last executing test programs: 5.699923926s ago: executing program 3 (id=320): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x40) 5.699773286s ago: executing program 1 (id=321): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private0, @mcast2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x10200}) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000e9163e7627d286dd602c2d530010210000000000000000000000ffff00000000cd"], 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000500)=@mgmt_frame=@beacon={{{}, {}, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @void, @void, @void, @void, @void}, 0x36) unshare(0x20000400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0xa}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 5.514808404s ago: executing program 3 (id=323): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='highspeed\x00', 0xa) syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f0000000580)=@data_frame={@a_msdu=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x3}, @device_a, @device_a, @initial, {0x3, 0x6}, @broadcast}, @a_msdu=[{@device_a, @device_b, 0x4c, "3300629efba888e074692aedd7fb01e1be452f54c111a09c5dd1301f3a2932ccd35814f4035d8fb4c0cbf6c99576dfbc327572070ae362a101d579f61ea3df08401ae3a5d0dc376ea07664c1"}, {@device_a, @broadcast}, {@broadcast, @device_a, 0xa1, "545364cde8e6a73b634db4f49f7c83431713c915add9c3f7ba07fa887e6fba1de096ed8a631a63e7e5f87d8f34a93307bb99cf3f58d7d74e838ca8860667683b5709057f8000328f1aad1dbee2aefe2a9bea250bc4aab9af198a498eba39b3d8c19ffc98a35085d40177c35e7d96cb5ae94f53b647a1d70f283e22440190604cc360b91bdd4059824b960b027507ecb47976b064b04be62a960d8b6606d6ab1a62"}, {@device_b, @device_a, 0x73, "568318e941c89767154a9b8ffd04dd4c0bb2c89c304548948041dfe7e176e011cffe043b45170d667aebdf10c47690e1513ee97c253304ce34177075548ac079d688d53a20759950dc50283211f3aff0b1f074ca3ab6a5d4ee9bbf39506539719082cca182c0dfd339056939d88be4eb545985"}, {@broadcast, @device_b, 0x44, "ce1d63978b214ebcde625172b11545345b5f64382e31aac84d1eae70834f3965ebf11bda071eb5ac3ba525acd460a8c2b59d72fbafa69e50345a0d0ab1b9324c4b53f58a"}]}, 0x212) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2}]}, @void, @void, @void, @void, @void, @void}, 0x2f) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{}, {0x5}]}) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000007c0)=ANY=[@ANYBLOB="383d20000802110000010802110000000802070000000000"], 0x18) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000000000000000002082848b960c121824"], 0x28) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r6, &(0x7f0000000300)="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", 0xffffff6d, 0x4048041, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x2, 0xfffffffc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {}]}, @void, @void, @void, @void, @void, @void}, 0x30) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r10, &(0x7f000000cf00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0xfffffffffffffe84, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000fe0702ff0000010802110000000802110000001000000002000000"], 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) 4.747938105s ago: executing program 1 (id=329): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x3eb}, 0x20}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20) 4.62678026s ago: executing program 1 (id=331): r0 = socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000007e40)=[{&(0x7f00000069c0)="9d", 0x1}], 0x1}, 0x0) 4.520948264s ago: executing program 1 (id=333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_free_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_free_inode\x00', r2}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 4.347977222s ago: executing program 1 (id=335): unshare(0x20000400) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, 0x0, 0x8) 4.335979942s ago: executing program 1 (id=336): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000047000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) 3.1699004s ago: executing program 3 (id=341): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0xf9, 0x2fff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 2.724865688s ago: executing program 3 (id=346): unshare(0x20000400) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, 0x0, 0x8) 2.468530409s ago: executing program 3 (id=349): setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040), 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 2.327214244s ago: executing program 0 (id=352): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0faf16a001c000000000000000000000008000000", @ANYRES64=r0], 0x38}, 0x0) 2.132209763s ago: executing program 0 (id=354): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000180), &(0x7f0000000340)=0x4) 2.047204636s ago: executing program 0 (id=355): r0 = socket$inet6(0xa, 0x3, 0x3c) socket(0x0, 0x0, 0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="84", 0xffdf}], 0x1) 1.767865117s ago: executing program 0 (id=357): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000b30000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @broadcast}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000680)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000000000000000000000000064002072170ac3a0951a3ef118246aaa429a"], 0x36) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}, 0x0) r8 = socket(0x11, 0x2, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendto$packet(r9, &(0x7f0000000480)="8d3799711d0436e0785ff16c17a9e6d2b818901677eba0f5c5136fe69909e6344a13dcfa30d4b17c", 0x28, 0x0, &(0x7f0000000140)={0x11, 0xd, r10}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000300)={'syztnl2\x00', r10, 0x8000, 0x7, 0x9, 0x0, {{0x20, 0x4, 0x2, 0x9, 0x80, 0x67, 0x0, 0x4, 0x0, 0x0, @empty, @loopback, {[@timestamp_prespec={0x44, 0x2c, 0xac, 0x3, 0xd, [{@private=0xa010100, 0x3}, {@remote, 0x80000000}, {@empty, 0x140}, {@empty, 0x38}, {@multicast1, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0xe8, 0x3, 0x8, [{@rand_addr=0x64010102}]}, @rr={0x7, 0x13, 0x94, [@multicast2, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x43}]}, @timestamp_prespec={0x44, 0x14, 0xb5, 0x3, 0x6, [{@broadcast, 0x9}, {@multicast2, 0x5}]}, @ssrr={0x89, 0xb, 0x3c, [@private=0xa010101, @remote]}]}}}}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)={0x28, r12, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="000228bd7000fbdbdf252e0000000c0099009b260000190000000400e200"], 0x24}, 0x1, 0x0, 0x0, 0x4020010}, 0x8801) socket$netlink(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 1.560060786s ago: executing program 4 (id=358): unshare(0x20000400) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x8) 1.435431301s ago: executing program 3 (id=360): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000004000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) eventfd(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) 1.254920149s ago: executing program 4 (id=361): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) 998.868849ms ago: executing program 2 (id=362): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) unlinkat(0xffffffffffffffff, 0x0, 0x0) 917.787612ms ago: executing program 2 (id=363): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x404c534a, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0x80045300, 0x0) tkill(r0, 0x7) 776.048218ms ago: executing program 4 (id=364): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x6, 0x1, 0x0, &(0x7f0000000080)=0x15) 689.759962ms ago: executing program 4 (id=365): open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0xc) 682.281722ms ago: executing program 0 (id=366): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="06000500080000000a000400ffffffffffff000006000500010000001400140076657468315f766c616e00000000000008000a00e0"], 0x90}}, 0x0) 488.08173ms ago: executing program 2 (id=367): sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, 0x0, 0x0) r0 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xb7AJ\n\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8\x1cXVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x62, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000140)={'\x00', 0x1000, 0x1, 0x1}) ftruncate(r0, 0x0) 448.181051ms ago: executing program 4 (id=368): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002940)=@delchain={0x958, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x8cc, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x470, 0x5, [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x440, 0x6, [@m_ctinfo={0x38, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x100, 0x0, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x40, 0x6, [@IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x8}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_PARMS={0x1c}]}, {0x65, 0x6, "68f33c84b776915719434abe46a9ad66388de7f727e754e0482910d008dee0199b585271d39abe13f7c59928211ea2eea798182b0caf370760e543f9c63a2fafb29bde21d4a4166ea1d1c4e6f61174108c064b3b9a7cf04e9b165a21eef5e591bb"}, {0xc}, {0xc}}}, @m_nat={0xf8, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x7d, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199b042be92c52b0490cb3ccc8a115bd7fba1ddd4a3ea8aa011548c0a44af30d92f016d58b7280bd34278777199f7793bcc30f7c7b74cd6eded8934fa327e1541339075fdc86a745c472c9477faee71092d"}, {0xc}, {0xc}}}, @m_connmark={0x138, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0xb1, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7da0dc8795f6ad32634b6b66cf821e93079c15dda212b0b37b761850342ebe270d64e92b80cf9114d976338d2dbd729e033dcd00b517933d3e64d73a30fc4e9a29d250104fa297e7a7f17405df935efe7e4806b65a797a850f6a8d8e2c8a8b9f56953d1262211f307b4af9617b04c9c48dea9e41ef304ac3365b6d"}, {0xc}, {0xc}}}, @m_bpf={0x88, 0x0, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{}, {}, {}]}]}, {0x39, 0x6, "538ccaa56078deef003c66568338f89ce81cefabfec7b5ecd9cf6ec4c86d636a2b2cee0c35637b64dc5c63c60e180d0c44ef1e097d"}, {0xc}, {0xc}}}, @m_ctinfo={0x4c, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x15, 0x6, "41be356e964e7745f9a50000dce1c50c2b"}, {0xc}, {0xc}}}]}]}}]}, 0x958}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300), 0xc, 0x0}, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x924}, {&(0x7f00000007c0)=""/154, 0xc8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 389.416204ms ago: executing program 2 (id=369): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) open(0x0, 0x0, 0x0) ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 179.983322ms ago: executing program 2 (id=370): unshare(0x20000400) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x8) 149.556134ms ago: executing program 0 (id=371): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24003e8d00369729c2"], 0x24}}, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) 102.571906ms ago: executing program 4 (id=372): creat(0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2}]}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000002c0)=@framed, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) 0s ago: executing program 2 (id=373): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r3 = epoll_create1(0x0) r4 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)) io_setup(0x6, 0xfffffffffffffffd) r5 = socket$rds(0x15, 0x5, 0x0) io_submit(0x0, 0x1, &(0x7f0000001340)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="03011400012989290e35800dad0001140000002f0600ac141418e0000003808a8972bd0b72e410820c520f061fe4fdfe4b889430ebb52997e36e039b1c598825f80100e3c06376c33076a167d514fa570a440261a67a34a07605c93a194946bc6283f4"], 0xdd12}], 0x1}, 0x0) kernel console output (not intermixed with test programs): [ 53.433582][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.442318][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.449385][ T3600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.458646][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.466793][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.502775][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.511614][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.520836][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.528349][ T3602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.536115][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.544975][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.553511][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.560654][ T3602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.568472][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.577121][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.587294][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.594434][ T3602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.602525][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.612587][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.620814][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.629600][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.638031][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.647159][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.659813][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.700328][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.708775][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.751856][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.760754][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.778576][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.789165][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.804606][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.813799][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.822747][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.832260][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.841060][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.856769][ T3560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.870893][ T3552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.885594][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.899346][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.908738][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.917131][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.926556][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.935355][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.944490][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.957160][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.970201][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.988454][ T3560] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.017034][ T3558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.031020][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.048738][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.061325][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.069657][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.078519][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.083232][ T3553] Bluetooth: hci0: command tx timeout [ 54.092856][ T3568] Bluetooth: hci4: command tx timeout [ 54.098331][ T3568] Bluetooth: hci3: command tx timeout [ 54.110607][ T3559] Bluetooth: hci2: command tx timeout [ 54.110668][ T3561] Bluetooth: hci1: command tx timeout [ 54.140499][ T3551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.151309][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.160947][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.171208][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.178344][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.195689][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.204500][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.214696][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.221865][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.229696][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.237287][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.245123][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.270758][ T3557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.286745][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.296902][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.319100][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.326966][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.347520][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.358467][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.378360][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.393183][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.413185][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.441098][ T3560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.460869][ T3560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.478395][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.496025][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.509619][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.520289][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.534917][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.543640][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.572915][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.580629][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.589759][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.598751][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.607120][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.626943][ T3552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.635020][ T3551] device veth0_vlan entered promiscuous mode [ 54.642522][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.650388][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.667267][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.676322][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.725277][ T3551] device veth1_vlan entered promiscuous mode [ 54.747337][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.756291][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.764144][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.775513][ T3558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.805511][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.814740][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.823444][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.833507][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.841374][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.852257][ T3557] device veth0_vlan entered promiscuous mode [ 54.895225][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.909687][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.932931][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.941680][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.959323][ T3551] device veth0_macvtap entered promiscuous mode [ 54.976252][ T3557] device veth1_vlan entered promiscuous mode [ 54.995816][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.007958][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.018541][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.029548][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.056881][ T3560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.067177][ T3551] device veth1_macvtap entered promiscuous mode [ 55.078203][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.090287][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.098743][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.107501][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.116560][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.124818][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.155850][ T3558] device veth0_vlan entered promiscuous mode [ 55.166010][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.175534][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.194380][ T3557] device veth0_macvtap entered promiscuous mode [ 55.217945][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.226436][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.238280][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.247181][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.255660][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.264952][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.272875][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.286021][ T3551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.296118][ T3558] device veth1_vlan entered promiscuous mode [ 55.310094][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.319011][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.328579][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.337500][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.346328][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.355525][ T3560] device veth0_vlan entered promiscuous mode [ 55.375109][ T3557] device veth1_macvtap entered promiscuous mode [ 55.384501][ T3551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.402120][ T3560] device veth1_vlan entered promiscuous mode [ 55.410604][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.419812][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.428735][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.437087][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.446222][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.462556][ T3551] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.471407][ T3551] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.480259][ T3551] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.489272][ T3551] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.512227][ T3552] device veth0_vlan entered promiscuous mode [ 55.532784][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.541134][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.573685][ T3557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.585631][ T3557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.597458][ T3557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.608334][ T3552] device veth1_vlan entered promiscuous mode [ 55.616327][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.625134][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.633268][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.641682][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.650454][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.659240][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.668574][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.677190][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.692894][ T3560] device veth0_macvtap entered promiscuous mode [ 55.711438][ T3557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.723813][ T3557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.736042][ T3557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.744613][ T3558] device veth0_macvtap entered promiscuous mode [ 55.755549][ T3560] device veth1_macvtap entered promiscuous mode [ 55.792522][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.800667][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.814063][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.823521][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.832486][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.842550][ T3557] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.851253][ T3557] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.865859][ T3557] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.874903][ T3557] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.889103][ T3558] device veth1_macvtap entered promiscuous mode [ 55.908133][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.918813][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.930014][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.941122][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.953427][ T3560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.980844][ T3558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.991681][ T3558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.001679][ T3558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.013544][ T3558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.023459][ T3558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.034010][ T3558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.046853][ T3558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.055539][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.064324][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.073461][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.082581][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.091045][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.100171][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.109126][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.122517][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.133332][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.143581][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.154261][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.163041][ T3561] Bluetooth: hci3: command tx timeout [ 56.164860][ T3553] Bluetooth: hci2: command tx timeout [ 56.169442][ T3561] Bluetooth: hci4: command tx timeout [ 56.175962][ T48] Bluetooth: hci1: command tx timeout [ 56.180540][ T3568] Bluetooth: hci0: command tx timeout [ 56.187507][ T3560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.202323][ T3552] device veth0_macvtap entered promiscuous mode [ 56.210087][ T3560] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.219564][ T3560] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.228853][ T3560] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.237933][ T3560] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.254912][ T3558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.265490][ T3558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.275402][ T3558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.286167][ T3558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.296103][ T3558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.306551][ T3558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.317609][ T3558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.336271][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.344899][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.353918][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.363080][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.371541][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.389556][ T3552] device veth1_macvtap entered promiscuous mode [ 56.404899][ T3558] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.414401][ T3558] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.423328][ T3558] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.432982][ T3558] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.509636][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.519374][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.528915][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.528939][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.536858][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.553987][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.568017][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.580209][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.590743][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.601322][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.611597][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.622179][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.633777][ T3552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.651157][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.663572][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.671247][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.680085][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.688646][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.700993][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.711992][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.722563][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.734055][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.744233][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.755033][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.765094][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.775825][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.787517][ T3552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.809575][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.830895][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.842829][ T3552] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.852027][ T3552] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.860935][ T3552] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.869932][ T3552] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.913345][ T2428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.922229][ T2428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.936520][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.947286][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.959785][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.970942][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.993150][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.001297][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.014106][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.092564][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.100900][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.109587][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.166610][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.189150][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.192946][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.213027][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.224732][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.360802][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.395562][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.435328][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.445821][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.448570][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.466112][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.479519][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.485754][ T3639] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 58.243098][ T3561] Bluetooth: hci4: command tx timeout [ 58.248581][ T3561] Bluetooth: hci0: command tx timeout [ 58.255547][ T3568] Bluetooth: hci3: command tx timeout [ 58.260985][ T3568] Bluetooth: hci1: command tx timeout [ 58.266804][ T3559] Bluetooth: hci2: command tx timeout [ 58.593532][ T3603] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.795170][ T3652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 59.003196][ T3603] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 59.055441][ T3603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.171593][ T3652] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6'. [ 59.223818][ T3603] usb 5-1: config 0 descriptor?? [ 59.269595][ T3603] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 60.499811][ T3672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 60.542835][ T3672] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12'. [ 60.680129][ T3681] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.000010][ T3603] usb 5-1: USB disconnect, device number 2 [ 61.108810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 61.171497][ T3685] kvm: emulating exchange as write [ 62.224734][ T3700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 62.769457][ T3700] netlink: 44 bytes leftover after parsing attributes in process `syz.1.20'. [ 63.463578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 63.472251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.481776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 63.490090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 63.498408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 63.506715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 63.515113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 63.523583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 63.531861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 64.862055][ T3717] netlink: 'syz.1.27': attribute type 1 has an invalid length. [ 65.226179][ T3598] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.612171][ T3598] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 65.689030][ T3598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.346635][ T3598] usb 1-1: config 0 descriptor?? [ 66.434320][ T3598] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 66.908170][ T3603] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.932087][ T3603] usb 2-1: Using ep0 maxpacket: 16 [ 68.115987][ T3598] usb 1-1: USB disconnect, device number 2 [ 68.264211][ T3603] usb 2-1: New USB device found, idVendor=0557, idProduct=4000, bcdDevice=53.e0 [ 68.287777][ T3603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.321938][ T3603] usb 2-1: Product: syz [ 68.326110][ T3603] usb 2-1: Manufacturer: syz [ 68.359558][ T3603] usb 2-1: SerialNumber: syz [ 68.399145][ T3603] usb 2-1: config 0 descriptor?? [ 68.739656][ T3603] kaweth 2-1:0.0: Firmware present in device. [ 68.813169][ T3568] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 68.821706][ T3568] Bluetooth: hci4: Injecting HCI hardware error event [ 68.835348][ T3561] Bluetooth: hci4: hardware error 0x00 [ 68.961942][ T3603] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 68.982609][ T3603] kaweth: probe of 2-1:0.0 failed with error -5 [ 69.044518][ T3603] usb 2-1: USB disconnect, device number 2 [ 69.564392][ T3765] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 70.141806][ T153] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 70.401851][ T153] usb 2-1: Using ep0 maxpacket: 32 [ 70.601943][ T153] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.646010][ T153] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 70.711923][ T153] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 70.881997][ T3561] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 70.952230][ T153] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.961366][ T153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.007015][ T153] usb 2-1: Product: syz [ 71.011217][ T153] usb 2-1: Manufacturer: syz [ 71.047828][ T153] usb 2-1: SerialNumber: syz [ 71.113517][ T153] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 71.120391][ T153] cdc_ncm 2-1:1.0: bind() failure [ 71.286138][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.292747][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.382503][ T3777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 71.575707][ T3777] netlink: 44 bytes leftover after parsing attributes in process `syz.0.43'. [ 71.594049][ T3772] loop5: detected capacity change from 0 to 7 [ 71.651349][ T3772] Dev loop5: unable to read RDB block 7 [ 71.807184][ T3772] loop5: unable to read partition table [ 71.954376][ T3772] loop5: partition table beyond EOD, truncated [ 71.960603][ T3772] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 71.960603][ T3772] ) failed (rc=-5) [ 72.191213][ T3771] netlink: 'syz.1.40': attribute type 72 has an invalid length. [ 74.295118][ T3598] usb 2-1: USB disconnect, device number 3 [ 74.947066][ T3798] bond0: (slave erspan0): Error -99 calling set_mac_address [ 75.841848][ T3598] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 76.082063][ T3598] usb 2-1: Using ep0 maxpacket: 16 [ 76.113354][ T3810] netlink: 'syz.3.41': attribute type 1 has an invalid length. [ 76.361931][ T3598] usb 2-1: New USB device found, idVendor=0557, idProduct=4000, bcdDevice=53.e0 [ 76.397212][ T3598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.413940][ T14] cfg80211: failed to load regulatory.db [ 76.437113][ T3598] usb 2-1: Product: syz [ 76.441418][ T3598] usb 2-1: Manufacturer: syz [ 76.487107][ T3598] usb 2-1: SerialNumber: syz [ 76.543053][ T3598] usb 2-1: config 0 descriptor?? [ 76.814998][ T3598] kaweth 2-1:0.0: Firmware present in device. [ 76.992555][ T3824] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 77.021871][ T3598] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 77.042184][ T3598] kaweth: probe of 2-1:0.0 failed with error -5 [ 77.052033][ T14] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.085433][ T3598] usb 2-1: USB disconnect, device number 4 [ 77.412016][ T14] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 77.420667][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.481857][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 77.490876][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.561834][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.882025][ T14] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 77.891106][ T14] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 77.931585][ T14] usb 4-1: Product: syz [ 77.950075][ T14] usb 4-1: Manufacturer: syz [ 78.008460][ T14] cdc_wdm 4-1:1.0: skipping garbage [ 78.021993][ T14] cdc_wdm 4-1:1.0: skipping garbage [ 78.054021][ T14] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 78.090793][ T14] cdc_wdm 4-1:1.0: Unknown control protocol [ 78.276501][ T3821] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 78.326463][ T3598] usb 4-1: USB disconnect, device number 2 [ 78.623507][ T3838] loop4: detected capacity change from 0 to 512 [ 78.715634][ T3838] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.002885][ T3838] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.56: inode #1: comm syz.4.56: iget: illegal inode # [ 79.127476][ T3838] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.56: error while reading EA inode 1 err=-117 [ 79.235029][ T3838] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 79.332095][ T3838] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.56: inode #1: comm syz.4.56: iget: illegal inode # [ 79.567324][ T3838] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.56: error while reading EA inode 1 err=-117 [ 79.692846][ T3848] loop3: detected capacity change from 0 to 512 [ 79.738479][ T3848] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.764686][ T3838] EXT4-fs (loop4): 1 orphan inode deleted [ 79.798407][ T3848] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.60: inode #1: comm syz.3.60: iget: illegal inode # [ 79.813548][ T3848] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.60: error while reading EA inode 1 err=-117 [ 79.866605][ T3848] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.60: inode #1: comm syz.3.60: iget: illegal inode # [ 79.880492][ T3838] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 79.932224][ T3848] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.60: error while reading EA inode 1 err=-117 [ 80.042223][ T3848] EXT4-fs (loop3): 1 orphan inode deleted [ 80.048053][ T3848] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 80.167876][ T3561] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 80.176558][ T3561] Bluetooth: hci2: Injecting HCI hardware error event [ 80.184947][ T3568] Bluetooth: hci2: hardware error 0x00 [ 82.216836][ T3557] EXT4-fs (loop3): unmounting filesystem. [ 82.243825][ T3568] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 82.246420][ T3856] bond0: (slave erspan0): Error -99 calling set_mac_address [ 82.482628][ T3552] EXT4-fs (loop4): unmounting filesystem. [ 82.548695][ T3871] netlink: 'syz.3.63': attribute type 1 has an invalid length. [ 83.222128][ T3571] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.260223][ T3885] loop1: detected capacity change from 0 to 512 [ 83.305277][ T3885] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.386937][ T3885] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.68: inode #1: comm syz.1.68: iget: illegal inode # [ 83.402452][ T3885] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.68: error while reading EA inode 1 err=-117 [ 83.448563][ T3885] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.68: inode #1: comm syz.1.68: iget: illegal inode # [ 83.482327][ T3885] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.68: error while reading EA inode 1 err=-117 [ 83.502222][ T3571] usb 4-1: Using ep0 maxpacket: 16 [ 83.542571][ T3885] EXT4-fs (loop1): 1 orphan inode deleted [ 83.577114][ T3885] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 84.313028][ T3571] usb 4-1: New USB device found, idVendor=0557, idProduct=4000, bcdDevice=53.e0 [ 84.502810][ T3571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.554832][ T3571] usb 4-1: Product: syz [ 84.567178][ T3571] usb 4-1: Manufacturer: syz [ 84.602047][ T3571] usb 4-1: SerialNumber: syz [ 84.621313][ T3571] usb 4-1: config 0 descriptor?? [ 84.743059][ T3560] EXT4-fs (loop1): unmounting filesystem. [ 84.945313][ T3571] kaweth 4-1:0.0: Firmware present in device. [ 85.152025][ T3571] kaweth 4-1:0.0: Error reading configuration (-71), no net device created [ 85.162383][ T3571] kaweth: probe of 4-1:0.0 failed with error -5 [ 85.202237][ T3571] usb 4-1: USB disconnect, device number 3 [ 85.215538][ T3893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 85.284655][ T3892] netlink: 44 bytes leftover after parsing attributes in process `syz.1.69'. [ 85.566583][ T3899] Zero length message leads to an empty skb [ 85.930764][ T3903] loop3: detected capacity change from 0 to 512 [ 85.994847][ T3903] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.332227][ T3903] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.73: inode #1: comm syz.3.73: iget: illegal inode # [ 86.404032][ T3903] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.73: error while reading EA inode 1 err=-117 [ 86.512299][ T3903] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.73: inode #1: comm syz.3.73: iget: illegal inode # [ 86.536212][ T3903] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.73: error while reading EA inode 1 err=-117 [ 86.578553][ T3903] EXT4-fs (loop3): 1 orphan inode deleted [ 86.657625][ T3903] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 86.965253][ T3914] loop1: detected capacity change from 0 to 512 [ 87.036164][ T3914] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.268641][ T3914] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.75: inode #1: comm syz.1.75: iget: illegal inode # [ 87.349642][ T3914] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.75: error while reading EA inode 1 err=-117 [ 87.407476][ T3914] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.75: inode #1: comm syz.1.75: iget: illegal inode # [ 87.466130][ T3568] Bluetooth: hci3: command tx timeout [ 87.467850][ T3914] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.75: error while reading EA inode 1 err=-117 [ 87.571145][ T3914] EXT4-fs (loop1): 1 orphan inode deleted [ 87.595800][ T3557] EXT4-fs (loop3): unmounting filesystem. [ 87.632522][ T3914] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 87.874383][ T3921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 90.298333][ T3942] loop3: detected capacity change from 0 to 512 [ 90.386413][ T3942] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.755450][ T3942] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.82: inode #1: comm syz.3.82: iget: illegal inode # [ 90.835741][ T3942] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.82: error while reading EA inode 1 err=-117 [ 90.960850][ T3942] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.82: inode #1: comm syz.3.82: iget: illegal inode # [ 91.110932][ T3942] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.82: error while reading EA inode 1 err=-117 [ 91.206196][ T3942] EXT4-fs (loop3): 1 orphan inode deleted [ 91.229337][ T3942] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 91.504610][ T3560] EXT4-fs (loop1): unmounting filesystem. [ 91.810653][ T3959] netlink: 'syz.1.83': attribute type 21 has an invalid length. [ 91.899081][ T3959] netlink: 152 bytes leftover after parsing attributes in process `syz.1.83'. [ 92.113585][ T3959] syz.1.83 uses obsolete (PF_INET,SOCK_PACKET) [ 92.233657][ T3957] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.255085][ T3964] loop2: detected capacity change from 0 to 512 [ 92.432967][ T3964] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.945900][ T3568] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.955786][ T3568] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.980425][ T3568] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.988833][ T3568] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.998617][ T3568] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.006543][ T3568] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.035273][ T3964] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.86: inode #1: comm syz.2.86: iget: illegal inode # [ 93.048900][ T3964] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.86: error while reading EA inode 1 err=-117 [ 93.079655][ T3964] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.86: inode #1: comm syz.2.86: iget: illegal inode # [ 93.495166][ T3964] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.86: error while reading EA inode 1 err=-117 [ 93.609253][ T3964] EXT4-fs (loop2): 1 orphan inode deleted [ 93.664520][ T3970] chnl_net:caif_netlink_parms(): no params data found [ 93.673451][ T3964] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 94.849131][ T3558] EXT4-fs (loop2): unmounting filesystem. [ 94.895985][ T3968] loop1: detected capacity change from 0 to 32768 [ 95.035121][ T3970] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.042732][ T3561] Bluetooth: hci5: command tx timeout [ 95.070600][ T3633] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.097772][ T3970] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.141232][ T3970] device bridge_slave_0 entered promiscuous mode [ 