last executing test programs: 9.480564039s ago: executing program 4 (id=604): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="042ffd02"], 0x200) 9.317910576s ago: executing program 0 (id=606): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 9.288564577s ago: executing program 4 (id=607): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0xc, 0x0, &(0x7f000000a680)) 9.118085744s ago: executing program 4 (id=609): r0 = socket$inet6(0xa, 0x3, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000001c0)=ANY=[], 0x12, 0x9ef, &(0x7f0000000e40)="$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") execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) 8.781977318s ago: executing program 4 (id=613): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@norecovery}, {@block_validity}]}, 0x1, 0x46a, &(0x7f0000000980)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = add_key$keyring(&(0x7f00000063c0), &(0x7f0000006400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000006c00)='user\x00', &(0x7f0000006c40)={'syz', 0x0}, &(0x7f0000006c80)='default_permissions', r3) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0x14, &(0x7f0000000080)={0x0}}, 0x0) bind$802154_dgram(r4, &(0x7f0000000100)={0x24, @none={0x0, 0x1}}, 0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {0x2}, 0x4}) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x3, '\x00', r5, 0xffffffffffffffff, 0x4, 0x3}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8.374204385s ago: executing program 0 (id=616): timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x2}, 0x0) 8.368272056s ago: executing program 4 (id=617): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x1e, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timerfd_create(0x0, 0x0) fspick(r5, &(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 7.870035356s ago: executing program 0 (id=619): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000740), 0x4) 6.902115326s ago: executing program 4 (id=625): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0) 5.174478916s ago: executing program 3 (id=627): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa04710, &(0x7f0000000100)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xc32}}, {@nolazytime}, {@jqfmt_vfsold}, {@acl}, {@nodiscard}, {@errors_continue}, {@usrjquota}]}, 0xfe, 0x446, &(0x7f0000000d00)="$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") r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000001780)) 4.60743048s ago: executing program 3 (id=628): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) 3.579534433s ago: executing program 3 (id=631): r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) 3.209926258s ago: executing program 2 (id=633): sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) 2.922191839s ago: executing program 2 (id=635): ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0xc1205531, 0x0) 2.799715685s ago: executing program 2 (id=637): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 2.693696859s ago: executing program 2 (id=638): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x18) faccessat2(r2, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) close(r0) 2.499275607s ago: executing program 3 (id=640): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[], 0x70}}, 0x24008000) 2.368319782s ago: executing program 2 (id=642): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 2.310979724s ago: executing program 1 (id=643): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 2.154103841s ago: executing program 3 (id=644): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) 2.039406006s ago: executing program 2 (id=645): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800fa00b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.93880442s ago: executing program 1 (id=646): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2000) 1.91969781s ago: executing program 3 (id=647): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x10000000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x20008010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@TCA_CHAIN={0x8, 0xb, 0x100}, @TCA_RATE={0x6, 0x5, {0x0, 0x20}}, @TCA_CHAIN={0x8, 0xb, 0x40}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}, @TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0x5}}]}, 0x68}}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000380), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newtfilter={0x30, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.788108326s ago: executing program 1 (id=648): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008401050000000000000000000000000000000000000000006c0000000000000000000000000000000000ffff000000000000000000000000000000000000000000000000fc020000000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001000000000000000000000000000000e0000002000000000000000000000000000000003300000002000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003300000002000000ff020000000000000000000000000001000000000000000000000000000000000000000020010000000000000000000000000002000000000000000003000000000000000000000007000000000000000000000001"], 0x23c}}, 0x0) 1.618114933s ago: executing program 1 (id=649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x2, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0) 1.497117678s ago: executing program 1 (id=650): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="f80000001b0001002cbd7000000000000a0101000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000001000000000000000000000000001c00040003004e234e2400007f00000100000000000000000000000008001f00040000000c0015"], 0xf8}}, 0x0) 1.310474656s ago: executing program 1 (id=651): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000800}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xcc, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x20}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x85}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@local, 0x0, r2}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 250.67169ms ago: executing program 0 (id=652): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 232.47772ms ago: executing program 0 (id=653): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) write$binfmt_script(r1, &(0x7f0000000a80)={'#! ', './file1'}, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0xfffffffe}) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=654): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/profiling', 0x101a82, 0x0) sendfile(r1, r0, 0x0, 0x5) kernel console output (not intermixed with test programs): expected cc 0x0c38 length: 249 > 2 [ 117.544884][ T3558] Bluetooth: hci3: command tx timeout [ 117.547133][ T47] Bluetooth: hci1: command tx timeout [ 117.624925][ T47] Bluetooth: hci6: command tx timeout [ 117.653097][ T2485] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.789389][ T4073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.947263][ T2485] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.970037][ T4104] chnl_net:caif_netlink_parms(): no params data found [ 118.044575][ T4073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.186253][ T2485] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.299029][ T4073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.479591][ T4073] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.619016][ T4104] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.638082][ T4104] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.673566][ T4104] device bridge_slave_0 entered promiscuous mode [ 118.676964][ T4123] loop4: detected capacity change from 0 to 32768 [ 118.728688][ T4104] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.737385][ T4123] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.119 (4123) [ 118.752113][ T4104] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.782051][ T4104] device bridge_slave_1 entered promiscuous mode [ 118.796650][ T4123] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 118.844275][ T4123] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 118.985087][ T4123] BTRFS info (device loop4): force zlib compression, level 3 [ 118.992613][ T4123] BTRFS info (device loop4): force clearing of disk cache [ 119.010516][ T4123] BTRFS info (device loop4): setting nodatasum [ 119.017812][ T4123] BTRFS info (device loop4): allowing degraded mounts [ 119.024877][ T4123] BTRFS info (device loop4): enabling disk space caching [ 119.032635][ T4123] BTRFS info (device loop4): disk space caching is enabled [ 119.072211][ T4104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.156145][ T4104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.259848][ T4104] team0: Port device team_slave_0 added [ 119.271139][ T4073] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 119.284807][ T4104] team0: Port device team_slave_1 added [ 119.356012][ T4073] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 119.383604][ T4104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.394979][ T4104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.456189][ T4104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.469409][ T4104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.476552][ T47] Bluetooth: hci4: command tx timeout [ 119.483539][ T4104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.509781][ T4104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.521617][ T4073] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 119.542550][ T4073] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 119.568720][ T4116] chnl_net:caif_netlink_parms(): no params data found [ 119.622306][ T4123] BTRFS info (device loop4): rebuilding free space tree [ 119.625366][ T47] Bluetooth: hci1: command tx timeout [ 119.629625][ T3558] Bluetooth: hci3: command tx timeout [ 119.704761][ T3562] Bluetooth: hci6: command tx timeout [ 119.741025][ T4104] device hsr_slave_0 entered promiscuous mode [ 119.746174][ T4123] BTRFS info (device loop4): disabling free space tree [ 119.765538][ T4104] device hsr_slave_1 entered promiscuous mode [ 119.774504][ T4104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.785004][ T4104] Cannot create hsr debugfs directory [ 119.790613][ T4123] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 119.829665][ T4123] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 120.248023][ T4123] BTRFS info (device loop4): balance: start -s [ 120.286736][ T4116] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.293920][ T4116] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.320693][ T4116] device bridge_slave_0 entered promiscuous mode [ 120.369568][ T4116] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.384945][ T4116] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.393075][ T4123] BTRFS info (device loop4): relocating block group 1048576 flags system [ 120.393278][ T4116] device bridge_slave_1 entered promiscuous mode [ 120.575898][ T4123] BTRFS info (device loop4): balance: ended with status: 0 [ 120.645487][ T3938] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 120.689052][ T4116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.832629][ T4116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.203259][ T4116] team0: Port device team_slave_0 added [ 121.239895][ T4077] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 121.355095][ T4073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.366976][ T4116] team0: Port device team_slave_1 added [ 121.372753][ T4077] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 121.399836][ T4077] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 121.502082][ T4077] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 121.544808][ T3562] Bluetooth: hci4: command tx timeout [ 121.573549][ T4104] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.626723][ T4116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.633696][ T4116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.704844][ T3562] Bluetooth: hci3: command tx timeout [ 121.739434][ T4116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.753685][ T4116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.761073][ T4116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.787562][ T4116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.840137][ T4073] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.869165][ T4104] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.908857][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.925938][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.086643][ T4104] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.148033][ T4116] device hsr_slave_0 entered promiscuous mode [ 122.183942][ T4116] device hsr_slave_1 entered promiscuous mode [ 122.204470][ T4116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.224359][ T4116] Cannot create hsr debugfs directory [ 122.268783][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.286446][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.355492][ T4139] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.363440][ T4139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.382178][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.392313][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.402606][ T4139] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.409769][ T4139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.436591][ T4104] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.525255][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.533389][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.607184][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.699548][ T2485] device hsr_slave_0 left promiscuous mode [ 122.710057][ T2485] device hsr_slave_1 left promiscuous mode [ 122.725246][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.742686][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.790225][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.803390][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.814324][ T2485] device bridge_slave_1 left promiscuous mode [ 122.828343][ T2485] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.843412][ T2485] device bridge_slave_0 left promiscuous mode [ 122.853547][ T2485] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.906563][ T2485] device veth1_macvtap left promiscuous mode [ 122.914223][ T2485] device veth0_macvtap left promiscuous mode [ 122.931243][ T2485] device veth1_vlan left promiscuous mode [ 122.939380][ T2485] device veth0_vlan left promiscuous mode [ 123.628336][ T3562] Bluetooth: hci4: command tx timeout [ 123.785419][ T3562] Bluetooth: hci3: command tx timeout [ 123.805593][ T2485] team0 (unregistering): Port device team_slave_1 removed [ 123.880933][ T2485] team0 (unregistering): Port device team_slave_0 removed [ 123.951862][ T2485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.014376][ T2485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.280095][ T2485] bond0 (unregistering): Released all slaves [ 124.284852][ T3594] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 