][ T3579] Last potentially related work creation: [ 136.817654][ T3579] kasan_save_stack+0x3b/0x60 [ 136.822605][ T3579] __kasan_record_aux_stack+0xb0/0xc0 [ 136.827979][ T3579] call_rcu+0x163/0xa10 [ 136.832135][ T3579] nilfs_put_root+0x93/0xb0 [ 136.836642][ T3579] nilfs_detach_log_writer+0x8c5/0xbd0 [ 136.842111][ T3579] nilfs_put_super+0x49/0x150 [ 136.846794][ T3579] generic_shutdown_super+0x130/0x340 [ 136.852170][ T3579] kill_block_super+0x7a/0xe0 [ 136.856853][ T3579] deactivate_locked_super+0xa0/0x110 [ 136.862229][ T3579] cleanup_mnt+0x490/0x520 [ 136.866651][ T3579] task_work_run+0x246/0x300 [ 136.871249][ T3579] exit_to_user_mode_loop+0xde/0x100 [ 136.876536][ T3579] exit_to_user_mode_prepare+0xb1/0x140 [ 136.882078][ T3579] syscall_exit_to_user_mode+0x60/0x270 [ 136.887625][ T3579] do_syscall_64+0x47/0xb0 [ 136.892049][ T3579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.897950][ T3579] [ 136.900272][ T3579] Second to last potentially related work creation: [ 136.906850][ T3579] kasan_save_stack+0x3b/0x60 [ 136.911536][ T3579] __kasan_record_aux_stack+0xb0/0xc0 [ 136.916909][ T3579] call_rcu+0x163/0xa10 [ 136.921064][ T3579] nilfs_mdt_clear+0xd8/0x110 [ 136.925752][ T3579] nilfs_clear_inode+0xba/0x2b0 [ 136.930607][ T3579] nilfs_evict_inode+0x101/0x500 [ 136.935549][ T3579] evict+0x2a4/0x620 [ 136.939450][ T3579] nilfs_put_super+0x123/0x150 [ 136.944222][ T3579] generic_shutdown_super+0x130/0x340 [ 136.949600][ T3579] kill_block_super+0x7a/0xe0 [ 136.954284][ T3579] deactivate_locked_super+0xa0/0x110 [ 136.959658][ T3579] cleanup_mnt+0x490/0x520 [ 136.964081][ T3579] task_work_run+0x246/0x300 [ 136.968679][ T3579] exit_to_user_mode_loop+0xde/0x100 [ 136.973970][ T3579] exit_to_user_mode_prepare+0xb1/0x140 [ 136.979513][ T3579] syscall_exit_to_user_mode+0x60/0x270 [ 136.985064][ T3579] do_syscall_64+0x47/0xb0 [ 136.989492][ T3579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.995396][ T3579] [ 136.997716][ T3579] The buggy address belongs to the object at ffff8880520f7350 [ 136.997716][ T3579] which belongs to the cache nilfs2_inode_cache of size 1512 [ 137.012464][ T3579] The buggy address is located 1344 bytes inside of [ 137.012464][ T3579] 1512-byte region [ffff8880520f7350, ffff8880520f7938) [ 137.025910][ T3579] [ 137.028232][ T3579] The buggy address belongs to the physical page: [ 137.034648][ T3579] page:ffffea0001483c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x520f0 [ 137.044801][ T3579] head:ffffea0001483c00 order:3 compound_mapcount:0 compound_pincount:0 [ 137.053123][ T3579] memcg:ffff88801929e201 [ 137.057355][ T3579] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 137.065352][ T3579] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016fa8dc0 [ 137.073937][ T3579] raw: 0000000000000000 0000000080130013 00000001ffffffff ffff88801929e201 [ 137.082515][ T3579] page dumped because: kasan: bad access detected [ 137.088941][ T3579] page_owner tracks the page as allocated [ 137.094653][ T3579] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4353, tgid 4351 (syz-executor.3), ts 98136618220, free_ts 16501098517 [ 