95.207107][ T3986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'. [ 95.341262][ T3970] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.362397][ T3970] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.370599][ T3970] device bridge_slave_1 entered promiscuous mode [ 96.116036][ T3970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.136951][ T3557] EXT4-fs (loop3): unmounting filesystem. [ 96.199744][ T3996] loop2: detected capacity change from 0 to 512 [ 96.276672][ T3997] netlink: 'syz.1.93': attribute type 21 has an invalid length. [ 96.313013][ T3996] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.371626][ T3997] netlink: 152 bytes leftover after parsing attributes in process `syz.1.93'. [ 96.514053][ T3996] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.91: inode #1: comm syz.2.91: iget: illegal inode # [ 96.635401][ T3996] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.91: error while reading EA inode 1 err=-117 [ 96.721152][ T3996] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.91: inode #1: comm syz.2.91: iget: illegal inode # [ 96.874759][ T3996] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.91: error while reading EA inode 1 err=-117 [ 96.990345][ T3970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.039757][ T3996] EXT4-fs (loop2): 1 orphan inode deleted [ 97.066984][ T3996] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 97.121998][ T3561] Bluetooth: hci5: command tx timeout [ 98.254707][ T3970] team0: Port device team_slave_0 added [ 98.343476][ T3558] EXT4-fs (loop2): unmounting filesystem. [ 98.438887][ T3970] team0: Port device team_slave_1 added [ 98.724034][ T4007] loop1: detected capacity change from 0 to 32768 [ 98.842369][ T3633] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 98.879959][ T3970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.901798][ T3970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.011870][ T3970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.043800][ T3970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.081332][ T3970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.129093][ T3970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.302975][ T3561] Bluetooth: hci5: command tx timeout [ 100.035602][ T4028] loop1: detected capacity change from 0 to 512 [ 100.100620][ T4028] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.170898][ T4028] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.98: inode #1: comm syz.1.98: iget: illegal inode # [ 100.228246][ T4028] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.98: error while reading EA inode 1 err=-117 [ 100.269066][ T4028] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.98: inode #1: comm syz.1.98: iget: illegal inode # [ 100.362278][ T4028] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.98: error while reading EA inode 1 err=-117 [ 100.403769][ T3970] device hsr_slave_0 entered promiscuous mode [ 100.413034][ T3970] device hsr_slave_1 entered promiscuous mode [ 100.428794][ T4028] EXT4-fs (loop1): 1 orphan inode deleted [ 100.448187][ T3970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.456524][ T4028] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 100.471253][ T3970] Cannot create hsr debugfs directory [ 101.441176][ T3568] Bluetooth: hci5: command tx timeout [ 101.593965][ T3560] EXT4-fs (loop1): unmounting filesystem. [ 101.747088][ T4037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 102.113075][ T4043] loop1: detected capacity change from 0 to 512 [ 102.182135][ T4043] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.229323][ T3970] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.256369][ T4043] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.102: inode #1: comm syz.1.102: iget: illegal inode # [ 102.346057][ T4043] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.102: error while reading EA inode 1 err=-117 [ 102.432269][ T4043] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.102: inode #1: comm syz.1.102: iget: illegal inode # [ 102.472255][ T4043] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.102: error while reading EA inode 1 err=-117 [ 102.502358][ T4043] EXT4-fs (loop1): 1 orphan inode deleted [ 102.508145][ T4043] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 102.620256][ T3970] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.662676][ T3568] Bluetooth: hci5: command tx timeout [ 103.744671][ T3560] EXT4-fs (loop1): unmounting filesystem. [ 103.756459][ T3970] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.762744][ T3970] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.908206][ T4055] netlink: 'syz.0.105': attribute type 21 has an invalid length. [ 104.921972][ T4055] netlink: 152 bytes leftover after parsing attributes in process `syz.0.105'. [ 104.932026][ T4058] netlink: 'syz.1.104': attribute type 21 has an invalid length. [ 104.988528][ T4058] netlink: 152 bytes leftover after parsing attributes in process `syz.1.104'. [ 105.049526][ T4054] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.161340][ T3970] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.190210][ T4071] loop2: detected capacity change from 0 to 512 [ 106.270799][ T3970] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.354775][ T3970] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.392900][ T4071] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.425902][ T3970] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.483807][ T4071] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.106: inode #1: comm syz.2.106: iget: illegal inode # [ 106.612504][ T4071] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.106: error while reading EA inode 1 err=-117 [ 106.712379][ T4071] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.106: inode #1: comm syz.2.106: iget: illegal inode # [ 106.722770][ T4080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'. [ 106.780064][ T3970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.831418][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.846481][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.883233][ T3970] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.890945][ T3568] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.900408][ T3568] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.908749][ T4071] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.106: error while reading EA inode 1 err=-117 [ 106.908819][ T3568] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.936026][ T3568] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.950562][ T3568] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 106.963232][ T3568] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.026336][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.070264][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.134865][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.142099][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.329799][ T4071] EXT4-fs (loop2): 1 orphan inode deleted [ 107.335768][ T4071] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 108.699402][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.746458][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.801167][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.838825][ T3019] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.846052][ T3019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.908004][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.937998][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.980123][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.003837][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.041954][ T3561] Bluetooth: hci1: command tx timeout [ 109.083477][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.091551][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.113973][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.123902][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.132772][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.151709][ T3558] EXT4-fs (loop2): unmounting filesystem. [ 109.161667][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.199642][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.235692][ T3970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.246054][ T4093] netlink: 'syz.1.115': attribute type 1 has an invalid length. [ 109.913557][ T4091] loop0: detected capacity change from 0 to 32768 [ 110.439893][ T4108] loop1: detected capacity change from 0 to 64 [ 110.566716][ T4081] chnl_net:caif_netlink_parms(): no params data found [ 110.977511][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.990419][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.112062][ T3596] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.142357][ T3561] Bluetooth: hci1: command tx timeout [ 111.209222][ T3970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.391879][ T3596] usb 3-1: Using ep0 maxpacket: 16 [ 111.409654][ T4081] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.419716][ T4081] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.474630][ T4081] device bridge_slave_0 entered promiscuous mode [ 111.541988][ T3596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 111.564688][ T4081] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.589007][ T3596] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 111.622617][ T4081] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.647851][ T3596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.668903][ T4081] device bridge_slave_1 entered promiscuous mode [ 111.706243][ T3596] usb 3-1: config 0 descriptor?? [ 111.979656][ T4081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.035376][ T4112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.156859][ T4112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.227791][ T4081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.410184][ T4081] team0: Port device team_slave_0 added [ 112.496970][ T3596] usbhid 3-1:0.0: can't add hid device: -71 [ 112.505005][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.509809][ T4137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 112.529997][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.539607][ T3596] usbhid: probe of 3-1:0.0 failed with error -71 [ 112.565116][ T4081] team0: Port device team_slave_1 added [ 112.583250][ T3596] usb 3-1: USB disconnect, device number 2 [ 112.770592][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.791613][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.816569][ T3561] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 112.829406][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.838076][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.973995][ T4081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.988827][ T4081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.042125][ T4081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.065054][ T3970] device veth0_vlan entered promiscuous mode [ 113.184957][ T4081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.199533][ T4081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.226617][ T3561] Bluetooth: hci1: command tx timeout [ 113.265238][ T4081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.421107][ T3929] syz.3.78 (3929) used greatest stack depth: 19712 bytes left [ 113.454332][ T3970] device veth1_vlan entered promiscuous mode [ 113.761274][ T4081] device hsr_slave_0 entered promiscuous mode [ 113.795488][ T4081] device hsr_slave_1 entered promiscuous mode [ 113.809873][ T4081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.818276][ T4081] Cannot create hsr debugfs directory [ 114.097531][ T3970] device veth0_macvtap entered promiscuous mode [ 114.119668][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.131153][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.152338][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.210835][ T3970] device veth1_macvtap entered promiscuous mode [ 114.227017][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.325793][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.338663][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.348926][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.360375][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.372868][ T4144] loop2: detected capacity change from 0 to 32768 [ 114.377346][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.530671][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.557597][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.569228][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.579198][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.590013][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.610065][ T3970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.645885][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.666659][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.684985][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.707143][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.724033][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.741128][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.762002][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.781683][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.792078][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.818162][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.838081][ T3970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.848626][ T3970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.860020][ T3970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.926128][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.944966][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.987897][ T3970] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.997047][ T3970] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.005855][ T3970] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.014687][ T3970] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.208792][ T4081] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.282374][ T3561] Bluetooth: hci1: command tx timeout [ 115.409194][ T4081] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.518451][ T4081] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.586617][ T3656] device hsr_slave_0 left promiscuous mode [ 115.603064][ T3656] device hsr_slave_1 left promiscuous mode [ 115.617527][ T3656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.631886][ T3656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.650711][ T3656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.668663][ T3656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.685528][ T3656] device bridge_slave_1 left promiscuous mode [ 115.704601][ T3656] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.725963][ T3656] device bridge_slave_0 left promiscuous mode [ 115.734387][ T3656] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.801569][ T3656] device veth1_macvtap left promiscuous mode [ 115.812509][ T3656] device veth0_macvtap left promiscuous mode [ 115.818650][ T3656] device veth1_vlan left promiscuous mode [ 115.842339][ T3656] device veth0_vlan left promiscuous mode [ 116.603307][ T3656] team0 (unregistering): Port device team_slave_1 removed [ 116.663413][ T3656] team0 (unregistering): Port device