124.365317][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.375228][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.383939][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.421569][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.439753][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.448705][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.457368][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.466293][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.474612][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.495636][ T4077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.508629][ T4073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.527646][ T3594] usb 5-1: Using ep0 maxpacket: 8 [ 124.573135][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.584524][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.636173][ T4077] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.653586][ T4104] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 124.655087][ T3594] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 124.672995][ T3594] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.683944][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.693412][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.702222][ T4139] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.709411][ T4139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.712277][ T3594] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.731813][ T4104] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 124.743468][ T3594] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.758309][ T3594] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.773987][ T3594] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 124.783492][ T3594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.800030][ T4104] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 124.824105][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.833987][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.844396][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.853160][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.860357][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.869091][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.879637][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.901372][ T4104] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 124.920403][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.937151][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.947716][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.958376][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.968299][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.027891][ T4116] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.044838][ T3594] usb 5-1: usb_control_msg returned -32 [ 125.050834][ T3594] usbtmc 5-1:16.0: can't read capabilities [ 125.071446][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.084344][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.143323][ T4116] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.159836][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.169245][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.184476][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.192645][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.205328][ T4073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.215687][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.275966][ T4116] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.313215][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.332999][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.390609][ T4116] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.454243][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.465927][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.496523][ T4073] device veth0_vlan entered promiscuous mode [ 125.537904][ T4104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.549914][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.558459][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.580174][ T4073] device veth1_vlan entered promiscuous mode [ 125.688134][ T4104] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.706036][ T3562] Bluetooth: hci4: command tx timeout [ 125.734133][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.743145][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.752408][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.761563][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.782845][ T4073] device veth0_macvtap entered promiscuous mode [ 125.784120][ T3593] usb 5-1: USB disconnect, device number 8 [ 125.795869][ T4195] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 125.869791][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.891593][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.913528][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.932561][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.939777][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.965007][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.973893][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.982841][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.990008][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.007381][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.023106][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.042013][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.051768][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.068986][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.082607][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.091733][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.101959][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.113348][ T4073] device veth1_macvtap entered promiscuous mode [ 126.131905][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.140204][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.148938][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.161216][ T4116] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.195886][ T4116] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.218993][ T4077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.230404][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.239530][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.253228][ T4104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.276021][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.289957][ T4073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.315110][ T4073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.325229][ T4073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.336033][ T4073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.346847][ T4073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.357500][ T4073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.367454][ T4073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.378821][ T4073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.390781][ T4073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.398672][ T4116] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.421966][ T4116] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.441204][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.458644][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.473437][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.491669][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.508712][ T4073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.534835][ T4073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.557937][ T4073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.605462][ T4073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.634834][ T4073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.666928][ T4073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.700867][ T4073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.721774][ T4073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.744111][ T4073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.759098][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.773663][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.797151][ T4073] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.809073][ T4073] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.818709][ T4073] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.829296][ T4073] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.861747][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.871710][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.899465][ T4077] device veth0_vlan entered promiscuous mode [ 126.944985][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.956895][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.979805][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.995614][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.018127][ T4077] device veth1_vlan entered promiscuous mode [ 127.067644][ T4104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.099955][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 127.113479][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 127.123883][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.132298][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.195164][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.206517][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.216391][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.225196][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.238689][ T4077] device veth0_macvtap entered promiscuous mode [ 127.286246][ T3975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.287632][ T4077] device veth1_macvtap entered promiscuous mode [ 127.294340][ T3975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.334533][ T4104] device veth0_vlan entered promiscuous mode [ 127.345987][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.355040][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.363272][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.373234][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.396545][ T4077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.414256][ T4077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.433422][ T4077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.454090][ T4077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.464740][ T4077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.476707][ T4077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.486997][ T4077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.498315][ T4077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.509002][ T4077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.520591][ T4077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.532652][ T4077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.561811][ T4104] device veth1_vlan entered promiscuous mode [ 127.578533][ T4116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.602232][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.635532][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.644014][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.662501][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 127.672320][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.689754][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.708236][ T4077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.719995][ T3975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.735936][ T3975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.745160][ T4077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.773525][ T4077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.796632][ T4077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.807421][ T4077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.818389][ T4077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.828666][ T4077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.839521][ T4077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.854503][ T4077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.869530][ T4077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.890081][ T4077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.914461][ T4116] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.945791][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.954584][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.966111][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.975304][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.983266][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.031917][ T4104] device veth0_macvtap entered promiscuous mode [ 128.066282][ T4077] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.104251][ T4077] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.123617][ T4077] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.134330][ T4077] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.155014][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.169482][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.189285][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.196511][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.213353][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.222590][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.232227][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.239518][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.249881][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.270034][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.301439][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.332309][ T4104] device veth1_macvtap entered promiscuous mode [ 128.395255][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.429808][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.468476][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.508520][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.539622][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.579537][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.612113][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.650816][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.682850][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.708377][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.724135][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.742706][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.763189][ T4104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.804924][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.813061][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 128.843348][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.853520][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.863043][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.873101][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.884084][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.898194][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.909793][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.920636][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.930784][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.941722][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.954183][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.964944][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.976813][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.994717][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.025543][ T4104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.044709][ T4104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.061954][ T4104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.131111][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.146561][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.165680][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.181144][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.190298][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.208174][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.217572][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.226812][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.238549][ T4104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.253461][ T4104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.271125][ T4104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.283528][ T4104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.321960][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.343827][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.353621][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.378417][ T4116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.394744][ T14] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 129.530413][ T3923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.560128][ T3923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.586779][ T3975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.603232][ T3975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.627161][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 129.634949][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 129.648312][ T3562] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 129.755057][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.776375][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 129.795898][ T14] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.905914][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.927957][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 129.934688][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.965147][ T14] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.974266][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.004702][ T14] usb 2-1: Product: syz [ 130.009013][ T14] usb 2-1: Manufacturer: syz [ 130.013634][ T14] usb 2-1: SerialNumber: syz [ 130.075875][ T14] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 130.082748][ T14] cdc_ncm 2-1:1.0: bind() failure [ 130.125211][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.153829][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.168550][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.183778][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.215180][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.229566][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.319323][ T4222] loop5: detected capacity change from 0 to 7 [ 130.392135][ T4116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.495336][ T3562] Bluetooth: hci5: unexpected event 0x01 length: 11 > 1 [ 130.496161][ T4222] Dev loop5: unable to read RDB block 7 [ 130.555928][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.569859][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.998322][ T4222] loop5: unable to read partition table [ 131.207886][ T4222] loop5: partition table beyond EOD, truncated [ 131.257800][ T4222] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 131.257800][ T4222] ) failed (rc=-5) [ 131.440787][ T4249] netlink: 'syz.3.128': attribute type 1 has an invalid length. [ 131.568832][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.586846][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.617574][ T4116] device veth0_vlan entered promiscuous mode [ 131.747434][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.756277][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.868137][ T3562] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 131.928732][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.953116][ T4252] bond0: (slave rose0): Enslaving as an active interface with an up link [ 131.966611][ T3596] usb 2-1: USB disconnect, device number 8 [ 132.019051][ T4116] device veth1_vlan entered promiscuous mode [ 132.215104][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 132.223826][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 132.336749][ T4264] netlink: 'syz.3.131': attribute type 1 has an invalid length. [ 132.486785][ T3596] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 132.590033][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 132.605717][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.643524][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.677936][ T4116] device veth0_macvtap entered promiscuous mode [ 132.746599][ T3596] usb 2-1: Using ep0 maxpacket: 8 [ 132.753908][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.768608][ T4116] device veth1_macvtap entered promiscuous mode [ 132.775298][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.034952][ T3596] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 133.063406][ T3596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.102607][ T3596] usb 2-1: Product: syz [ 133.122870][ T3596] usb 2-1: Manufacturer: syz [ 133.143177][ T3596] usb 2-1: SerialNumber: syz [ 133.166360][ T3596] usb 2-1: config 0 descriptor?? [ 133.342730][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.399664][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.434858][ T3596] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 133.443452][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.471975][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.494550][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.534076][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.565776][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.601765][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.622173][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.643258][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.664888][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.691143][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.702857][ T4281] loop3: detected capacity change from 0 to 32768 [ 133.730944][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.743850][ T4281] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.135 (4281) [ 133.757265][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.773840][ T4281] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 133.793854][ T4116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.803383][ T4281] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 133.819246][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.830158][ T4281] BTRFS info (device loop3): force zlib compression, level 3 [ 133.838843][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.849752][ T4281] BTRFS info (device loop3): force clearing of disk cache [ 133.859220][ T4281] BTRFS info (device loop3): setting nodatasum [ 133.868503][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.884789][ T4281] BTRFS info (device loop3): allowing degraded mounts [ 133.902766][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.917367][ T4281] BTRFS info (device loop3): enabling disk space caching [ 133.940352][ T4281] BTRFS info (device loop3): disk space caching is enabled [ 133.950775][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.983651][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.034448][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.055468][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.110174][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.157567][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.202226][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.254991][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.286382][ T4281] BTRFS info (device loop3): rebuilding free space tree [ 134.334867][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.365607][ T4281] BTRFS info (device loop3): disabling free space tree [ 134.395522][ T4281] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 134.404718][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.425869][ T4281] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 134.442735][ T4116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.460725][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.471320][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.488539][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.507792][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.525513][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.593257][ T4116] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.617633][ T4116] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.644935][ T4281] BTRFS info (device loop3): balance: start -s [ 134.653687][ T4281] BTRFS info (device loop3): relocating block group 1048576 flags system [ 134.662545][ T4116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.683717][ T4116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.794777][ T4281] BTRFS info (device loop3): balance: ended with status: 0 [ 134.848165][ T4077] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 135.184818][ T3596] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 135.212651][ T3596] usb 2-1: USB disconnect, device number 9 [ 135.338698][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.355333][ T3597] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 135.374729][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.464961][ T3562] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 135.474406][ T3562] Bluetooth: hci6: Injecting HCI hardware error event [ 135.482582][ T3562] Bluetooth: hci6: hardware error 0x00 [ 135.712819][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.724950][ T3597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 135.745267][ T3597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 135.764706][ T3597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 135.784872][ T4340] netlink: 'syz.1.138': attribute type 1 has an invalid length. [ 135.792875][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.801314][ T3597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 135.801354][ T3597] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 135.801377][ T3597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.816379][ T3597] usb 4-1: config 0 descriptor?? [ 135.894820][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.926712][ T3597] gspca_main: spca561-2.14.0 probing abcd:cdee [ 135.940160][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.216555][ T3597] spca561: probe of 4-1:0.0 failed with error -22 [ 136.229917][ T3597] usb 4-1: MIDIStreaming interface descriptor not found [ 136.375397][ T3597] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 136.438439][ T3834] udevd[3834]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.465987][ T3597] usb 4-1: USB disconnect, device number 3 [ 136.554797][ T4137] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 136.644834][ T3594] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 136.788399][ T2485] device hsr_slave_0 left promiscuous mode [ 136.810492][ T4137] usb 2-1: Using ep0 maxpacket: 32 [ 136.830069][ T2485] device hsr_slave_1 left promiscuous mode [ 136.864311][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.892184][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.894762][ T3594] usb 5-1: Using ep0 maxpacket: 8 [ 136.924412][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.934897][ T4137] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.952910][ T4137] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 136.963642][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.999980][ T4137] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.054296][ T2485] device bridge_slave_1 left promiscuous mode [ 137.061299][ T2485] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.113828][ T2485] device bridge_slave_0 left promiscuous mode [ 137.134883][ T2485] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.204831][ T3594] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 137.204999][ T4137] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.224169][ T3594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.256394][ T4137] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.274750][ T3594] usb 5-1: Product: syz [ 137.279038][ T3594] usb 5-1: Manufacturer: syz [ 137.283636][ T3594] usb 5-1: SerialNumber: syz [ 137.302290][ T4137] usb 2-1: Product: syz [ 137.305615][ T3594] usb 5-1: config 0 descriptor?? [ 137.314862][ T4137] usb 2-1: Manufacturer: syz [ 137.334683][ T4137] usb 2-1: SerialNumber: syz [ 137.349595][ T2485] device hsr_slave_0 left promiscuous mode [ 137.369142][ T2485] device hsr_slave_1 left promiscuous mode [ 137.406054][ T4137] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 137.412934][ T4137] cdc_ncm 2-1:1.0: bind() failure [ 137.434241][ T3558] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 137.444569][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.462366][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.502245][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.554136][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.585672][ T2485] device bridge_slave_1 left promiscuous mode [ 137.591923][ T2485] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.635852][ T3558] Bluetooth: hci6: unexpected event 0x01 length: 11 > 1 [ 137.644825][ T2485] device bridge_slave_0 left promiscuous mode [ 137.675961][ T3594] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 137.693983][ T2485] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.704823][ T3562] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 137.718481][ T4353] loop5: detected capacity change from 0 to 7 [ 137.753267][ T4353] Dev loop5: unable to read RDB block 7 [ 137.805923][ T4353] loop5: unable to read partition table [ 137.811754][ T4353] loop5: partition table beyond EOD, truncated [ 137.818614][ T2485] device hsr_slave_0 left promiscuous mode [ 137.828091][ T2485] device hsr_slave_1 left promiscuous mode [ 137.862639][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.866890][ T4353] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 137.866890][ T4353] ) failed (rc=-5) [ 137.882685][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.914407][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.938645][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.956867][ T2485] device bridge_slave_1 left promiscuous mode [ 137.963123][ T2485] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.036092][ T2485] device bridge_slave_0 left promiscuous mode [ 138.044945][ T2485] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.190594][ T2485] device veth1_macvtap left promiscuous mode [ 138.207897][ T2485] device veth0_macvtap left promiscuous mode [ 138.214088][ T2485] device veth1_vlan left promiscuous mode [ 138.241278][ T2485] device veth0_vlan left promiscuous mode [ 138.259204][ T2485] device veth1_macvtap left promiscuous mode [ 138.276524][ T2485] device veth0_macvtap left promiscuous mode [ 138.285347][ T2485] device veth1_vlan left promiscuous mode [ 138.302017][ T2485] device veth0_vlan left promiscuous mode [ 138.319435][ T2485] device veth1_macvtap left promiscuous mode [ 138.335063][ T2485] device veth0_macvtap left promiscuous mode [ 138.351597][ T2485] device veth1_vlan left promiscuous mode [ 138.361720][ T2485] device veth0_vlan left promiscuous mode [ 138.676692][ T3892] usb 2-1: USB disconnect, device number 10 [ 138.900818][ T4372] netlink: 'syz.1.143': attribute type 1 has an invalid length. [ 139.545964][ T3594] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 139.556822][ T3594] usb 5-1: USB disconnect, device number 9 [ 139.787605][ T3562] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 139.796298][ T3562] Bluetooth: hci1: Injecting HCI hardware error event [ 139.804574][ T3558] Bluetooth: hci1: hardware error 0x00 [ 139.950048][ T2485] team0 (unregistering): Port device team_slave_1 removed [ 140.085744][ T2485] team0 (unregistering): Port device team_slave_0 removed [ 140.172552][ T2485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.241872][ T2485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.643390][ T3594] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 140.862664][ T2485] bond0 (unregistering): Released all slaves [ 140.894779][ T3594] usb 5-1: Using ep0 maxpacket: 32 [ 141.015169][ T3594] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.025826][ T3594] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 141.035563][ T3594] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.207947][ T3594] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.227967][ T3594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.242262][ T3594] usb 5-1: Product: syz [ 141.250931][ T3594] usb 5-1: Manufacturer: syz [ 141.263447][ T3594] usb 5-1: SerialNumber: syz [ 141.308449][ T2485] team0 (unregistering): Port device team_slave_1 removed [ 141.341800][ T3594] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 141.350367][ T2485] team0 (unregistering): Port device team_slave_0 removed [ 141.351990][ T3594] cdc_ncm 5-1:1.0: bind() failure [ 141.414134][ T2485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.471266][ T2485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.486850][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.509233][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.523849][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 141.532585][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 141.544592][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 141.552431][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 141.646112][ T4382] loop5: detected capacity change from 0 to 7 [ 141.672953][ T4382] Dev loop5: unable to read RDB block 7 [ 141.683346][ T4382] loop5: unable to read partition table [ 141.694050][ T4382] loop5: partition table beyond EOD, truncated [ 141.704766][ T4382] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 141.704766][ T4382] ) failed (rc=-5) [ 141.866179][ T3558] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 141.933222][ T2485] bond0 (unregistering): Released all slaves [ 142.244071][ T2485] team0 (unregistering): Port device team_slave_1 removed [ 142.273598][ T2485] team0 (unregistering): Port device team_slave_0 removed [ 142.304201][ T2485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.337918][ T2485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.621048][ T2485] bond0 (unregistering): Released all slaves [ 142.724495][ T4359] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 142.898487][ T4390] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 142.906622][ T4390] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 142.915374][ T4390] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 142.923525][ T4390] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 143.307956][ T4394] netlink: 'syz.3.150': attribute type 1 has an invalid length. [ 143.435944][ T4379] chnl_net:caif_netlink_parms(): no params data found [ 143.635181][ T3558] Bluetooth: hci0: command tx timeout [ 143.777581][ T3597] usb 5-1: USB disconnect, device number 10 [ 143.862560][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.875718][ T4379] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.913659][ T4379] device bridge_slave_0 entered promiscuous mode [ 143.978694][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.005631][ T4379] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.033720][ T4379] device bridge_slave_1 entered promiscuous mode [ 144.294698][ T4379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.356573][ T4379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.360960][ T4411] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.434692][ T4134] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 144.446743][ T4411] F2FS-fs (loop0): Unable to read 1th superblock [ 144.463629][ T4411] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.492823][ T4411] F2FS-fs (loop0): Unable to read 2th superblock [ 144.778365][ T4379] team0: Port device team_slave_0 added [ 144.805811][ T4379] team0: Port device team_slave_1 added [ 144.814794][ T4134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 144.852584][ T4134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 144.894738][ T4134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 144.924746][ T4134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 144.934579][ T4134] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 144.954711][ T4134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.993329][ T4134] usb 5-1: config 0 descriptor?? [ 145.063578][ T4134] gspca_main: spca561-2.14.0 probing abcd:cdee [ 145.116514][ T4379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.123506][ T4379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.211311][ T4379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.247767][ T4379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.274754][ T4379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.356982][ T4379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.394823][ T4134] spca561: probe of 5-1:0.0 failed with error -22 [ 145.405628][ T4134] usb 5-1: MIDIStreaming interface descriptor not found [ 145.472588][ T4134] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 145.526446][ T3624] udevd[3624]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.528557][ T4134] usb 5-1: USB disconnect, device number 11 [ 145.684788][ T4379] device hsr_slave_0 entered promiscuous mode [ 145.704948][ T3558] Bluetooth: hci0: command tx timeout [ 145.712204][ T4379] device hsr_slave_1 entered promiscuous mode [ 146.067960][ T3562] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 146.362855][ T4379] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.660866][ T3562] Bluetooth: hci5: unexpected event 0x01 length: 11 > 1 [ 147.032018][ T4379] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.287944][ T4379] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.493143][ T4379] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.538820][ T4439] netlink: 'syz.1.158': attribute type 1 has an invalid length. [ 147.634677][ T4438] netlink: 'syz.4.160': attribute type 1 has an invalid length. [ 147.784951][ T3562] Bluetooth: hci0: command tx timeout [ 148.484775][ T3597] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 148.595090][ T4379] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 148.626393][ T4379] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 148.676021][ T4379] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 148.724780][ T3597] usb 2-1: Using ep0 maxpacket: 32 [ 148.732995][ T4379] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 148.849184][ T3597] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.868919][ T3597] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 148.910768][ T3597] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.135071][ T4379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.164947][ T3597] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.174035][ T3597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.177548][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.232696][ T3597] usb 2-1: Product: syz [ 149.235381][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.244266][ T3597] usb 2-1: Manufacturer: syz [ 149.268245][ T3597] usb 2-1: SerialNumber: syz [ 149.268672][ T4379] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.337055][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.340315][ T3597] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 149.355869][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.364396][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.371555][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.384468][ T3597] cdc_ncm 2-1:1.0: bind() failure [ 149.496419][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.504547][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.545829][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.575386][ T4137] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.582516][ T4137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.629525][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.656286][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.689729][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.736067][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.782072][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.812053][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.839364][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.864973][ T3562] Bluetooth: hci0: command tx timeout [ 149.872201][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.925657][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.934054][ T4478] loop5: detected capacity change from 0 to 7 [ 149.999623][ T4379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.060865][ T4478] Dev loop5: unable to read RDB block 7 [ 150.066044][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.120309][ T4478] loop5: unable to read partition table [ 150.121320][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.140779][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.165098][ T4478] loop5: partition table beyond EOD, truncated [ 150.276475][ T4478] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 150.276475][ T4478] ) failed (rc=-5) [ 150.746341][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.764093][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.783793][ T4379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.826350][ T3596] hid (null): report_id 2445601295 is invalid [ 150.832698][ T3596] hid (null): report_id 0 is invalid [ 150.855976][ T3596] hid (null): global environment stack underflow [ 150.862485][ T3596] hid (null): unknown global tag 0xe [ 150.882413][ T3596] hid-generic 2BD5:3849DFF5:F76C68F0.0006: report_id 2445601295 is invalid [ 150.911950][ T3596] hid-generic 2BD5:3849DFF5:F76C68F0.0006: item 0 4 1 8 parsing failed [ 150.922391][ T3596] hid-generic: probe of 2BD5:3849DFF5:F76C68F0.0006 failed with error -22 [ 151.124735][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.141536][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.191465][ T4379] device veth0_vlan entered promiscuous mode [ 151.242908][ T4137] usb 2-1: USB disconnect, device number 11 [ 151.303585][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.335656][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.369343][ T4379] device veth1_vlan entered promiscuous mode [ 151.397151][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.405344][ T4503] ======================================================= [ 151.405344][ T4503] WARNING: The mand mount option has been deprecated and [ 151.405344][ T4503] and is ignored by this kernel. Remove the mand [ 151.405344][ T4503] option from the mount to silence this warning. [ 151.405344][ T4503] ======================================================= [ 151.445374][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.490537][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.501317][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.522761][ T4379] device veth0_macvtap entered promiscuous mode [ 151.551032][ T4379] device veth1_macvtap entered promiscuous mode [ 151.602009][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.614949][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.624978][ T3562] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 151.625091][ T3562] Bluetooth: hci5: Injecting HCI hardware error event [ 151.626349][ T3562] Bluetooth: hci5: hardware error 0x00 [ 151.654948][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.667858][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.684996][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.714755][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.747903][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.807331][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.852212][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.903895][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.930510][ T4379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.959428][ T4509] device macsec0 entered promiscuous mode [ 151.966919][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.001995][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.027551][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.085446][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.097237][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.147192][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.174672][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.175719][ T4514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.202112][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.234657][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.254671][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.264528][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.311296][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.334731][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.365485][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.393958][ T4379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.654908][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.663674][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.699716][ T4379] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.731777][ T4379] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.764695][ T4379] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.773442][ T4379] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.391383][ T4100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.437835][ T4100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.450605][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.507689][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.606369][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.614380][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.655574][ T4525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.813499][ T4525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.025040][ T3562] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 154.835074][ T4548] netlink: 'syz.3.191': attribute type 10 has an invalid length. [ 154.945655][ T4548] team0: Port device netdevsim0 added [ 154.981448][ T4552] netlink: 'syz.3.191': attribute type 10 has an invalid length. [ 155.461973][ T2485] device hsr_slave_0 left promiscuous mode [ 155.517057][ T2485] device hsr_slave_1 left promiscuous mode [ 155.535764][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.544211][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.605624][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.650004][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.686245][ T2485] device bridge_slave_1 left promiscuous mode [ 155.693425][ T2485] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.748639][ T2485] device bridge_slave_0 left promiscuous mode [ 155.775801][ T2485] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.898313][ T2485] device veth1_macvtap left promiscuous mode [ 155.915978][ T2485] device veth0_macvtap left promiscuous mode [ 155.928864][ T2485] device veth1_vlan left promiscuous mode [ 155.943654][ T2485] device veth0_vlan left promiscuous mode [ 157.076580][ T2485] team0 (unregistering): Port device team_slave_1 removed [ 157.159683][ T2485] team0 (unregistering): Port device team_slave_0 removed [ 157.211953][ T2485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.281470][ T2485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.607407][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 157.873784][ T2485] bond0 (unregistering): Released all slaves [ 158.934827][ T4617] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 158.975384][ T4617] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 159.107866][ T4617] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 159.359928][ T4626] gretap0: mtu less than device minimum [ 162.809720][ T4683] netlink: 44 bytes leftover after parsing attributes in process `syz.0.246'. [ 162.866467][ T4683] netlink: 44 bytes leftover after parsing attributes in process `syz.0.246'. [ 162.910493][ T3558] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 162.920536][ T3558] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 162.928813][ T3558] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 162.937789][ T3558] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 162.946492][ T3558] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 162.953896][ T3558] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 163.237949][ T4379] cgroup: fork rejected by pids controller in /syz2 [ 163.316182][ T2485] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.582499][ T2485] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.616085][ T4709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.257'. [ 163.773879][ T2485] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.076800][ T2485] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.113205][ T4686] chnl_net:caif_netlink_parms(): no params data found [ 164.194457][ T4725] loop3: detected capacity change from 0 to 1024 [ 164.231630][ T4725] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 164.253537][ T4725] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42840!=20869) [ 164.309242][ T4714] syz_tun: mtu less than device minimum [ 164.331989][ T4725] EXT4-fs error (device loop3): ext4_get_journal_inode:5733: inode #5: comm syz.3.265: casefold flag without casefold feature [ 164.434103][ T4686] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.447152][ T4725] EXT4-fs error (device loop3): ext4_get_journal_inode:5733: inode #5: comm syz.3.265: unexpected EA_INODE flag [ 164.468939][ T4686] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.482132][ T4725] EXT4-fs (loop3): no journal found [ 164.496840][ T3562] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.498683][ T4686] device bridge_slave_0 entered promiscuous mode [ 164.511610][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.520019][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.536034][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.544511][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 164.570984][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.651954][ T4686] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.688532][ T4686] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.731899][ T4686] device bridge_slave_1 entered promiscuous mode [ 164.755449][ T3562] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.776042][ T3562] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.792073][ T3562] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.802613][ T3562] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.811552][ T3562] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 164.824994][ T3562] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.991134][ T3558] Bluetooth: hci2: command tx timeout [ 165.045583][ T4686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.107810][ T4686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.203401][ T4753] loop3: detected capacity change from 0 to 2048 [ 165.355730][ T4753] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 165.448699][ T4077] EXT4-fs (loop3): unmounting filesystem. [ 165.487423][ T4686] team0: Port device team_slave_0 added [ 165.640050][ T4770] loop3: detected capacity change from 0 to 256 [ 165.649712][ T4770] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 165.649776][ T4686] team0: Port device team_slave_1 added [ 166.307907][ T4686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.322482][ T4686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.458671][ T4686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.584947][ T3558] Bluetooth: hci0: command tx timeout [ 166.635788][ T4686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.642778][ T4686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.670976][ T4686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.688027][ T4775] syz_tun: mtu less than device minimum [ 166.731333][ T4737] chnl_net:caif_netlink_parms(): no params data found [ 166.912524][ T4686] device hsr_slave_0 entered promiscuous mode [ 166.919134][ T3558] Bluetooth: hci1: command tx timeout [ 166.936949][ T4686] device hsr_slave_1 entered promiscuous mode [ 166.943724][ T4686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.952022][ T4686] Cannot create hsr debugfs directory [ 166.964046][ T4731] chnl_net:caif_netlink_parms(): no params data found [ 167.066618][ T3558] Bluetooth: hci2: command tx timeout [ 167.197341][ T4813] loop3: detected capacity change from 0 to 512 [ 167.198031][ T4808] loop0: detected capacity change from 0 to 256 [ 167.213374][ T4813] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 167.226806][ T4813] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 167.238891][ T4808] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 167.252974][ T4813] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 167.265152][ T4813] System zones: 1-12 [ 167.313872][ T4813] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 167.358421][ T4813] EXT4-fs (loop3): 1 truncate cleaned up [ 167.364121][ T4813] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 167.519212][ T4077] EXT4-fs (loop3): unmounting filesystem. [ 167.589359][ T4823] loop3: detected capacity change from 0 to 1024 [ 167.602287][ T4737] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.628837][ T4737] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.648391][ T4737] device bridge_slave_0 entered promiscuous mode [ 167.692506][ T4823] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 167.834010][ T4737] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.855323][ T4737] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.865970][ T4077] EXT4-fs (loop3): unmounting filesystem. [ 167.913138][ T4737] device bridge_slave_1 entered promiscuous mode [ 168.005921][ T4731] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.013097][ T4731] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.027279][ T4731] device bridge_slave_0 entered promiscuous mode [ 168.150897][ T4731] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.173416][ T4731] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.195569][ T4731] device bridge_slave_1 entered promiscuous mode [ 168.219247][ T4737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.295643][ T4737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.354310][ T2485] device hsr_slave_0 left promiscuous mode [ 168.384716][ T2485] device hsr_slave_1 left promiscuous mode [ 168.412782][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.426614][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.435303][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.442733][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.481269][ T2485] device bridge_slave_1 left promiscuous mode [ 168.490927][ T2485] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.509889][ T2485] device bridge_slave_0 left promiscuous mode [ 168.525875][ T2485] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.572801][ T2485] device veth1_macvtap left promiscuous mode [ 168.585689][ T2485] device veth0_macvtap left promiscuous mode [ 168.599871][ T2485] device veth1_vlan left promiscuous mode [ 168.615222][ T2485] device veth0_vlan left promiscuous mode [ 168.664857][ T3558] Bluetooth: hci0: command tx timeout [ 168.984760][ T3558] Bluetooth: hci1: command tx timeout [ 169.146090][ T3558] Bluetooth: hci2: command tx timeout [ 169.227417][ T2485] team0 (unregistering): Port device team_slave_1 removed [ 169.257590][ T2485] team0 (unregistering): Port device team_slave_0 removed [ 169.288615][ T2485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.322549][ T2485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.612090][ T2485] bond0 (unregistering): Released all slaves [ 169.713673][ T4837] syz_tun: mtu less than device minimum [ 169.737257][ T4731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.809993][ T4731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.857402][ T4737] team0: Port device team_slave_0 added [ 169.905590][ T4737] team0: Port device team_slave_1 added [ 170.081402][ T4849] netlink: 'syz.0.294': attribute type 1 has an invalid length. [ 170.130013][ T4849] device bond1 entered promiscuous mode [ 170.139608][ T4849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.164321][ T4731] team0: Port device team_slave_0 added [ 170.178131][ T4737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.191128][ T4737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.222398][ T26] audit: type=1804 audit(1719776021.786:2): pid=4852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.295" name="/root/syzkaller.BLrFvN/45/file0" dev="sda1" ino=1981 res=1 errno=0 [ 170.230254][ T4737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.271201][ T26] audit: type=1804 audit(1719776021.816:3): pid=4856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.295" name="/root/syzkaller.BLrFvN/45/file0" dev="sda1" ino=1981 res=1 errno=0 [ 170.292394][ T4850] bond1: (slave bridge1): making interface the new active one [ 170.325317][ T4850] device bridge1 entered promiscuous mode [ 170.333226][ T4850] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 170.427848][ T26] audit: type=1326 audit(1719776021.996:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df7d75b99 code=0x7ffc0000 [ 170.466047][ T4731] team0: Port device team_slave_1 added [ 170.473536][ T4737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.486622][ T4737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.526793][ T26] audit: type=1326 audit(1719776021.996:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df7d75b99 code=0x7ffc0000 [ 170.559658][ T26] audit: type=1326 audit(1719776021.996:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f0df7d75b99 code=0x7ffc0000 [ 170.591423][ T26] audit: type=1326 audit(1719776021.996:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df7d75b99 code=0x7ffc0000 [ 170.616013][ T4737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.620894][ T26] audit: type=1326 audit(1719776021.996:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df7d75b99 code=0x7ffc0000 [ 170.657861][ T26] audit: type=1326 audit(1719776021.996:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f0df7d75b99 code=0x7ffc0000 [ 170.693565][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 170.711027][ T26] audit: type=1326 audit(1719776021.996:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df7d75b99 code=0x7ffc0000 [ 170.741350][ T26] audit: type=1326 audit(1719776021.996:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0df7d75b99 code=0x7ffc0000 [ 170.771054][ T3558] Bluetooth: hci0: command tx timeout [ 170.928643][ T4731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.944721][ T4731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.014795][ T4731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.047700][ T4731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.064836][ T3558] Bluetooth: hci1: command tx timeout [ 171.084575][ T4731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.194156][ T4731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.224842][ T3558] Bluetooth: hci2: command tx timeout [ 171.314347][ T4737] device hsr_slave_0 entered promiscuous mode [ 171.342004][ T4737] device hsr_slave_1 entered promiscuous mode [ 171.382341][ T4737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.400701][ T4737] Cannot create hsr debugfs directory [ 171.478525][ T4731] device hsr_slave_0 entered promiscuous mode [ 171.505136][ T4731] device hsr_slave_1 entered promiscuous mode [ 171.551933][ T4731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.564963][ T4731] Cannot create hsr debugfs directory [ 171.787597][ T4686] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 171.835376][ T4686] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.968570][ T4686] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.007772][ T4686] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.184253][ T4737] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.376968][ T4737] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.558166][ T4737] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.748506][ T4737] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.824958][ T3562] Bluetooth: hci0: command tx timeout [ 172.931896][ T4686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.009139][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.019705][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.058573][ T4686] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.120330][ T4731] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.145438][ T3558] Bluetooth: hci1: command tx timeout [ 173.203984][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.224178][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.264023][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.271230][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.325175][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.359234][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.375204][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.382496][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.517614][ T4731] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.566436][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.574459][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.650419][ T4731] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.718227][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.740289][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.787286][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.813271][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.836137][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.904022][ T4731] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.965227][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.984859][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.026420][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.059509][ T4686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.102427][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.126312][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.143849][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.460230][ T4737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.524324][ T4737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.547901][ T4737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.614170][ T4737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.683194][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.701349][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.791316][ T4686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.866727][ T4731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.947617][ T4731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.267114][ T4731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.578942][ T4731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.933939][ T4737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.963379][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.973499][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.050906][ T4737] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.082459][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.095593][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.115526][ T3291] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.122689][ T3291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.209824][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 176.209839][ T26] audit: type=1326 audit(1719776027.776:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4958 comm="syz.3.314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0df7d75b99 code=0x0 [ 176.269721][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.288807][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.307172][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.345293][ T4134] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.352407][ T4134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.381711][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.392007][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.423916][ T4731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.490457][ T4737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.501329][ T4737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.519801][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.531193][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.540302][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.549837][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.558836][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.567784][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.577187][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.588133][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.597958][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.606889][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.720069][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.728918][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.742154][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.766064][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.782647][ T4969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.788629][ T4731] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.842124][ T4686] device veth0_vlan entered promiscuous mode [ 176.855333][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.863799][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.876067][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.885195][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.894428][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.901596][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.984572][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.992807][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.012721][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.021219][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.038999][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.062009][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.069206][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.077484][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.090103][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.103046][ T4686] device veth1_vlan entered promiscuous mode [ 177.160317][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.172515][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.190294][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.203841][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.217375][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.227625][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.257522][ T4737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.324125][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.342308][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.352025][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.372460][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.384359][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.395007][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.403775][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.429918][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.515442][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.680586][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.689721][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.698802][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.710479][ T4686] device veth0_macvtap entered promiscuous mode [ 178.010292][ T4737] device veth0_vlan entered promiscuous mode [ 178.323037][ T4737] device veth1_vlan entered promiscuous mode [ 178.473823][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 178.495495][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.506709][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.516223][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 178.524399][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 178.533981][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.542742][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.552278][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.560320][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.639588][ T14] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 178.678117][ T4737] device veth0_macvtap entered promiscuous mode [ 178.707536][ T4686] device veth1_macvtap entered promiscuous mode [ 178.719166][ T4737] device veth1_macvtap entered promiscuous mode [ 178.878254][ T4686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.889344][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 178.902523][ T4686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.913463][ T4686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.929187][ T4686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.939124][ T4686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.950127][ T4686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.960090][ T4686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.970769][ T4686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.982442][ T4686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.993824][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.004913][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.004937][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 179.004972][ T14] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 179.005009][ T14] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 179.005038][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.054188][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.064367][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.071872][ T14] hub 4-1:1.0: bad descriptor, ignoring hub [ 179.077089][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.081600][ T14] hub: probe of 4-1:1.0 failed with error -5 [ 179.091274][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.104062][ T14] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 179.107935][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.124261][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.135169][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.153754][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.169710][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.183421][ T4737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.223850][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.242926][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.266125][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.290993][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.301328][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.334082][ T4686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.359002][ T4686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.369171][ T4686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.379775][ T4686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.390131][ T4686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.400693][ T4686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.410903][ T4686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.421762][ T4686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.433473][ T4686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.443210][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.456612][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.468043][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.478996][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.504242][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.522305][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.532284][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.550861][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.562511][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.582955][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.602314][ T4737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.630414][ T14] usb 4-1: USB disconnect, device number 4 [ 179.704286][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.719221][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.728105][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.736916][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.748333][ T4686] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.758087][ T4686] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.767456][ T4686] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.776642][ T4686] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.790608][ T4737] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.802784][ T4737] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.812092][ T4737] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.828781][ T4737] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.888507][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.904898][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.914424][ T4731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.933956][ T4242] device hsr_slave_0 left promiscuous mode [ 179.950859][ T4242] device hsr_slave_1 left promiscuous mode [ 179.959801][ T4242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.973393][ T4242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.984055][ T4242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.998743][ T4242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.006977][ T4242] device bridge_slave_1 left promiscuous mode [ 180.013161][ T4242] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.021870][ T4242] device bridge_slave_0 left promiscuous mode [ 180.029145][ T4242] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.042376][ T4242] device hsr_slave_0 left promiscuous mode [ 180.049861][ T4242] device hsr_slave_1 left promiscuous mode [ 180.072401][ T4242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.080515][ T4242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.088902][ T4242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.098073][ T4242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.107144][ T4242] device bridge_slave_1 left promiscuous mode [ 180.113362][ T4242] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.122774][ T4242] device bridge_slave_0 left promiscuous mode [ 180.131242][ T4242] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.141717][ T26] audit: type=1326 audit(1719776031.706:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5013 comm="syz.3.330" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0df7d75b99 code=0x0 [ 180.187416][ T4242] device veth1_macvtap left promiscuous mode [ 180.192451][ T26] audit: type=1326 audit(1719776031.756:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5013 comm="syz.3.330" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f0df7d75b99 code=0x0 [ 180.193475][ T4242] device veth0_macvtap left promiscuous mode [ 180.221272][ T4242] device veth1_vlan left promiscuous mode [ 180.227232][ T4242] device veth0_vlan left promiscuous mode [ 180.233920][ T4242] device veth1_macvtap left promiscuous mode [ 180.240021][ T4242] device veth0_macvtap left promiscuous mode [ 180.246210][ T4242] device veth1_vlan left promiscuous mode [ 180.652816][ T4242] team0 (unregistering): Port device team_slave_1 removed [ 180.689853][ T4242] team0 (unregistering): Port device team_slave_0 removed [ 180.719646][ T4242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.756116][ T4242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.030672][ T4242] bond0 (unregistering): Released all slaves [ 181.312033][ T4242] team0 (unregistering): Port device team_slave_1 removed [ 181.343618][ T4242] team0 (unregistering): Port device team_slave_0 removed [ 181.370635][ T4242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.403235][ T4242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.687288][ T4242] bond0 (unregistering): Released all slaves [ 181.780991][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.805362][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.908549][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.930542][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.943198][ T4731] device veth0_vlan entered promiscuous mode [ 182.002352][ T4731] device veth1_vlan entered promiscuous mode [ 182.036302][ T3973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.044408][ T3973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.072880][ T4731] device veth0_macvtap entered promiscuous mode [ 182.099801][ T4731] device veth1_macvtap entered promiscuous mode [ 182.131992][ T4731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.142869][ T4731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.153317][ T4731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.163973][ T4731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.173935][ T4731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.184548][ T4731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.195058][ T4731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.205643][ T4731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.219119][ T4731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.924839][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.934541][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.944402][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.952611][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 182.961761][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.969815][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.978563][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.988143][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.996548][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.005609][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.016192][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.039773][ T4731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.051598][ T4100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.054562][ T4731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.065759][ T4100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.070806][ T4731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.089468][ T4731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.099640][ T4731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.110279][ T4731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.120217][ T4731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.132172][ T4731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.151925][ T4731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.166702][ T5021] device bond_slave_0 entered promiscuous mode [ 183.173248][ T5021] device bond_slave_1 entered promiscuous mode [ 183.183100][ T5021] device bond_slave_0 left promiscuous mode [ 183.189121][ T5021] device bond_slave_1 left promiscuous mode [ 183.227513][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.236944][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.246945][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.258450][ T4731] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.270795][ T4731] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.279821][ T4731] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.289026][ T4731] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.370997][ T3925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.399210][ T3925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.404260][ T4100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.430170][ T4100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.477492][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.544390][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.559266][ T4100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.714007][ T4100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.902742][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 184.256281][ T4100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.290275][ T4100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.375218][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 184.669193][ T5051] device bond_slave_0 entered promiscuous mode [ 184.675468][ T5051] device bond_slave_1 entered promiscuous mode [ 184.763548][ T5051] device bond_slave_0 left promiscuous mode [ 184.769617][ T5051] device bond_slave_1 left promiscuous mode [ 186.557401][ T5106] device bond_slave_0 entered promiscuous mode [ 186.563716][ T5106] device bond_slave_1 entered promiscuous mode [ 186.682224][ T5106] device bond_slave_0 left promiscuous mode [ 186.688361][ T5106] device bond_slave_1 left promiscuous mode [ 187.755078][ T5129] syz.1.373 (pid 5129) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 188.254825][ T3291] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 189.275165][ T3291] usb 2-1: Using ep0 maxpacket: 8 [ 189.313965][ T5159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'. [ 189.429859][ T3291] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 189.447671][ T3291] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 189.480383][ T3291] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 189.483783][ T5163] device bond_slave_0 entered promiscuous mode [ 189.495913][ T5163] device bond_slave_1 entered promiscuous mode [ 189.507204][ T5163] device bond_slave_0 left promiscuous mode [ 189.507766][ T3291] usb 2-1: config 250 has no interface number 0 [ 189.513229][ T5163] device bond_slave_1 left promiscuous mode [ 189.564352][ T3291] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 189.614368][ T3291] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 189.679422][ T3291] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 105 [ 189.733226][ T3291] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 189.810200][ T3291] usb 2-1: config 250 interface 228 has no altsetting 0 [ 189.955071][ T3291] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 189.988201][ T3291] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 190.043035][ T3291] usb 2-1: Product: syz [ 190.070939][ T3291] usb 2-1: SerialNumber: syz [ 190.181553][ T3291] hub 2-1:250.228: bad descriptor, ignoring hub [ 190.215574][ T3291] hub: probe of 2-1:250.228 failed with error -5 [ 190.336722][ T2965] libceph: connect (1)[c::]:6789 error -101 [ 190.343300][ T2965] libceph: mon0 (1)[c::]:6789 connect error [ 190.384584][ T3291] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 190.617791][ T3594] libceph: connect (1)[c::]:6789 error -101 [ 190.629365][ T3594] libceph: mon0 (1)[c::]:6789 connect error [ 190.764771][ C1] usblp0: nonzero read bulk status received: -71 [ 190.866851][ T5141] usblp0: error -71 reading from printer [ 190.884545][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.894660][ C1] usblp0: nonzero read bulk status received: -71 [ 190.924088][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.941487][ T2965] usb 2-1: USB disconnect, device number 12 [ 190.947792][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.959926][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.971024][ T2965] usblp0: removed [ 190.983237][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.005361][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.015567][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.029629][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.039782][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.050649][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.087098][ T5170] ceph: No mds server is up or the cluster is laggy [ 191.165155][ T3594] libceph: connect (1)[c::]:6789 error -101 [ 191.171224][ T3594] libceph: mon0 (1)[c::]:6789 connect error [ 191.759044][ T5214] netlink: 'syz.4.403': attribute type 4 has an invalid length. [ 191.803788][ T5216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.404'. [ 192.309639][ T5238] can0: slcan on pty20. [ 192.485140][ T5233] can0 (unregistered): slcan off pty20. [ 193.155476][ T5266] netlink: 14 bytes leftover after parsing attributes in process `syz.3.422'. [ 193.308827][ T5279] netlink: 'syz.0.427': attribute type 29 has an invalid length. [ 194.186846][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.195657][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.176416][ T26] audit: type=1326 audit(1719776048.746:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5377 comm="syz.0.458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07d3375b99 code=0x0 [ 208.841736][ T5783] loop0: detected capacity change from 0 to 64 [ 209.025205][ T5786] loop3: detected capacity change from 0 to 64 [ 209.688227][ T5798] nvme_fabrics: missing parameter 'transport=%s' [ 209.716008][ T5798] nvme_fabrics: missing parameter 'nqn=%s' [ 209.875402][ T3558] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 210.219523][ T5826] loop0: detected capacity change from 0 to 7 [ 210.240011][ T3558] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 210.273908][ T5826] Dev loop0: unable to read RDB block 7 [ 210.294776][ T5826] loop0: unable to read partition table [ 210.303351][ T5826] loop0: partition table beyond EOD, truncated [ 210.333678][ T5826] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 210.333678][ T5826] ) failed (rc=-5) [ 210.437917][ T3558] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 210.602637][ T3558] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 210.779948][ T5843] loop4: detected capacity change from 0 to 1764 [ 210.839022][ T5843] process 'syz.4.609' launched './file0' with NULL argv: empty string added [ 211.086856][ T5852] loop4: detected capacity change from 0 to 512 [ 211.129077][ T5852] EXT4-fs (loop4): 1 truncate cleaned up [ 211.160825][ T5852] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 211.261959][ T5852] Unsupported ieee802154 address type: 0 [ 211.415784][ T4686] EXT4-fs error (device loop4): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 211.505715][ T4686] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 211.539466][ T4686] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 212.217025][ T5796] loop3: detected capacity change from 0 to 40427 [ 212.431168][ T5796] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 212.765823][ T4686] EXT4-fs (loop4): unmounting filesystem. [ 212.926716][ T3975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.060824][ T3975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.215701][ T3975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.382183][ T3975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.742588][ T5892] loop3: detected capacity change from 0 to 512 [ 214.752279][ T3562] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.764930][ T3562] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.782393][ T3562] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.794358][ T3562] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.805345][ T3562] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.816890][ T3562] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.864507][ T5880] loop1: detected capacity change from 0 to 40427 [ 214.913089][ T5880] F2FS-fs (loop1): Unrecognized mount option "whint_mode=user-based" or missing value [ 214.950282][ T5892] EXT4-fs (loop3): 1 truncate cleaned up [ 214.984756][ T5892] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 215.210733][ T4077] EXT4-fs (loop3): unmounting filesystem. [ 215.751685][ T5913] netlink: 116 bytes leftover after parsing attributes in process `syz.1.623'. [ 215.761063][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'. [ 216.531772][ T5891] chnl_net:caif_netlink_parms(): no params data found [ 216.904898][ T3558] Bluetooth: hci2: command tx timeout [ 216.941016][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.951695][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.980285][ T5891] device bridge_slave_0 entered promiscuous mode [ 217.020715][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.054849][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.063043][ T5891] device bridge_slave_1 entered promiscuous mode [ 217.445208][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.528223][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.596816][ T5948] device bridge0 entered promiscuous mode [ 217.734283][ T5891] team0: Port device team_slave_0 added [ 217.781229][ T3975] device hsr_slave_0 left promiscuous mode [ 217.808411][ T3975] device hsr_slave_1 left promiscuous mode [ 217.819554][ T3975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.833677][ T3975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.921428][ T3975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.935017][ T3975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.948992][ T3975] device bridge_slave_1 left promiscuous mode [ 217.958771][ T3975] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.977583][ T3975] device bridge_slave_0 left promiscuous mode [ 217.992551][ T3975] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.090220][ T3975] device veth1_macvtap left promiscuous mode [ 218.110555][ T3975] device veth0_macvtap left promiscuous mode [ 218.131801][ T3975] device veth1_vlan left promiscuous mode [ 218.189753][ T3975] device veth0_vlan left promiscuous mode [ 218.388489][ T5972] netlink: 44 bytes leftover after parsing attributes in process `syz.1.650'. [ 218.984738][ T3558] Bluetooth: hci2: command tx timeout [ 219.143289][ T3975] team0 (unregistering): Port device team_slave_1 removed [ 219.212231][ T3975] team0 (unregistering): Port device team_slave_0 removed [ 219.273692][ T3975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.319354][ T3975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.592604][ T5988] loop0: detected capacity change from 0 to 2048 [ 219.610028][ T5988] EXT4-fs: Ignoring removed mblk_io_submit option [ 219.649474][ T5988] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 219.820855][ T4116] EXT4-fs (loop0): unmounting filesystem. [ 219.890597][ T3975] bond0 (unregistering): Released all slaves [ 219.899031][ T5993] kernel profiling enabled (shift: 1) [ 219.944641][ C1] ================================================================== [ 219.952736][ C1] BUG: KASAN: stack-out-of-bounds in profile_pc+0xa4/0xe0 [ 219.959858][ C1] Read of size 8 at addr ffffc900060aeb00 by task syz.0.654/5993 [ 219.967562][ C1] [ 219.969908][ C1] CPU: 1 PID: 5993 Comm: syz.0.654 Not tainted 6.1.96-syzkaller #0 [ 219.977782][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 219.987840][ C1] Call Trace: [ 219.991112][ C1] [ 219.993937][ C1] dump_stack_lvl+0x1e3/0x2cb [ 219.998609][ C1] ? nf_tcp_handle_invalid+0x642/0x642 [ 220.004079][ C1] ? panic+0x764/0x764 [ 220.008161][ C1] ? _printk+0xd1/0x111 [ 220.012358][ C1] print_report+0x15f/0x4f0 [ 220.016853][ C1] ? __virt_addr_valid+0xb9/0x520 [ 220.021862][ C1] ? profile_pc+0xa4/0xe0 [ 220.026195][ C1] kasan_report+0x136/0x160 [ 220.030730][ C1] ? profile_pc+0xa4/0xe0 [ 220.035059][ C1] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 220.040953][ C1] profile_pc+0xa4/0xe0 [ 220.045110][ C1] profile_tick+0xee/0x170 [ 220.049531][ C1] tick_sched_timer+0x390/0x550 [ 220.054445][ C1] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 220.059992][ C1] __hrtimer_run_queues+0x5a7/0xe50 [ 220.065197][ C1] ? hrtimer_interrupt+0x980/0x980 [ 220.070340][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 220.076408][ C1] hrtimer_interrupt+0x392/0x980 [ 220.081345][ C1] __sysvec_apic_timer_interrupt+0x156/0x580 [ 220.087324][ C1] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 220.092963][ C1] [ 220.095875][ C1] [ 220.098813][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 220.104786][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 [ 220.111298][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 c2 b8 4c f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 67 06 c9 f6 65 8b 05 08 13 6d 75 85 c0 74 3f 48 c7 04 24 0e 36 [ 220.130894][ C1] RSP: 0018:ffffc900060aeb00 EFLAGS: 00000206 [ 220.136942][ C1] RAX: ebc477531026ad00 RBX: 1ffff92000c15d64 RCX: ffffffff816ad45a [ 220.144904][ C1] RDX: dffffc0000000000 RSI: ffffffff8aec0240 RDI: 0000000000000001 [ 220.152873][ C1] RBP: ffffc900060aeb90 R08: dffffc0000000000 R09: fffffbfff2093845 [ 220.160916][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 220.168878][ C1] R13: 1ffff92000c15d60 R14: ffffc900060aeb20 R15: 0000000000000246 [ 220.176850][ C1] ? mark_lock+0x9a/0x340 [ 220.181166][ C1] ? _raw_spin_unlock+0x40/0x40 [ 220.186010][ C1] ? __mod_zone_page_state+0xd6/0x140 [ 220.191378][ C1] __rmqueue_pcplist+0x2023/0x2310 [ 220.196489][ C1] ? zone_watermark_fast+0x240/0x240 [ 220.201772][ C1] get_page_from_freelist+0x86c/0x3320 [ 220.207229][ C1] ? __alloc_pages+0x16a/0x770 [ 220.211991][ C1] ? mark_lock+0x9a/0x340 [ 220.216306][ C1] ? __might_sleep+0xb0/0xb0 [ 220.220880][ C1] ? __next_zones_zonelist+0x9e/0x130 [ 220.226414][ C1] ? __alloc_pages+0x770/0x770 [ 220.231259][ C1] ? prepare_alloc_pages+0x35b/0x5b0 [ 220.236523][ C1] __alloc_pages+0x28d/0x770 [ 220.241096][ C1] ? zone_statistics+0x160/0x160 [ 220.246016][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 220.251121][ C1] ? alloc_pages+0x50c/0x770 [ 220.255867][ C1] __get_free_pages+0x8/0x30 [ 220.260431][ C1] kasan_populate_vmalloc_pte+0x35/0xf0 [ 220.265968][ C1] ? __apply_to_page_range+0x9b3/0xcc0 [ 220.271457][ C1] __apply_to_page_range+0x9c5/0xcc0 [ 220.276742][ C1] ? kasan_populate_vmalloc+0x70/0x70 [ 220.282203][ C1] alloc_vmap_area+0x1977/0x1ac0 [ 220.287234][ C1] ? vm_map_ram+0xb20/0xb20 [ 220.291757][ C1] __get_vm_area_node+0x16c/0x360 [ 220.296778][ C1] __vmalloc_node_range+0x389/0x1490 [ 220.302044][ C1] ? profile_init+0xfa/0x160 [ 220.306625][ C1] ? zone_statistics+0x160/0x160 [ 220.311570][ C1] ? zone_statistics+0x160/0x160 [ 220.316514][ C1] ? free_vm_area+0x50/0x50 [ 220.320998][ C1] ? profile_init+0xfa/0x160 [ 220.325578][ C1] ? sysfs_kf_read+0x300/0x300 [ 220.330347][ C1] vzalloc+0x75/0x80 [ 220.334225][ C1] ? profile_init+0xfa/0x160 [ 220.338796][ C1] profile_init+0xfa/0x160 [ 220.343195][ C1] profiling_store+0x5a/0xc0 [ 220.347774][ C1] kernfs_fop_write_iter+0x3a2/0x4f0 [ 220.353064][ C1] do_iter_write+0x6e6/0xc50 [ 220.357636][ C1] ? vfs_iter_write+0xa0/0xa0 [ 220.362288][ C1] ? vfs_iter_write+0x69/0xa0 [ 220.366950][ C1] iter_file_splice_write+0x830/0xfc0 [ 220.372313][ C1] ? generic_file_splice_read+0x2ce/0x630 [ 220.378014][ C1] ? splice_from_pipe+0x240/0x240 [ 220.383027][ C1] ? splice_shrink_spd+0xb0/0xb0 [ 220.387963][ C1] ? common_file_perm+0x17d/0x1d0 [ 220.392982][ C1] ? splice_from_pipe+0x240/0x240 [ 220.397988][ C1] direct_splice_actor+0xe3/0x1c0 [ 220.403083][ C1] splice_direct_to_actor+0x4c7/0xc30 [ 220.408445][ C1] ? direct_file_splice_eof+0xa0/0xa0 [ 220.413823][ C1] ? pipe_to_sendpage+0x350/0x350 [ 220.418883][ C1] ? fsnotify_perm+0x67/0x590 [ 220.423550][ C1] ? bpf_lsm_file_permission+0x5/0x10 [ 220.428940][ C1] do_splice_direct+0x2a5/0x3e0 [ 220.433806][ C1] ? splice_direct_to_actor+0xc30/0xc30 [ 220.439630][ C1] ? rcu_read_lock_any_held+0xb3/0x160 [ 220.445171][ C1] ? do_splice_direct+0x3e0/0x3e0 [ 220.450813][ C1] do_sendfile+0x61c/0xff0 [ 220.455608][ C1] ? do_pwritev+0x360/0x360 [ 220.460241][ C1] ? restore_fpregs_from_fpstate+0xfc/0x230 [ 220.466634][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 220.473166][ C1] __se_sys_sendfile64+0x178/0x1e0 [ 220.478513][ C1] ? __x64_sys_sendfile64+0xa0/0xa0 [ 220.483916][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 220.490196][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 220.496394][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 220.502842][ C1] do_syscall_64+0x3b/0xb0 [ 220.507467][ C1] ? clear_bhb_loop+0x45/0xa0 [ 220.512486][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.519074][ C1] RIP: 0033:0x7f07d3375b99 [ 220.523960][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.547675][ C1] RSP: 002b:00007f07d4073048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 220.556205][ C1] RAX: ffffffffffffffda RBX: 00007f07d3503fa0 RCX: 00007f07d3375b99 [ 220.564793][ C1] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 220.574144][ C1] RBP: 00007f07d33f677e R08: 0000000000000000 R09: 0000000000000000 [ 220.585004][ C1] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 220.593762][ C1] R13: 000000000000000b R14: 00007f07d3503fa0 R15: 00007ffc08bdb3c8 [ 220.602389][ C1] [ 220.605858][ C1] [ 220.608205][ C1] The buggy address belongs to stack of task syz.0.654/5993 [ 220.615618][ C1] and is located at offset 0 in frame: [ 220.621433][ C1] _raw_spin_unlock_irqrestore+0x0/0x130 [ 220.627094][ C1] [ 220.629425][ C1] This frame has 1 object: [ 220.633919][ C1] [32, 40) 'flags.i.i.i.i' [ 220.633928][ C1] [ 220.640782][ C1] The buggy address belongs to the virtual mapping at [ 220.640782][ C1] [ffffc900060a8000, ffffc900060b1000) created by: [ 220.640782][ C1] copy_process+0x637/0x4060 [ 220.658505][ C1] [ 220.660818][ C1] The buggy address belongs to the physical page: [ 220.667220][ C1] page:ffffea00010d9ec0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4367b [ 220.677375][ C1] memcg:ffff888021128502 [ 220.681591][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 220.688703][ C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 220.697279][ C1] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff888021128502 [ 220.705849][ C1] page dumped because: kasan: bad access detected [ 220.712263][ C1] page_owner tracks the page as allocated [ 220.718132][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 3218, tgid 3218 (dhcpcd), ts 217956818655, free_ts 217750778282 [ 220.736091][ C1] post_alloc_hook+0x18d/0x1b0 [ 220.741189][ C1] get_page_from_freelist+0x31a1/0x3320 [ 220.746727][ C1] __alloc_pages+0x28d/0x770 [ 220.751322][ C1] __vmalloc_node_range+0x92b/0x1490 [ 220.756614][ C1] dup_task_struct+0x3e5/0x6d0 [ 220.761365][ C1] copy_process+0x637/0x4060 [ 220.765946][ C1] kernel_clone+0x222/0x920 [ 220.770451][ C1] __se_sys_clone3+0x373/0x410 [ 220.775215][ C1] do_syscall_64+0x3b/0xb0 [ 220.779636][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.785525][ C1] page last free stack trace: [ 220.790184][ C1] free_unref_page_prepare+0xf63/0x1120 [ 220.795713][ C1] free_unref_page+0x33/0x3e0 [ 220.800366][ C1] __vunmap+0x834/0x9a0 [ 220.804501][ C1] sock_hash_free+0x7a2/0x820 [ 220.809170][ C1] map_create+0x97a/0xd20 [ 220.813495][ C1] __sys_bpf+0x2d3/0x6c0 [ 220.817716][ C1] __x64_sys_bpf+0x78/0x90 [ 220.822118][ C1] do_syscall_64+0x3b/0xb0 [ 220.826544][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.832452][ C1] [ 220.834765][ C1] Memory state around the buggy address: [ 220.840381][ C1] ffffc900060aea00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.848430][ C1] ffffc900060aea80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.856493][ C1] >ffffc900060aeb00: f1 f1 f1 f1 00 f3 f3 f3 00 00 00 00 00 00 00 00 [ 220.864542][ C1] ^ [ 220.868595][ C1] ffffc900060aeb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.876646][ C1] ffffc900060aec00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.884694][ C1] ================================================================== [ 220.892740][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 220.899915][ C1] CPU: 1 PID: 5993 Comm: syz.0.654 Not tainted 6.1.96-syzkaller #0 [ 220.907798][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 220.917851][ C1] Call Trace: [ 220.921113][ C1] [ 220.923938][ C1] dump_stack_lvl+0x1e3/0x2cb [ 220.928618][ C1] ? nf_tcp_handle_invalid+0x642/0x642 [ 220.934080][ C1] ? panic+0x764/0x764 [ 220.938133][ C1] ? rcu_is_watching+0x11/0xb0 [ 220.942873][ C1] ? lock_release+0xd6/0xa20 [ 220.947459][ C1] ? vscnprintf+0x59/0x80 [ 220.951783][ C1] panic+0x318/0x764 [ 220.955659][ C1] ? __wake_up_klogd+0xcc/0x100 [ 220.960495][ C1] ? check_panic_on_warn+0x1d/0xa0 [ 220.965616][ C1] ? memcpy_page_flushcache+0xfc/0xfc [ 220.970991][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 220.976186][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 220.982078][ C1] ? _raw_spin_unlock+0x40/0x40 [ 220.987560][ C1] check_panic_on_warn+0x7e/0xa0 [ 220.992944][ C1] ? profile_pc+0xa4/0xe0 [ 220.997616][ C1] end_report+0x66/0x110 [ 221.001870][ C1] kasan_report+0x143/0x160 [ 221.006543][ C1] ? profile_pc+0xa4/0xe0 [ 221.010873][ C1] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 221.016770][ C1] profile_pc+0xa4/0xe0 [ 221.020938][ C1] profile_tick+0xee/0x170 [ 221.025393][ C1] tick_sched_timer+0x390/0x550 [ 221.030276][ C1] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 221.035817][ C1] __hrtimer_run_queues+0x5a7/0xe50 [ 221.041178][ C1] ? hrtimer_interrupt+0x980/0x980 [ 221.046370][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 221.052438][ C1] hrtimer_interrupt+0x392/0x980 [ 221.057629][ C1] __sysvec_apic_timer_interrupt+0x156/0x580 [ 221.063589][ C1] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 221.069212][ C1] [ 221.072132][ C1] [ 221.075061][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 221.081043][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 [ 221.087537][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 c2 b8 4c f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 67 06 c9 f6 65 8b 05 08 13 6d 75 85 c0 74 3f 48 c7 04 24 0e 36 [ 221.107152][ C1] RSP: 0018:ffffc900060aeb00 EFLAGS: 00000206 [ 221.113224][ C1] RAX: ebc477531026ad00 RBX: 1ffff92000c15d64 RCX: ffffffff816ad45a [ 221.121356][ C1] RDX: dffffc0000000000 RSI: ffffffff8aec0240 RDI: 0000000000000001 [ 221.129319][ C1] RBP: ffffc900060aeb90 R08: dffffc0000000000 R09: fffffbfff2093845 [ 221.137325][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 221.145290][ C1] R13: 1ffff92000c15d60 R14: ffffc900060aeb20 R15: 0000000000000246 [ 221.153281][ C1] ? mark_lock+0x9a/0x340 [ 221.157597][ C1] ? _raw_spin_unlock+0x40/0x40 [ 221.162425][ C1] ? __mod_zone_page_state+0xd6/0x140 [ 221.167784][ C1] __rmqueue_pcplist+0x2023/0x2310 [ 221.172894][ C1] ? zone_watermark_fast+0x240/0x240 [ 221.178169][ C1] get_page_from_freelist+0x86c/0x3320 [ 221.183686][ C1] ? __alloc_pages+0x16a/0x770 [ 221.188450][ C1] ? mark_lock+0x9a/0x340 [ 221.192786][ C1] ? __might_sleep+0xb0/0xb0 [ 221.197361][ C1] ? __next_zones_zonelist+0x9e/0x130 [ 221.202745][ C1] ? __alloc_pages+0x770/0x770 [ 221.207503][ C1] ? prepare_alloc_pages+0x35b/0x5b0 [ 221.212811][ C1] __alloc_pages+0x28d/0x770 [ 221.217396][ C1] ? zone_statistics+0x160/0x160 [ 221.222317][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 221.227330][ C1] ? alloc_pages+0x50c/0x770 [ 221.231920][ C1] __get_free_pages+0x8/0x30 [ 221.236508][ C1] kasan_populate_vmalloc_pte+0x35/0xf0 [ 221.242052][ C1] ? __apply_to_page_range+0x9b3/0xcc0 [ 221.247512][ C1] __apply_to_page_range+0x9c5/0xcc0 [ 221.252804][ C1] ? kasan_populate_vmalloc+0x70/0x70 [ 221.258181][ C1] alloc_vmap_area+0x1977/0x1ac0 [ 221.263120][ C1] ? vm_map_ram+0xb20/0xb20 [ 221.267625][ C1] __get_vm_area_node+0x16c/0x360 [ 221.272655][ C1] __vmalloc_node_range+0x389/0x1490 [ 221.277938][ C1] ? profile_init+0xfa/0x160 [ 221.282527][ C1] ? zone_statistics+0x160/0x160 [ 221.287485][ C1] ? zone_statistics+0x160/0x160 [ 221.292438][ C1] ? free_vm_area+0x50/0x50 [ 221.297052][ C1] ? profile_init+0xfa/0x160 [ 221.301658][ C1] ? sysfs_kf_read+0x300/0x300 [ 221.306428][ C1] vzalloc+0x75/0x80 [ 221.310341][ C1] ? profile_init+0xfa/0x160 [ 221.315032][ C1] profile_init+0xfa/0x160 [ 221.319539][ C1] profiling_store+0x5a/0xc0 [ 221.324127][ C1] kernfs_fop_write_iter+0x3a2/0x4f0 [ 221.329396][ C1] do_iter_write+0x6e6/0xc50 [ 221.333982][ C1] ? vfs_iter_write+0xa0/0xa0 [ 221.338657][ C1] ? vfs_iter_write+0x69/0xa0 [ 221.343315][ C1] iter_file_splice_write+0x830/0xfc0 [ 221.348678][ C1] ? generic_file_splice_read+0x2ce/0x630 [ 221.354408][ C1] ? splice_from_pipe+0x240/0x240 [ 221.359443][ C1] ? splice_shrink_spd+0xb0/0xb0 [ 221.364365][ C1] ? common_file_perm+0x17d/0x1d0 [ 221.369389][ C1] ? splice_from_pipe+0x240/0x240 [ 221.374395][ C1] direct_splice_actor+0xe3/0x1c0 [ 221.379757][ C1] splice_direct_to_actor+0x4c7/0xc30 [ 221.385123][ C1] ? direct_file_splice_eof+0xa0/0xa0 [ 221.390498][ C1] ? pipe_to_sendpage+0x350/0x350 [ 221.395865][ C1] ? fsnotify_perm+0x67/0x590 [ 221.400526][ C1] ? bpf_lsm_file_permission+0x5/0x10 [ 221.405886][ C1] do_splice_direct+0x2a5/0x3e0 [ 221.411196][ C1] ? splice_direct_to_actor+0xc30/0xc30 [ 221.417526][ C1] ? rcu_read_lock_any_held+0xb3/0x160 [ 221.423126][ C1] ? do_splice_direct+0x3e0/0x3e0 [ 221.428540][ C1] do_sendfile+0x61c/0xff0 [ 221.433228][ C1] ? do_pwritev+0x360/0x360 [ 221.437832][ C1] ? restore_fpregs_from_fpstate+0xfc/0x230 [ 221.444533][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 221.450885][ C1] __se_sys_sendfile64+0x178/0x1e0 [ 221.456436][ C1] ? __x64_sys_sendfile64+0xa0/0xa0 [ 221.461835][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 221.468477][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 221.473949][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 221.480820][ C1] do_syscall_64+0x3b/0xb0 [ 221.486353][ C1] ? clear_bhb_loop+0x45/0xa0 [ 221.491045][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.497731][ C1] RIP: 0033:0x7f07d3375b99 [ 221.502741][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.530494][ C1] RSP: 002b:00007f07d4073048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 221.542528][ C1] RAX: ffffffffffffffda RBX: 00007f07d3503fa0 RCX: 00007f07d3375b99 [ 221.553547][ C1] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 221.562227][ C1] RBP: 00007f07d33f677e R08: 0000000000000000 R09: 0000000000000000 [ 221.571508][ C1] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 221.579475][ C1] R13: 000000000000000b R14: 00007f07d3503fa0 R15: 00007ffc08bdb3c8 [ 221.587453][ C1] [ 221.590750][ C1] Kernel Offset: disabled [ 221.595151][ C1] Rebooting in 86400 seconds..