137.118538][ T3579] post_alloc_hook+0x18d/0x1b0 [ 137.123307][ T3579] get_page_from_freelist+0x31a1/0x3320 [ 137.128853][ T3579] __alloc_pages+0x28d/0x770 [ 137.133445][ T3579] alloc_slab_page+0x6a/0x150 [ 137.138136][ T3579] new_slab+0x84/0x2d0 [ 137.142230][ T3579] ___slab_alloc+0xc20/0x1270 [ 137.146930][ T3579] kmem_cache_alloc_lru+0x1a5/0x2d0 [ 137.152138][ T3579] nilfs_alloc_inode+0x2a/0xe0 [ 137.156910][ T3579] iget5_locked+0x9c/0x270 [ 137.161339][ T3579] nilfs_iget_for_shadow+0x14f/0x330 [ 137.166629][ T3579] nilfs_mdt_setup_shadow_map+0x82/0xf0 [ 137.172184][ T3579] nilfs_dat_read+0x245/0x300 [ 137.176868][ T3579] load_nilfs+0x4f1/0x1040 [ 137.181303][ T3579] nilfs_fill_super+0x2ca/0x660 [ 137.186163][ T3579] nilfs_mount+0x679/0x9a0 [ 137.190591][ T3579] legacy_get_tree+0xeb/0x180 [ 137.195297][ T3579] page last free stack trace: [ 137.199962][ T3579] free_unref_page_prepare+0xf63/0x1120 [ 137.205529][ T3579] free_unref_page+0x33/0x3e0 [ 137.210204][ T3579] free_contig_range+0x9a/0x150 [ 137.215054][ T3579] destroy_args+0xfe/0x997 [ 137.219478][ T3579] debug_vm_pgtable+0x416/0x46b [ 137.224332][ T3579] do_one_initcall+0x265/0x8f0 [ 137.229103][ T3579] do_initcall_level+0x157/0x207 [ 137.234038][ T3579] do_initcalls+0x49/0x86 [ 137.238367][ T3579] kernel_init_freeable+0x45c/0x60f [ 137.243570][ T3579] kernel_init+0x19/0x290 [ 137.247900][ T3579] ret_from_fork+0x1f/0x30 [ 137.252326][ T3579] [ 137.254649][ T3579] Memory state around the buggy address: [ 137.260295][ T3579] ffff8880520f7780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.268357][ T3579] ffff8880520f7800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.276422][ T3579] >ffff8880520f7880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.284477][ T3579] ^ [ 137.289059][ T3579] ffff8880520f7900: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc [ 137.297117][ T3579] ffff8880520f7980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 137.305199][ T3579] ================================================================== [ 137.313260][ T3579] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 137.320446][ T3579] CPU: 1 PID: 3579 Comm: syz-executor.3 Not tainted 6.1.94-syzkaller #0 [ 137.328774][ T3579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 137.338838][ T3579] Call Trace: [ 137.342115][ T3579] [ 137.345046][ T3579] dump_stack_lvl+0x1e3/0x2cb [ 137.349741][ T3579] ? nf_tcp_handle_invalid+0x642/0x642 [ 137.355220][ T3579] ? panic+0x764/0x764 [ 137.359291][ T3579] ? lock_release+0xd6/0xa20 [ 137.363893][ T3579] ? vscnprintf+0x59/0x80 [ 137.368229][ T3579] panic+0x318/0x764 [ 137.372125][ T3579] ? check_panic_on_warn+0x1d/0xa0 [ 137.377261][ T3579] ? memcpy_page_flushcache+0xfc/0xfc [ 137.382661][ T3579] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 137.388574][ T3579] ? _raw_spin_unlock+0x40/0x40 [ 137.393430][ T3579] ? print_report+0x4a3/0x4f0 [ 137.398107][ T3579] check_panic_on_warn+0x7e/0xa0 [ 137.403047][ T3579] ? lru_add_fn+0x2d4/0x1ac0 [ 137.407663][ T3579] end_report+0x66/0x110 [ 137.411928][ T3579] kasan_report+0x143/0x160 [ 137.416453][ T3579] ? lru_add_fn+0x2d4/0x1ac0 [ 137.421044][ T3579] ? lru_add_fn+0x214/0x1ac0 [ 137.425640][ T3579] kasan_check_range+0x27f/0x290 [ 137.430586][ T3579] lru_add_fn+0x2d4/0x1ac0 [ 137.435013][ T3579] folio_batch_move_lru+0x31a/0x720 [ 137.440214][ T3579] ? folio_add_lru+0xd70/0xd70 [ 137.445014][ T3579] ? lru_add_drain_cpu+0x8b0/0x8b0 [ 137.450128][ T3579] lru_add_drain_cpu+0x108/0x8b0 [ 137.455070][ T3579] ? percpu_counter_add_batch+0x142/0x160 [ 137.460885][ T3579] ? folio_add_lru_vma+0x1f0/0x1f0 [ 137.465999][ T3579] ? folio_account_redirty+0x1b3/0x670 [ 137.471469][ T3579] ? lru_add_drain+0x75/0x3e0 [ 137.476147][ T3579] lru_add_drain+0x11e/0x3e0 [ 137.480737][ T3579] __pagevec_release+0x51/0xf0 [ 137.485590][ T3579] write_cache_pages+0x12bb/0x15c0 [ 137.490722][ T3579] ? generic_writepages+0x160/0x160 [ 137.496021][ T3579] ? tag_pages_for_writeback+0x6a0/0x6a0 [ 137.501698][ T3579] ? blk_start_plug+0x95/0x110 [ 137.506477][ T3579] do_writepages+0x40f/0x670 [ 137.511077][ T3579] ? __writepage+0x120/0x120 [ 137.515679][ T3579] ? __lock_acquire+0x1f80/0x1f80 [ 137.520712][ T3579] ? do_raw_spin_lock+0x14a/0x370 [ 137.525832][ T3579] __writeback_single_inode+0x15d/0x11e0 [ 137.531470][ T3579] writeback_single_inode+0x22c/0x960 [ 137.536855][ T3579] ? write_inode_now+0x260/0x260 [ 137.541810][ T3579] write_inode_now+0x1cf/0x260 [ 137.546586][ T3579] ? bdi_split_work_to_wbs+0x990/0x990 [ 137.552087][ T3579] ? do_raw_spin_unlock+0x137/0x8a0 [ 137.557295][ T3579] iput+0x616/0x980 [ 137.561122][ T3579] nilfs_put_super+0xd3/0x150 [ 137.565807][ T3579] ? nilfs_free_inode+0x70/0x70 [ 137.570665][ T3579] generic_shutdown_super+0x130/0x340 [ 137.576046][ T3579] kill_block_super+0x7a/0xe0 [ 137.580729][ T3579] deactivate_locked_super+0xa0/0x110 [ 137.586142][ T3579] cleanup_mnt+0x490/0x520 [ 137.590573][ T3579] ? lockdep_hardirqs_on+0x94/0x130 [ 137.595780][ T3579] task_work_run+0x246/0x300 [ 137.600379][ T3579] ? task_work_cancel+0x2b0/0x2b0 [ 137.605412][ T3579] ? exit_to_user_mode_loop+0x39/0x100 [ 137.610871][ T3579] exit_to_user_mode_loop+0xde/0x100 [ 137.616158][ T3579] exit_to_user_mode_prepare+0xb1/0x140 [ 137.621704][ T3579] syscall_exit_to_user_mode+0x60/0x270 [ 137.627269][ T3579] do_syscall_64+0x47/0xb0 [ 137.631698][ T3579] ? clear_bhb_loop+0x45/0xa0 [ 137.636411][ T3579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.642324][ T3579] RIP: 0033:0x7f04f4c7e257 [ 137.646772][ T3579] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 137.666381][ T3579] RSP: 002b:00007fffe03ba988 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 137.674822][ T3579] RAX: 0000000000000000 RBX: 0000000000000064 RCX: 00007f04f4c7e257 [ 137.682795][ T3579] RDX: 0000000000000200 RSI: 0000000000000009 RDI: 00007fffe03bbb30 [ 137.690765][ T3579] RBP: 00007f04f4cd96c6 R08: 0000000000000000 R09: 0000000000000000 [ 137.698738][ T3579] R10: 0000000000000100 R11: 0000000000000202 R12: 00007fffe03bbb30 [ 137.706708][ T3579] R13: 00007f04f4cd96c6 R14: 0000555557195430 R15: 0000000000000007 [ 137.714687][ T3579] [ 137.718039][ T3579] Kernel Offset: disabled [ 137.722365][ T3579] Rebooting in 86400 seconds..