team_slave_0 removed [ 116.710280][ T3656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.745567][ T3656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.985587][ T3656] bond0 (unregistering): Released all slaves [ 117.082987][ T4081] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.113670][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.137300][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.189521][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.208094][ T4107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.227699][ T4107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.265494][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.434486][ T4081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 117.481322][ T4081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 117.497145][ T4081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 117.521570][ T4081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 117.766571][ T4081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.809918][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.827048][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.864455][ T4081] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.945759][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.985111][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.038385][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.045587][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.294875][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.361110][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.546338][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.622426][ T4126] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.630352][ T4126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.779779][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.802957][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.832732][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.890885][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.942984][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.985351][ T4167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.129'. [ 119.009862][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.057909][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.072686][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.096919][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.115087][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.143335][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.178635][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.428212][ T4160] loop1: detected capacity change from 0 to 32768 [ 119.515742][ T3633] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.924166][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.932502][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.964512][ T4081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.038743][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.078488][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.139543][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.179178][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.313099][ T4081] device veth0_vlan entered promiscuous mode [ 120.331978][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.356741][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.381259][ T4081] device veth1_vlan entered promiscuous mode [ 120.432561][ T3551] syz-executor (3551) used greatest stack depth: 19352 bytes left [ 120.462952][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.472972][ T3568] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.489667][ T3568] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.489688][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.493146][ T4081] device veth0_macvtap entered promiscuous mode [ 120.513838][ T3568] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.525632][ T3568] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.540420][ T3568] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 120.548140][ T3568] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.567610][ T4081] device veth1_macvtap entered promiscuous mode [ 120.605657][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.626523][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.651789][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.662540][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.672452][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.683021][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.692883][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.703449][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.714046][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.725345][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.746596][ T4081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.768913][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.787463][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.795791][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.824891][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.863038][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.883751][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.921984][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.953246][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.984952][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.991309][ T4181] loop4: detected capacity change from 0 to 32768 [ 121.012695][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.043745][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.079860][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.127229][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.188738][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.274917][ T4081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.370591][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.518038][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.529503][ T4081] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.592761][ T4081] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.601604][ T4081] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.691839][ T4081] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.781447][ T4188] netlink: 'syz.1.134': attribute type 1 has an invalid length. [ 122.562148][ T3568] Bluetooth: hci0: command tx timeout [ 122.767623][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 122.793255][ T3655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.818742][ T3655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.879645][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.010533][ T3655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.041524][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.054136][ T3655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.078241][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.117679][ T4182] device bridge_slave_0 entered promiscuous mode [ 123.155191][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.168411][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.176967][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.193861][ T4182] device bridge_slave_1 entered promiscuous mode [ 123.347244][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.382893][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.555994][ T4182] team0: Port device team_slave_0 added [ 123.595295][ T4182] team0: Port device team_slave_1 added [ 123.724930][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.751858][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.866317][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.902017][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.922073][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.171983][ T14] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.390710][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.452116][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 124.572038][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.677915][ T3568] Bluetooth: hci0: command tx timeout [ 124.720591][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 124.764514][ T14] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.948441][ T4182] device hsr_slave_0 entered promiscuous mode [ 125.001463][ T4182] device hsr_slave_1 entered promiscuous mode [ 125.011922][ T14] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.020996][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.038608][ T14] usb 2-1: Product: syz [ 125.048955][ T14] usb 2-1: Manufacturer: syz [ 125.054321][ T3568] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 125.058260][ T14] usb 2-1: SerialNumber: syz [ 125.612773][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.622402][ T4182] Cannot create hsr debugfs directory [ 125.642707][ T14] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 125.649552][ T14] cdc_ncm 2-1:1.0: bind() failure [ 126.002814][ T4220] loop5: detected capacity change from 0 to 7 [ 126.075049][ T4182] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.102357][ T4220] Dev loop5: unable to read RDB block 7 [ 126.107972][ T4220] loop5: unable to read partition table [ 126.125367][ T4220] loop5: partition table beyond EOD, truncated [ 126.131577][ T4220] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 126.131577][ T4220] ) failed (rc=-5) [ 126.339954][ T4236] netlink: 'syz.2.144': attribute type 1 has an invalid length. [ 126.377157][ T4182] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.531307][ T4182] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.742400][ T3568] Bluetooth: hci0: command tx timeout [ 127.735456][ T3598] usb 2-1: USB disconnect, device number 5 [ 127.801695][ T4249] loop2: detected capacity change from 0 to 512 [ 127.809529][ T4249] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.854381][ T4249] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.148: inode #1: comm syz.2.148: iget: illegal inode # [ 127.878799][ T4249] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.148: error while reading EA inode 1 err=-117 [ 127.904228][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 127.964778][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 128.047157][ T4249] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.148: inode #1: comm syz.2.148: iget: illegal inode # [ 128.134178][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 128.181813][ T4249] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.148: error while reading EA inode 1 err=-117 [ 128.204910][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 128.216914][ T4249] EXT4-fs (loop2): 1 orphan inode deleted [ 128.262961][ T4249] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 128.802234][ T3561] Bluetooth: hci0: command tx timeout [ 129.185261][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.083243][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.123013][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.135215][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.173607][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.182990][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.192724][ T3601] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.199866][ T3601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.209160][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.230985][ T3558] EXT4-fs (loop2): unmounting filesystem. [ 130.253808][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.272843][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.308735][ T4124] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.315904][ T4124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.402117][ T3561] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 130.411451][ T3561] Bluetooth: hci3: Injecting HCI hardware error event [ 130.419570][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.419959][ T3561] Bluetooth: hci3: hardware error 0x00 [ 130.443973][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.519811][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.613247][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.669012][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.671668][ T4270] loop2: detected capacity change from 0 to 512 [ 130.713883][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.749257][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 130.822891][ T4270] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.882189][ T3568] Bluetooth: hci0: command tx timeout [ 130.891808][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.904211][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.930069][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 131.116757][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.238303][ T4270] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.152: inode #1: comm syz.2.152: iget: illegal inode # [ 131.322967][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.498824][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.567002][ T4270] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.152: error while reading EA inode 1 err=-117 [ 131.580589][ T4285] netlink: 'syz.1.155': attribute type 1 has an invalid length. [ 131.598454][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 131.625918][ T4270] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.152: inode #1: comm syz.2.152: iget: illegal inode # [ 131.693168][ T4270] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.152: error while reading EA inode 1 err=-117 [ 131.755506][ T4270] EXT4-fs (loop2): 1 orphan inode deleted [ 131.761302][ T4270] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 132.650075][ T3558] EXT4-fs (loop2): unmounting filesystem. [ 132.656294][ T3561] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 132.723321][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.729943][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.408227][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.475538][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.483806][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.563443][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.605177][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.647669][ T4303] loop1: detected capacity change from 0 to 512 [ 133.709664][ T4303] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.722915][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.748278][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.776060][ T4182] device veth0_vlan entered promiscuous mode [ 133.810175][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.811668][ T4303] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.159: inode #1: comm syz.1.159: iget: illegal inode # [ 133.825100][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.841620][ T4182] device veth1_vlan entered promiscuous mode [ 133.973655][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.982024][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 133.993426][ T4303] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.159: error while reading EA inode 1 err=-117 [ 134.010716][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.056297][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.096059][ T4182] device veth0_macvtap entered promiscuous mode [ 134.099647][ T4303] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.159: inode #1: comm syz.1.159: iget: illegal inode # [ 134.127696][ T4182] device veth1_macvtap entered promiscuous mode [ 134.198209][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.212666][ T4303] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.159: error while reading EA inode 1 err=-117 [ 134.239305][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.275710][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.318646][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.428353][ T4303] EXT4-fs (loop1): 1 orphan inode deleted [ 134.434386][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.461869][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.471715][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.472238][ T4303] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 134.501924][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.531880][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.554228][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.581978][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.601857][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.997064][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.332162][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.621791][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.711828][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.745380][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.801844][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.821898][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.842335][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.871782][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.033028][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.216005][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.412115][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.471884][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.542734][ T3560] EXT4-fs (loop1): unmounting filesystem. [ 136.552891][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.560686][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.572697][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.581461][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.625436][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.681480][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.705001][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.735837][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.759271][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.996361][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.033385][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.684935][ T4327] bond0: (slave erspan0): Error -99 calling set_mac_address [ 137.950678][ T4107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.977296][ T4107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.013528][ T3655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.021634][ T3655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.042395][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 138.176028][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 138.404992][ T4338] netlink: 'syz.4.166': attribute type 1 has an invalid length. [ 138.791880][ T155] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.031922][ T155] usb 2-1: Using ep0 maxpacket: 8 [ 139.151947][ T155] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.173205][ T155] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.210874][ T155] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 139.261923][ T155] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 139.272155][ T155] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 139.400035][ T4362] netlink: 'syz.2.173': attribute type 21 has an invalid length. [ 139.471951][ T155] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.481837][ T155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.493654][ T4362] netlink: 152 bytes leftover after parsing attributes in process `syz.2.173'. [ 139.505981][ T155] usb 2-1: Product: syz [ 139.520477][ T155] usb 2-1: Manufacturer: syz [ 139.537577][ T155] usb 2-1: SerialNumber: syz [ 139.652221][ T4362] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.825106][ T4346] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 140.013904][ T4373] bond0: (slave erspan0): Error -99 calling set_mac_address [ 141.161891][ T155] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 141.181973][ T155] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 141.222838][ T155] cdc_ncm 2-1:1.0: bind() failure [ 141.230870][ T155] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 141.289071][ T155] cdc_ncm 2-1:1.1: bind() failure [ 141.331037][ T155] usb 2-1: USB disconnect, device number 6 [ 141.357896][ T4390] loop0: detected capacity change from 0 to 512 [ 141.462869][ T4390] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.562709][ T4390] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.181: inode #1: comm syz.0.181: iget: illegal inode # [ 141.585518][ T4390] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.181: error while reading EA inode 1 err=-117 [ 141.661923][ T4390] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.181: inode #1: comm syz.0.181: iget: illegal inode # [ 141.738716][ T4390] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.181: error while reading EA inode 1 err=-117 [ 141.835965][ T4390] EXT4-fs (loop0): 1 orphan inode deleted [ 141.896034][ T4390] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 142.173548][ T4398] netlink: 'syz.4.182': attribute type 1 has an invalid length. [ 142.482030][ T3561] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 142.490769][ T3561] Bluetooth: hci5: Injecting HCI hardware error event [ 142.499184][ T3568] Bluetooth: hci5: hardware error 0x00 [ 143.913645][ T4425] netlink: 'syz.1.189': attribute type 21 has an invalid length. [ 143.921540][ T4425] netlink: 152 bytes leftover after parsing attributes in process `syz.1.189'. [ 144.812075][ T3568] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 145.088608][ T4438] bond0: (slave erspan0): Error -99 calling set_mac_address [ 145.393951][ T4439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 147.257453][ T4459] bond0: (slave erspan0): Error -99 calling set_mac_address [ 148.374848][ T4461] netlink: 'syz.3.196': attribute type 1 has an invalid length. [ 149.669698][ T4182] EXT4-fs (loop0): unmounting filesystem. [ 150.322369][ T3600] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 150.561920][ T3600] usb 4-1: Using ep0 maxpacket: 8 [ 150.722133][ T3600] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.739269][ T4489] loop4: detected capacity change from 0 to 2048 [ 150.751833][ T3600] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.761618][ T3600] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 150.774991][ T4491] loop0: detected capacity change from 0 to 2048 [ 150.841800][ T3600] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 150.851647][ T3600] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 151.052656][ T4491] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 151.121909][ T3600] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.131079][ T3600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.182583][ T3600] usb 4-1: Product: syz [ 151.201818][ T3600] usb 4-1: Manufacturer: syz [ 151.206462][ T3600] usb 4-1: SerialNumber: syz [ 151.234354][ T4491] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 151.285145][ T4491] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 151.330339][ T4491] EXT4-fs (loop0): This should not happen!! Data will be lost [ 151.330339][ T4491] [ 151.380594][ T4491] EXT4-fs (loop0): Total free blocks count 0 [ 151.439176][ T4491] EXT4-fs (loop0): Free/Dirty block details [ 151.446727][ T4489] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 151.522116][ T4491] EXT4-fs (loop0): free_blocks=2415919104 [ 151.528695][ T4491] EXT4-fs (loop0): dirty_blocks=16 [ 151.607400][ T4491] EXT4-fs (loop0): Block reservation details [ 151.651841][ T4491] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 151.662262][ T4479] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 151.704940][ T4489] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 151.729117][ T4497] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 2 with error 28 [ 151.943325][ T4489] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 152.091960][ T4489] EXT4-fs (loop4): This should not happen!! Data will be lost [ 152.091960][ T4489] [ 152.262339][ T4489] EXT4-fs (loop4): Total free blocks count 0 [ 152.268384][ T4489] EXT4-fs (loop4): Free/Dirty block details [ 152.401928][ T3568] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 152.410524][ T3568] Bluetooth: hci1: Injecting HCI hardware error event [ 152.418853][ T3561] Bluetooth: hci1: hardware error 0x00 [ 152.436004][ T4489] EXT4-fs (loop4): free_blocks=2415919104 [ 152.442912][ T4489] EXT4-fs (loop4): dirty_blocks=16 [ 152.448133][ T4489] EXT4-fs (loop4): Block reservation details [ 152.456264][ T4489] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 152.521942][ T3600] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 152.542018][ T3600] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 152.632138][ T3600] cdc_ncm 4-1:1.0: bind() failure [ 152.640681][ T3600] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 152.711889][ T3600] cdc_ncm 4-1:1.1: bind() failure [ 152.764157][ T3600] usb 4-1: USB disconnect, device number 4 [ 152.954134][ T4509] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 153.497793][ T3970] EXT4-fs (loop4): unmounting filesystem. [ 154.366035][ T3568] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 154.366456][ T4519] netlink: 'syz.3.210': attribute type 1 has an invalid length. [ 154.543912][ T4520] bond0: (slave erspan0): Error -99 calling set_mac_address [ 156.001907][ T3561] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 156.865138][ T4541] loop0: detected capacity change from 0 to 512 [ 156.952725][ T4541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.309992][ T4541] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.216: inode #1: comm syz.0.216: iget: illegal inode # [ 157.511844][ T4541] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.216: error while reading EA inode 1 err=-117 [ 157.632367][ T4541] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.216: inode #1: comm syz.0.216: iget: illegal inode # [ 157.791334][ T4541] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.216: error while reading EA inode 1 err=-117 [ 158.142465][ T4541] EXT4-fs (loop0): 1 orphan inode deleted [ 158.148358][ T4541] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 158.831708][ T3568] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.841203][ T3568] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.850032][ T3568] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.858063][ T3568] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.867054][ T3568] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 158.901974][ T3559] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 159.181893][ T4123] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 159.421938][ T4123] usb 5-1: Using ep0 maxpacket: 32 [ 159.689689][ T4123] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.740777][ T4123] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 159.811934][ T4123] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.879161][ T4562] blktrace: Concurrent blktraces are not allowed on nullb0 [ 160.356344][ T4549] chnl_net:caif_netlink_parms(): no params data found [ 160.382215][ T4123] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.491902][ T4123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.595852][ T4123] usb 5-1: Product: syz [ 160.600070][ T4123] usb 5-1: Manufacturer: syz [ 160.638516][ T4123] usb 5-1: SerialNumber: syz [ 160.733926][ T4123] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 160.740843][ T4123] cdc_ncm 5-1:1.0: bind() failure [ 160.982163][ T3559] Bluetooth: hci2: command tx timeout [ 161.382139][ T4552] loop5: detected capacity change from 0 to 7 [ 161.462654][ T4552] Dev loop5: unable to read RDB block 7 [ 161.468283][ T4552] loop5: unable to read partition table [ 161.585943][ T4549] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.598517][ T4549] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.666872][ T4549] device bridge_slave_0 entered promiscuous mode [ 161.689058][ T4549] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.732051][ T4552] loop5: partition table beyond EOD, truncated [ 161.738266][ T4552] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 161.738266][ T4552] ) failed (rc=-5) [ 161.743701][ T4549] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.830227][ T4549] device bridge_slave_1 entered promiscuous mode [ 162.466558][ T4549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.704464][ T4549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.002497][ T4581] netlink: 'syz.1.224': attribute type 1 has an invalid length. [ 163.041820][ T3559] Bluetooth: hci2: command tx timeout [ 163.092537][ T4549] team0: Port device team_slave_0 added [ 163.284649][ T3649] usb 5-1: USB disconnect, device number 3 [ 163.344037][ T4549] team0: Port device team_slave_1 added [ 164.147620][ T4549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.171805][ T4549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.272975][ T4549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.341287][ T4549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.351853][ T4549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.457159][ T4549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.885629][ T4549] device hsr_slave_0 entered promiscuous mode [ 164.983424][ T4182] EXT4-fs (loop0): unmounting filesystem. [ 164.992272][ T4549] device hsr_slave_1 entered promiscuous mode [ 165.011839][ T4549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.019440][ T4549] Cannot create hsr debugfs directory [ 165.121957][ T3559] Bluetooth: hci2: command tx timeout [ 166.749374][ T4615] netlink: 'syz.3.232': attribute type 21 has an invalid length. [ 167.090834][ T4615] netlink: 152 bytes leftover after parsing attributes in process `syz.3.232'. [ 167.202815][ T3559] Bluetooth: hci2: command tx timeout [ 167.876811][ T4549] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.964521][ T4612] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.041902][ T4126] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 168.131870][ T3596] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 168.227192][ T4549] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.301845][ T4126] usb 2-1: Using ep0 maxpacket: 32 [ 168.372041][ T3596] usb 1-1: Using ep0 maxpacket: 8 [ 168.422130][ T4126] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.456543][ T4126] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 168.502100][ T4126] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.542003][ T3596] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.590916][ T3596] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.651994][ T3596] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 168.687788][ T3596] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 168.728431][ T3596] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 168.771349][ T4631] netlink: 'syz.3.236': attribute type 1 has an invalid length. [ 168.782014][ T4126] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.791091][ T4126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.828752][ T4126] usb 2-1: Product: syz [ 168.830945][ T4549] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.862286][ T4126] usb 2-1: Manufacturer: syz [ 168.866986][ T4126] usb 2-1: SerialNumber: syz [ 168.942292][ T3596] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.942838][ T4126] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 168.970204][ T3596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.001809][ T4126] cdc_ncm 2-1:1.0: bind() failure [ 169.021901][ T3596] usb 1-1: Product: syz [ 169.051813][ T3596] usb 1-1: Manufacturer: syz [ 169.056474][ T3596] usb 1-1: SerialNumber: syz [ 169.295034][ T4637] loop5: detected capacity change from 0 to 7 [ 169.355021][ T4637] Dev loop5: unable to read RDB block 7 [ 169.365173][ T4637] loop5: unable to read partition table [ 169.371092][ T4637] loop5: partition table beyond EOD, truncated [ 169.381183][ T4623] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 169.433221][ T4637] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 169.433221][ T4637] ) failed (rc=-5) [ 169.511961][ T4635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.238'. [ 169.883849][ T4549] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 169.948022][ T4549] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 169.961868][ T3600] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 170.026315][ T4549] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 170.094032][ T4549] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 170.183937][ T3596] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 170.202010][ T3596] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 170.232046][ T3600] usb 4-1: Using ep0 maxpacket: 8 [ 170.262409][ T3596] cdc_ncm 1-1:1.0: bind() failure [ 170.313824][ T3596] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 170.320668][ T3596] cdc_ncm 1-1:1.1: bind() failure [ 170.357640][ T3600] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.379997][ T3596] usb 1-1: USB disconnect, device number 3 [ 170.388652][ T3600] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.433554][ T3600] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 170.448353][ T4646] loop4: detected capacity change from 0 to 2048 [ 170.454924][ T4549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.470564][ T3600] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 170.504000][ T3600] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 170.522520][ T4549] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.564723][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.580443][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.610882][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.627033][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.633325][ T4646] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 170.641019][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.650907][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.689342][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.697837][ T3600] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.720926][ T3600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.736671][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.755818][ T3600] usb 4-1: Product: syz [ 170.760018][ T3600] usb 4-1: Manufacturer: syz [ 170.768032][ T4646] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 170.775343][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.789954][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.820527][ T3600] usb 4-1: SerialNumber: syz [ 170.852828][ T4646] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 170.870909][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.891830][ T4646] EXT4-fs (loop4): This should not happen!! Data will be lost [ 170.891830][ T4646] [ 170.901693][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.920885][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.933366][ T4646] EXT4-fs (loop4): Total free blocks count 0 [ 170.939395][ T4646] EXT4-fs (loop4): Free/Dirty block details [ 170.941301][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.962236][ T4653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'. [ 170.966756][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.993439][ T4646] EXT4-fs (loop4): free_blocks=2415919104 [ 170.999386][ T4646] EXT4-fs (loop4): dirty_blocks=16 [ 171.000361][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.011906][ T4646] EXT4-fs (loop4): Block reservation details [ 171.026120][ T4654] netlink: 44 bytes leftover after parsing attributes in process `syz.1.241'. [ 171.034457][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.041883][ T4646] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 171.077792][ T4549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.102065][ T3596] usb 2-1: USB disconnect, device number 7 [ 171.138438][ T4549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.172372][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.191136][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.210468][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.225827][ T4643] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 171.249184][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.262774][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.288657][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.353484][ T3970] EXT4-fs (loop4): unmounting filesystem. [ 172.792142][ T3600] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 172.812617][ T3600] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 172.851997][ T3600] cdc_ncm 4-1:1.0: bind() failure [ 172.862514][ T3600] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 172.869354][ T3600] cdc_ncm 4-1:1.1: bind() failure [ 172.958577][ T3600] usb 4-1: USB disconnect, device number 5 [ 172.972375][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.980536][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.014376][ T4549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.095743][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.122821][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.173978][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.190455][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.213666][ T4549] device veth0_vlan entered promiscuous mode [ 173.253506][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.261628][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.290631][ T4549] device veth1_vlan entered promiscuous mode [ 173.360713][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 173.379325][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 173.399594][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.429562][ T4683] netlink: 'syz.0.248': attribute type 1 has an invalid length. [ 173.437662][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.470714][ T4549] device veth0_macvtap entered promiscuous mode [ 173.499079][ T4549] device veth1_macvtap entered promiscuous mode [ 173.672532][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.718859][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.766551][ T4670] loop1: detected capacity change from 0 to 32768 [ 173.771231][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.860845][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.881153][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.951472][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.979213][ T4670] XFS (loop1): Mounting V5 Filesystem [ 174.031541][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.512824][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.822043][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.897260][ T4670] XFS (loop1): Ending clean mount [ 174.905917][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.960629][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.983573][ T4670] XFS (loop1): Quotacheck needed: Please wait. [ 175.051412][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.091086][ T4670] XFS (loop1): Quotacheck: Done. [ 175.099459][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.135913][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.179392][ T4549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.216685][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.259426][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.284962][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.297720][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.321802][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.334060][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.350935][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.369439][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.380321][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.393002][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.403396][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.414466][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.429927][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.441000][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.456777][ T4549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.468885][ T3560] XFS (loop1): Unmounting Filesystem [ 175.490871][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.509251][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 175.529781][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 175.570691][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 175.580216][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.609927][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.629515][ T4696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.250'. [ 175.805958][ T4549] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.833713][ T4549] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.851474][ T4549] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.864283][ T4549] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.067901][ T4722] netlink: 'syz.1.253': attribute type 1 has an invalid length. [ 176.144757][ T3600] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 176.169007][ T4722] bond1: (slave gretap1): making interface the new active one [ 176.188367][ T4722] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 177.071829][ T3600] usb 1-1: Using ep0 maxpacket: 8 [ 177.194825][ T3670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.253908][ T3670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.294351][ T4731] netlink: 'syz.4.260': attribute type 1 has an invalid length. [ 177.327375][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.335744][ T3600] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.356069][ T4738] bond0: (slave erspan0): Error -99 calling set_mac_address [ 177.367746][ T3600] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.378204][ T3600] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 177.401919][ T3600] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 177.411613][ T3600] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 177.442000][ T3559] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 177.448833][ T4743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.262'. [ 177.450607][ T3559] Bluetooth: hci0: Injecting HCI hardware error event [ 177.469345][ T3561] Bluetooth: hci0: hardware error 0x00 [ 177.502543][ T4744] netlink: 44 bytes leftover after parsing attributes in process `syz.1.262'. [ 177.543550][ T4107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.551702][ T4107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.592276][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.652695][ T3600] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.682965][ T3600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.716349][ T3600] usb 1-1: Product: syz [ 177.720622][ T3600] usb 1-1: Manufacturer: syz [ 177.745378][ T3600] usb 1-1: SerialNumber: syz [ 177.995670][ T4718] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 178.207685][ T4757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.242636][ T4768] 9pnet_fd: Insufficient options for proto=fd [ 178.702267][ T3600] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 178.732850][ T3600] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 178.759606][ T4777] block device autoloading is deprecated and will be removed. [ 178.774824][ T3600] cdc_ncm 1-1:1.0: bind() failure [ 178.794085][ T3600] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 178.817781][ T3600] cdc_ncm 1-1:1.1: bind() failure [ 178.833616][ T3600] usb 1-1: USB disconnect, device number 4 [ 179.054870][ T4782] netlink: 256 bytes leftover after parsing attributes in process `syz.2.273'. [ 179.203972][ T4784] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 179.499252][ T4794] tmpfs: Unknown parameter 'usrquota' [ 179.522928][ T3561] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 179.542339][ T26] audit: type=1804 audit(1719777206.313:2): pid=4794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.277" name="/root/syzkaller.A2QUDA/20/file1/bus" dev="sda1" ino=1987 res=1 errno=0 [ 180.367764][ T4824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.465802][ T4816] fuse: Invalid group_id [ 180.569720][ T4816] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 180.587347][ T4816] overlayfs: workdir and upperdir must be separate subtrees [ 180.607440][ T4827] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 181.889784][ T4854] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 181.946242][ T4854] binder: 4853:4854 ioctl ae01 0 returned -22 [ 182.825381][ T4878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.060598][ T4882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.222054][ T4920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.541039][ T4931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.701323][ T4935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.768702][ T4935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.823354][ T3655] device hsr_slave_0 left promiscuous mode [ 184.842240][ T3655] device hsr_slave_1 left promiscuous mode [ 184.851325][ T3655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.873598][ T3655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.908254][ T3655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.924976][ T3655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.939653][ T3655] device bridge_slave_1 left promiscuous mode [ 184.945028][ T4939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.949386][ T3655] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.976876][ T3655] device bridge_slave_0 left promiscuous mode [ 184.991197][ T3655] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.991967][ T4939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.083916][ T3655] device veth1_macvtap left promiscuous mode [ 185.091115][ T3655] device veth0_macvtap left promiscuous mode [ 185.105898][ T3655] device veth1_vlan left promiscuous mode [ 185.128809][ T3655] device veth0_vlan left promiscuous mode [ 186.130961][ T3655] team0 (unregistering): Port device team_slave_1 removed [ 186.184535][ T3655] team0 (unregistering): Port device team_slave_0 removed [ 186.217127][ T3559] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.233965][ T3559] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.242131][ T3655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.243623][ T3559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.261916][ T3559] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.269838][ T3559] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 186.277276][ T3559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.318306][ T3655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.599581][ T3655] bond0 (unregistering): Released all slaves [ 186.937637][ T4977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.088631][ T4988] device pim6reg1 entered promiscuous mode [ 187.257870][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.289597][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.298320][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.326826][ T4994] loop4: detected capacity change from 0 to 1024 [ 187.358434][ T4994] EXT4-fs: Ignoring removed orlov option [ 187.424504][ T4994] EXT4-fs: Ignoring removed orlov option [ 187.442298][ T4994] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.522979][ T4994] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 187.646546][ T5003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'. [ 187.813904][ T3970] EXT4-fs (loop4): unmounting filesystem. [ 187.822957][ T4972] chnl_net:caif_netlink_parms(): no params data found [ 188.225204][ T4972] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.261932][ T4972] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.290736][ T4972] device bridge_slave_0 entered promiscuous mode [ 188.332136][ T3561] Bluetooth: hci3: command tx timeout [ 188.349384][ T4972] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.357613][ T4972] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.366412][ T4972] device bridge_slave_1 entered promiscuous mode [ 188.441236][ T4972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.496201][ T4972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.635831][ T4972] team0: Port device team_slave_0 added [ 188.689068][ T4972] team0: Port device team_slave_1 added [ 188.739582][ T5032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.764589][ T5038] loop2: detected capacity change from 0 to 1024 [ 188.828034][ T5038] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 188.923333][ T4972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.943082][ T5038] EXT4-fs (loop2): unmounting filesystem. [ 188.967703][ T4972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.040100][ T4972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.112206][ T4972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.119182][ T4972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.253066][ T4972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.520303][ T4972] device hsr_slave_0 entered promiscuous mode [ 189.562335][ T4972] device hsr_slave_1 entered promiscuous mode [ 189.608693][ T5059] device ip6gretap0 entered promiscuous mode [ 189.664393][ T5059] device batadv_slave_0 entered promiscuous mode [ 189.713696][ T5059] device ip6gretap0 left promiscuous mode [ 189.774584][ T5059] device batadv_slave_0 left promiscuous mode [ 190.141446][ T5074] skb len=10633 headroom=168 headlen=10633 tailroom=5263 [ 190.141446][ T5074] mac=(168,0) net=(168,20) trans=188 [ 190.141446][ T5074] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 190.141446][ T5074] csum(0x350e2a31 ip_summed=3 complete_sw=0 valid=0 level=0) [ 190.141446][ T5074] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 190.174506][ T5074] dev name=veth0 feat=0x000061164fdd19e9 [ 190.180168][ T5074] skb linear: 00000000: 45 0a 29 89 cc b7 00 00 0f 2f 15 55 ac 14 14 18 [ 190.189012][ T5074] skb linear: 00000010: e0 00 00 03 00 00 08 00 bd 0b 29 71 10 82 0c 52 [ 190.197570][ T5074] skb linear: 00000020: 0f 06 ea a4 fd fe 4b 88 94 30 eb b5 29 97 e3 6e [ 190.206224][ T5074] skb linear: 00000030: 03 9b 1c 59 88 25 f8 01 00 e3 c0 63 76 c3 30 76 [ 190.214791][ T5074] skb linear: 00000040: a1 67 d5 14 fa 57 0a 44 02 61 a6 7a 34 a0 76 05 [ 190.223356][ T5074] skb linear: 00000050: c9 3a 19 49 46 bc 62 83 f4 00 00 00 4c 80 00 00 [ 190.231908][ T5074] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 190.240521][ T5074] skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 190.249090][ T5074] skb linear: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 190.257648][ T5074] skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 190.266221][ T5074] skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 190.274781][ T5074] skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 190.283340][ T5074] skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 190.291887][ T5074] skb linear: 000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 190.300400][ T5074] skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 190.308967][ T5074] skb linear: 000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 190.317518][ T5074] skb linear: 00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 190.326083][ T5074] skb linear: 00000110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 190.334636][ T5074] skb linear: 00000120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 190.343386][ T5074] ------------[ cut here ]------------ [ 190.349025][ T5074] offset (10633) >= skb_headlen() (10633) [ 190.355394][ T5074] WARNING: CPU: 0 PID: 5074 at net/core/dev.c:3305 skb_checksum_help+0x626/0x740 [ 190.364609][ T5074] Modules linked in: [ 190.368522][ T5074] CPU: 0 PID: 5074 Comm: syz.2.373 Not tainted 6.1.96-syzkaller #0 [ 190.376482][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 190.386601][ T5074] RIP: 0010:skb_checksum_help+0x626/0x740 [ 190.392391][ T5074] Code: ff df 48 8b 4c 24 18 0f b6 04 01 84 c0 0f 85 cd 00 00 00 48 8b 04 24 2b 18 48 c7 c7 a0 1b e1 8b 44 89 fe 89 da e8 da 2b d2 f8 <0f> 0b bb ea ff ff ff e9 59 fd ff ff e8 b9 2e 0a f9 c6 05 bf 25 df [ 190.412062][ T5074] RSP: 0018:ffffc900035d6ee8 EFLAGS: 00010246 [ 190.418152][ T5074] RAX: 48f502f72a46d200 RBX: 0000000000002989 RCX: 0000000000040000 [ 190.422029][ T3561] Bluetooth: hci3: command tx timeout [ 190.426171][ T5074] RDX: ffffc900109f0000 RSI: 000000000003ffff RDI: 0000000000040000 [ 190.439601][ T5074] RBP: 0000000000002989 R08: ffffffff8152936e R09: fffff520006bad3d [ 190.447651][ T5074] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000002a31 [ 190.455693][ T5074] R13: ffff888026d07cf0 R14: ffff888026d07c80 R15: 0000000000002989 [ 190.463843][ T5074] FS: 00007fdfd0f416c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 190.472835][ T5074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.479708][ T5074] CR2: 000000002000e000 CR3: 000000005abf7000 CR4: 00000000003506f0 [ 190.487763][ T5074] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 190.495807][ T5074] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 190.503881][ T5074] Call Trace: [ 190.507184][ T5074] [ 190.510133][ T5074] ? __warn+0x15a/0x520 [ 190.514366][ T5074] ? skb_checksum_help+0x626/0x740 [ 190.519508][ T5074] ? report_bug+0x2af/0x500 [ 190.524091][ T5074] ? skb_checksum_help+0x626/0x740 [ 190.529232][ T5074] ? handle_bug+0x3d/0x70 [ 190.533630][ T5074] ? exc_invalid_op+0x16/0x40 [ 190.538328][ T5074] ? asm_exc_invalid_op+0x16/0x20 [ 190.543440][ T5074] ? __warn_printk+0x28e/0x350 [ 190.548235][ T5074] ? skb_checksum_help+0x626/0x740 [ 190.553429][ T5074] ? skb_checksum_help+0x626/0x740 [ 190.558568][ T5074] ip_do_fragment+0x209/0x1b20 [ 190.563413][ T5074] ? print_irqtrace_events+0x210/0x210 [ 190.568900][ T5074] ? ip_fragment+0x220/0x220 [ 190.573563][ T5074] ? ip_frag_next+0xb10/0xb10 [ 190.578479][ T5074] ? kmem_cache_free+0x292/0x510 [ 190.583599][ T5074] ? ip_fragment+0x9a/0x220 [ 190.588136][ T5074] __ip_finish_output+0x2bd/0x4b0 [ 190.593284][ T5074] iptunnel_xmit+0x513/0x920 [ 190.597919][ T5074] ip_tunnel_xmit+0x22e4/0x2cc0 [ 190.602863][ T5074] ? tnl_update_pmtu+0x10b0/0x10b0 [ 190.607997][ T5074] ? skb_mac_gso_segment+0x4eb/0x710 [ 190.613364][ T5074] ? validate_xmit_xfrm+0xb4/0x10b0 [ 190.618599][ T5074] ? gre_build_header+0x25b/0x9a0 [ 190.623702][ T5074] ipgre_xmit+0x866/0xc40 [ 190.628067][ T5074] dev_hard_start_xmit+0x261/0x8c0 [ 190.633262][ T5074] __dev_queue_xmit+0x1bb1/0x3cf0 [ 190.638328][ T5074] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 190.643520][ T5074] ? netdev_core_pick_tx+0x320/0x320 [ 190.648838][ T5074] ? virtio_net_hdr_to_skb+0x6db/0x1220 [ 190.654477][ T5074] packet_sendmsg+0x4775/0x61a0 [ 190.659368][ T5074] ? aa_sk_perm+0xa60/0xa60 [ 190.663969][ T5074] ? aa_sk_perm+0x92d/0xa60 [ 190.668499][ T5074] ? tomoyo_socket_bind_permission+0x330/0x330 [ 190.674729][ T5074] ? packet_getsockopt+0xed0/0xed0 [ 190.679885][ T5074] ? __import_iovec+0x316/0x4c0 [ 190.684813][ T5074] ? aa_sock_msg_perm+0x91/0x150 [ 190.689789][ T5074] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 190.695140][ T5074] ? security_socket_sendmsg+0x7d/0xa0 [ 190.700631][ T5074] ? packet_getsockopt+0xed0/0xed0 [ 190.705834][ T5074] ____sys_sendmsg+0x5a5/0x8f0 [ 190.711065][ T5074] ? __sys_sendmsg_sock+0x30/0x30 [ 190.716169][ T5074] __sys_sendmsg+0x2a9/0x390 [ 190.720784][ T5074] ? ____sys_sendmsg+0x8f0/0x8f0 [ 190.725814][ T5074] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 190.731865][ T5074] ? syscall_enter_from_user_mode+0x2e/0x230 [ 190.737867][ T5074] ? lockdep_hardirqs_on+0x94/0x130 [ 190.743130][ T5074] ? syscall_enter_from_user_mode+0x2e/0x230 [ 190.749148][ T5074] do_syscall_64+0x3b/0xb0 [ 190.753644][ T5074] ? clear_bhb_loop+0x45/0xa0 [ 190.758357][ T5074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.764320][ T5074] RIP: 0033:0x7fdfd0175b99 [ 190.768763][ T5074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.788452][ T5074] RSP: 002b:00007fdfd0f41048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.796956][ T5074] RAX: ffffffffffffffda RBX: 00007fdfd0303fa0 RCX: 00007fdfd0175b99 [ 190.804995][ T5074] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 190.813028][ T5074] RBP: 00007fdfd01f677e R08: 0000000000000000 R09: 0000000000000000 [ 190.821019][ T5074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.829095][ T5074] R13: 000000000000000b R14: 00007fdfd0303fa0 R15: 00007ffd0e8f1198 [ 190.837156][ T5074] [ 190.840198][ T5074] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 190.847489][ T5074] CPU: 0 PID: 5074 Comm: syz.2.373 Not tainted 6.1.96-syzkaller #0 [ 190.855396][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 190.865451][ T5074] Call Trace: [ 190.868721][ T5074] [ 190.871645][ T5074] dump_stack_lvl+0x1e3/0x2cb [ 190.876327][ T5074] ? nf_tcp_handle_invalid+0x642/0x642 [ 190.881785][ T5074] ? panic+0x764/0x764 [ 190.885865][ T5074] ? 0xffffffffa0003b40 [ 190.890022][ T5074] ? vscnprintf+0x59/0x80 [ 190.894360][ T5074] panic+0x318/0x764 [ 190.898255][ T5074] ? __warn+0x169/0x520 [ 190.902405][ T5074] ? memcpy_page_flushcache+0xfc/0xfc [ 190.907783][ T5074] __warn+0x348/0x520 [ 190.911758][ T5074] ? skb_checksum_help+0x626/0x740 [ 190.916957][ T5074] report_bug+0x2af/0x500 [ 190.921280][ T5074] ? skb_checksum_help+0x626/0x740 [ 190.926391][ T5074] handle_bug+0x3d/0x70 [ 190.930624][ T5074] exc_invalid_op+0x16/0x40 [ 190.935114][ T5074] asm_exc_invalid_op+0x16/0x20 [ 190.940050][ T5074] RIP: 0010:skb_checksum_help+0x626/0x740 [ 190.945850][ T5074] Code: ff df 48 8b 4c 24 18 0f b6 04 01 84 c0 0f 85 cd 00 00 00 48 8b 04 24 2b 18 48 c7 c7 a0 1b e1 8b 44 89 fe 89 da e8 da 2b d2 f8 <0f> 0b bb ea ff ff ff e9 59 fd ff ff e8 b9 2e 0a f9 c6 05 bf 25 df [ 190.965454][ T5074] RSP: 0018:ffffc900035d6ee8 EFLAGS: 00010246 [ 190.971515][ T5074] RAX: 48f502f72a46d200 RBX: 0000000000002989 RCX: 0000000000040000 [ 190.979478][ T5074] RDX: ffffc900109f0000 RSI: 000000000003ffff RDI: 0000000000040000 [ 190.987438][ T5074] RBP: 0000000000002989 R08: ffffffff8152936e R09: fffff520006bad3d [ 190.995401][ T5074] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000002a31 [ 191.003357][ T5074] R13: ffff888026d07cf0 R14: ffff888026d07c80 R15: 0000000000002989 [ 191.011323][ T5074] ? __warn_printk+0x28e/0x350 [ 191.016086][ T5074] ? skb_checksum_help+0x626/0x740 [ 191.021199][ T5074] ip_do_fragment+0x209/0x1b20 [ 191.025982][ T5074] ? print_irqtrace_events+0x210/0x210 [ 191.031460][ T5074] ? ip_fragment+0x220/0x220 [ 191.036057][ T5074] ? ip_frag_next+0xb10/0xb10 [ 191.040752][ T5074] ? kmem_cache_free+0x292/0x510 [ 191.045697][ T5074] ? ip_fragment+0x9a/0x220 [ 191.050293][ T5074] __ip_finish_output+0x2bd/0x4b0 [ 191.055329][ T5074] iptunnel_xmit+0x513/0x920 [ 191.059930][ T5074] ip_tunnel_xmit+0x22e4/0x2cc0 [ 191.064791][ T5074] ? tnl_update_pmtu+0x10b0/0x10b0 [ 191.069917][ T5074] ? skb_mac_gso_segment+0x4eb/0x710 [ 191.075307][ T5074] ? validate_xmit_xfrm+0xb4/0x10b0 [ 191.080527][ T5074] ? gre_build_header+0x25b/0x9a0 [ 191.085557][ T5074] ipgre_xmit+0x866/0xc40 [ 191.089894][ T5074] dev_hard_start_xmit+0x261/0x8c0 [ 191.095018][ T5074] __dev_queue_xmit+0x1bb1/0x3cf0 [ 191.100046][ T5074] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 191.105157][ T5074] ? netdev_core_pick_tx+0x320/0x320 [ 191.110439][ T5074] ? virtio_net_hdr_to_skb+0x6db/0x1220 [ 191.115999][ T5074] packet_sendmsg+0x4775/0x61a0 [ 191.120940][ T5074] ? aa_sk_perm+0xa60/0xa60 [ 191.125454][ T5074] ? aa_sk_perm+0x92d/0xa60 [ 191.130121][ T5074] ? tomoyo_socket_bind_permission+0x330/0x330 [ 191.136270][ T5074] ? packet_getsockopt+0xed0/0xed0 [ 191.141381][ T5074] ? __import_iovec+0x316/0x4c0 [ 191.146232][ T5074] ? aa_sock_msg_perm+0x91/0x150 [ 191.151168][ T5074] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 191.156445][ T5074] ? security_socket_sendmsg+0x7d/0xa0 [ 191.161892][ T5074] ? packet_getsockopt+0xed0/0xed0 [ 191.167008][ T5074] ____sys_sendmsg+0x5a5/0x8f0 [ 191.171769][ T5074] ? __sys_sendmsg_sock+0x30/0x30 [ 191.176808][ T5074] __sys_sendmsg+0x2a9/0x390 [ 191.181387][ T5074] ? ____sys_sendmsg+0x8f0/0x8f0 [ 191.186334][ T5074] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 191.192532][ T5074] ? syscall_enter_from_user_mode+0x2e/0x230 [ 191.198502][ T5074] ? lockdep_hardirqs_on+0x94/0x130 [ 191.203693][ T5074] ? syscall_enter_from_user_mode+0x2e/0x230 [ 191.209666][ T5074] do_syscall_64+0x3b/0xb0 [ 191.214107][ T5074] ? clear_bhb_loop+0x45/0xa0 [ 191.218797][ T5074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.224785][ T5074] RIP: 0033:0x7fdfd0175b99 [ 191.229199][ T5074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.248821][ T5074] RSP: 002b:00007fdfd0f41048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.257269][ T5074] RAX: ffffffffffffffda RBX: 00007fdfd0303fa0 RCX: 00007fdfd0175b99 [ 191.265272][ T5074] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 191.273236][ T5074] RBP: 00007fdfd01f677e R08: 0000000000000000 R09: 0000000000000000 [ 191.281230][ T5074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.289195][ T5074] R13: 000000000000000b R14: 00007fdfd0303fa0 R15: 00007ffd0e8f1198 [ 191.297433][ T5074] [ 191.300551][ T5074] Kernel Offset: disabled [ 191.304892][ T5074] Rebooting in 86400 seconds..