last executing test programs: 27.18511242s ago: executing program 0 (id=1288): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg(r5, 0x0, 0x44004) 26.141777413s ago: executing program 0 (id=1289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8011}, {0xffffffffffffffff, 0x9}, {0xffffffffffffffff, 0xc200}, {0xffffffffffffffff, 0x401}], 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 4.807533536s ago: executing program 1 (id=1379): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000100), 0x4) 4.717852454s ago: executing program 1 (id=1380): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) syz_open_dev$vim2m(&(0x7f0000000000), 0x101, 0x2) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x7c0573d, 0x4000) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000100)=""/194) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r3, &(0x7f0000000000)={0x10}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/netlink\x00') socket$inet6_dccp(0xa, 0x6, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, 0x0) preadv(r4, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000840)=""/180, 0xb4}], 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) 4.557860376s ago: executing program 1 (id=1381): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000180)=0xfffffffe, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) 4.361903642s ago: executing program 1 (id=1382): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x13f}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x57, 0xa, 0x0, "3258c546dacccfae1e008faa00000000f4ff4000"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000001f00)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRES64], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x90) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c) listen(r2, 0x80080400) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r3, 0x10d, 0xfa, 0x0, &(0x7f0000000240)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000100)={0x1000, 0x5, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x43f7, 0x0, 0x0, 0x7000, 0x0, 0xfffe], 0xfffffffd}}, 0x40000000}) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000600)=0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f00000000c0)=0x1) ppoll(&(0x7f0000000200)=[{r6, 0x42}], 0x1, &(0x7f0000000240), 0x0, 0x0) r7 = dup3(r5, r4, 0x0) socket$packet(0x11, 0x3, 0x300) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x60, 0x3, 0x6, 0x844, r7, 0xb, '\x00', 0x0, r7, 0x2, 0x1, 0x2, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r8}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) 4.037498498s ago: executing program 1 (id=1383): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001140)={0x50, r0, 0x3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x5b}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xf}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) 3.63458277s ago: executing program 1 (id=1385): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xda, 0x35, 0x8e, 0x8, 0x46d, 0x900, 0x669e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0x22, 0xf}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.291509537s ago: executing program 4 (id=1390): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={0x0, 0x12f4}}, 0x0) recvmmsg(r1, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002a00)=""/98, 0x62}], 0x1}}], 0x1, 0x0, 0x0) 3.181882906s ago: executing program 4 (id=1391): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000", @ANYRESDEC], 0xb8}}, 0x0) 3.105854722s ago: executing program 4 (id=1392): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) syz_open_dev$vim2m(&(0x7f0000000000), 0x101, 0x2) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0), 0x7c0573d, 0x4000) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x10}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, 0x0) r2 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) shmdt(r2) 3.056842956s ago: executing program 4 (id=1393): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xb7, 0x93, 0xe3, 0x40, 0xeb1a, 0xe303, 0xfca0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa1, 0x7, 0x8a, 0x0, [], [{{0x9, 0x5, 0x82}}]}}]}}]}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) io_setup(0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, 0x0) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) 2.061889376s ago: executing program 3 (id=1397): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000012c0)={0x2020}, 0x2020) 2.030613278s ago: executing program 3 (id=1398): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) shutdown(r0, 0x0) 1.890344749s ago: executing program 3 (id=1399): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_io_uring_complete(0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fchdir(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0xa1a) userfaultfd(0x80001) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="308a4703e3ffffffffdbb50000e7ffff05004000", @ANYBLOB="000000000a000200aaaaaaaaaa"], 0x30}}, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000003c0)=@get={0x1, &(0x7f0000000300)=""/59, 0xf}) 1.448913594s ago: executing program 0 (id=1306): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) vmsplice(r2, &(0x7f0000000740)=[{&(0x7f0000000cc0)="13", 0x1}, {&(0x7f00000007c0)="b4", 0x1}, {&(0x7f0000000300)="b8", 0x1}, {&(0x7f00000008c0)="ff", 0x1}], 0x4, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) write(r0, 0x0, 0x0) 1.166758347s ago: executing program 4 (id=1402): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x3, &(0x7f0000000040)=[&(0x7f0000a0d000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000a3a000/0x1000)=nil], &(0x7f0000000100)=[0x1], &(0x7f0000000180), 0x0) 1.037614117s ago: executing program 4 (id=1403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000008400000900000000004500002800000000002f9078ac1e00", @ANYRESHEX, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYBLOB="07b3cf71c95581f4b30866758d12a2a21ec31f86f0868ae164baa87babe7503409c2a5f4bf679aa4f60afd32097302a3f8018d39379030cf95e9fc948d3139a6537241d999bffab7f7c47ab89cd758a66c72e85a098643a6ab899bb13a474da31bcc73260c9795ce63205bbbb7c3d9ee0b632508b0c18b147e2ad6c50ebc133338a77ae19cb0d5db9c3a101bb6937ce0a23c850346b6deb31e"], 0x36) clock_gettime(0x0, &(0x7f00000006c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x128, 0x4c, 0x1a, 0x0, 0x73, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@private2, @dev, [], [], 'veth1_macvtap\x00', 'veth0_macvtap\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x5c, 0x16, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xb4}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$packet(0x11, 0x0, 0x300) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xc}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000003340)=ANY=[@ANYBLOB="14"], 0x16e8}, 0x1, 0x0, 0x0, 0x64008005}, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRES32=r5, @ANYBLOB], 0x34}}, 0x0) 1.037372247s ago: executing program 2 (id=1404): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x29, &(0x7f0000000240)={0x0, 0x8209}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 921.874907ms ago: executing program 0 (id=1405): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000180)={0x0, @in, 0x0, 0x0, 0x290}, 0x98) connect$inet(0xffffffffffffffff, 0x0, 0x0) 893.623869ms ago: executing program 3 (id=1406): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f00000003c0)={0x0, 0x4a00}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20100}, 0x0) 773.939019ms ago: executing program 2 (id=1407): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) shutdown(r0, 0x0) 759.734129ms ago: executing program 3 (id=1408): socket$inet6_sctp(0x1c, 0x5, 0x84) socket$inet6_sctp(0x1c, 0x0, 0x84) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x105, 0x0, &(0x7f0000001700)) socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) 678.411506ms ago: executing program 2 (id=1409): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8) socket$inet6_sctp(0x1c, 0x5, 0x84) 601.976732ms ago: executing program 0 (id=1410): socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) 470.378582ms ago: executing program 2 (id=1411): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 384.021259ms ago: executing program 3 (id=1412): mlockall(0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='mqueue\x00', 0x100001b, 0x0) chdir(&(0x7f00000057c0)='./file0\x00') mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 214.002463ms ago: executing program 2 (id=1413): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = dup(r0) r3 = accept4$inet6(r2, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, 0x0, 0x0) 142.191498ms ago: executing program 0 (id=1414): lstat(&(0x7f0000000b40)='./file0/file0/file0\x00', 0x0) 0s ago: executing program 2 (id=1415): pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x120) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB='user.t'], 0x0, 0x38c) kernel console output (not intermixed with test programs): [ T8178] loop2: detected capacity change from 0 to 32768 [ 240.402090][ T25] audit: type=1804 audit(2000000020.940:107): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1036" name="/newroot/5/bus/bus" dev="loop2" ino=7 res=1 errno=0 [ 240.478610][ T25] audit: type=1800 audit(2000000020.940:108): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1036" name="bus" dev="loop2" ino=7 res=0 errno=0 [ 241.170867][ T8205] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 241.320274][ T8212] FAULT_INJECTION: forcing a failure. [ 241.320274][ T8212] name failslab, interval 1, probability 0, space 0, times 0 [ 241.371926][ T8212] CPU: 1 PID: 8212 Comm: syz.2.1047 Not tainted 5.15.164-syzkaller #0 [ 241.380091][ T8212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 241.390142][ T8212] Call Trace: [ 241.393417][ T8212] [ 241.396352][ T8212] dump_stack_lvl+0x1e3/0x2d0 [ 241.401031][ T8212] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 241.406660][ T8212] ? panic+0x860/0x860 [ 241.410728][ T8212] ? __might_sleep+0xc0/0xc0 [ 241.415317][ T8212] ? __rwlock_init+0x40/0x140 [ 241.419989][ T8212] should_fail+0x38a/0x4c0 [ 241.424407][ T8212] should_failslab+0x5/0x20 [ 241.428906][ T8212] slab_pre_alloc_hook+0x53/0xc0 [ 241.433839][ T8212] ? __d_alloc+0x2a/0x700 [ 241.438167][ T8212] kmem_cache_alloc+0x3f/0x280 [ 241.442939][ T8212] __d_alloc+0x2a/0x700 [ 241.447099][ T8212] ? lockdep_softirqs_off+0x420/0x420 [ 241.452473][ T8212] d_alloc_pseudo+0x19/0x70 [ 241.456979][ T8212] alloc_file_pseudo+0x131/0x2f0 [ 241.461913][ T8212] ? prandom_u32+0x218/0x260 [ 241.466487][ T8212] ? alloc_empty_file_noaccount+0x80/0x80 [ 241.472278][ T8212] ? shmem_get_inode+0x8e3/0xad0 [ 241.477204][ T8212] __shmem_file_setup+0x1ca/0x290 [ 241.482201][ T8212] ? shmem_file_setup+0x13/0x30 [ 241.487028][ T8212] __se_sys_memfd_create+0x2bb/0x590 [ 241.492287][ T8212] ? vtime_user_exit+0x2d1/0x400 [ 241.497201][ T8212] ? __x64_sys_memfd_create+0x60/0x60 [ 241.502548][ T8212] ? syscall_enter_from_user_mode+0x2e/0x240 [ 241.508504][ T8212] ? lockdep_hardirqs_on+0x94/0x130 [ 241.513684][ T8212] ? syscall_enter_from_user_mode+0x2e/0x240 [ 241.519656][ T8212] do_syscall_64+0x3b/0xb0 [ 241.524050][ T8212] ? clear_bhb_loop+0x15/0x70 [ 241.528711][ T8212] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 241.534589][ T8212] RIP: 0033:0x7f3f703f13b9 [ 241.538981][ T8212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.558559][ T8212] RSP: 002b:00007f3f6e86fe28 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 241.566949][ T8212] RAX: ffffffffffffffda RBX: 00000000000002aa RCX: 00007f3f703f13b9 [ 241.574903][ T8212] RDX: 00007f3f6e86ff00 RSI: 0000000000000000 RDI: 00007f3f7045f094 [ 241.582851][ T8212] RBP: 00000000200002c0 R08: 00007f3f6e86fbc7 R09: 00007f3f6e86fe50 [ 241.590799][ T8212] R10: 000000000000000a R11: 0000000000000206 R12: 0000000020000280 [ 241.598745][ T8212] R13: 00007f3f6e86ff00 R14: 00007f3f6e86fec0 R15: 0000000020000000 [ 241.606702][ T8212] [ 241.743836][ T8194] loop3: detected capacity change from 0 to 40427 [ 241.867444][ T8194] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 241.895054][ T8194] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 241.929263][ T8194] F2FS-fs (loop3): invalid crc value [ 241.972068][ T8194] F2FS-fs (loop3): Found nat_bits in checkpoint [ 242.033404][ T8231] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 242.235463][ T8194] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 242.267487][ T8194] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 242.277625][ T8233] ufs: Invalid option: "0(eLd9(@ 8L)uH\dKzLVR<%5rƌze ~I2~ [ 242.277625][ T8233] r0Rpyh:Y [ 242.277625][ T8233] O\zY" or missing value [ 242.295969][ T8233] ufs: wrong mount options [ 242.592353][ T8242] loop1: detected capacity change from 0 to 2048 [ 243.069536][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'. [ 243.099230][ T8253] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 243.128222][ T8237] loop4: detected capacity change from 0 to 32768 [ 243.199223][ T25] audit: type=1804 audit(2000000023.740:109): pid=8237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1052" name="/newroot/3/bus/bus" dev="loop4" ino=7 res=1 errno=0 [ 243.376714][ T25] audit: type=1800 audit(2000000023.780:110): pid=8237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1052" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 243.531920][ T8267] loop3: detected capacity change from 0 to 1024 [ 243.632516][ T8267] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.300887][ T8275] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 244.351537][ T8278] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 244.448081][ T8258] loop2: detected capacity change from 0 to 32768 [ 244.526153][ T8258] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1061 (8258) [ 244.546269][ T8267] overlayfs: './file1' not a directory [ 244.548875][ T8280] loop4: detected capacity change from 0 to 512 [ 244.596709][ T8258] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 244.665707][ T8258] BTRFS info (device loop2): using free space tree [ 244.674883][ T8258] BTRFS info (device loop2): has skinny extents [ 244.744553][ T8280] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 244.763582][ T8280] EXT4-fs (loop4): 1 truncate cleaned up [ 244.773537][ T8280] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,noblock_validity,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue. Quota mode: writeback. [ 244.792036][ T8288] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 244.945211][ T8258] BTRFS info (device loop2): enabling ssd optimizations [ 246.250844][ T8323] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 246.443807][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.473133][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.503442][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.523664][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.543891][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.564111][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.586418][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.618436][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.648439][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.663832][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.671624][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.679573][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.687112][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.695446][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.711912][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.725249][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.735338][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.748587][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.748939][ T3609] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 246.759119][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.778757][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.786337][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.802659][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.813739][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.825711][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.836624][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.848514][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.859663][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.867311][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.881776][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.894029][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.905552][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.917732][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.928850][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.933797][ T8325] loop3: detected capacity change from 0 to 32768 [ 246.936329][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.958129][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.967027][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.982401][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.993791][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 246.994167][ T8334] x_tables: unsorted underflow at hook 2 [ 247.006153][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.014766][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.032423][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.050940][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.058475][ T5239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.086469][ T5239] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 247.138817][ T3609] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.170527][ T3609] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.263534][ T8341] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 247.279197][ T3609] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 247.288238][ T3609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 247.314575][ T8344] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 247.319720][ T3609] usb 5-1: SerialNumber: syz [ 247.443008][ T8346] loop2: detected capacity change from 0 to 164 [ 247.540746][ T8346] Unable to read rock-ridge attributes [ 247.579378][ T8346] Unable to read rock-ridge attributes [ 247.721352][ T3609] usb 5-1: 0:2 : does not exist [ 247.730288][ T3609] usb 5-1: unit 5 not found! [ 247.762872][ T3609] usb 5-1: USB disconnect, device number 10 [ 248.006978][ T8334] overlayfs: missing 'lowerdir' [ 248.157472][ T8358] overlayfs: missing 'lowerdir' [ 248.470051][ T8351] loop3: detected capacity change from 0 to 32768 [ 248.589481][ T8351] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1084 (8351) [ 248.673466][ T8351] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 248.712578][ T8351] BTRFS info (device loop3): using free space tree [ 248.727607][ T8351] BTRFS info (device loop3): has skinny extents [ 248.900429][ T8351] BTRFS info (device loop3): enabling ssd optimizations [ 249.274580][ T8363] loop1: detected capacity change from 0 to 40427 [ 249.422828][ T8363] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 249.458976][ T8363] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 249.506096][ T8363] F2FS-fs (loop1): invalid crc value [ 249.536785][ T8363] F2FS-fs (loop1): Found nat_bits in checkpoint [ 249.700159][ T8363] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 249.707208][ T8363] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 249.788899][ T3704] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 250.198910][ T3704] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 250.225673][ T3704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.250522][ T3704] usb 5-1: config 0 descriptor?? [ 250.453787][ T8420] loop3: detected capacity change from 0 to 512 [ 250.539858][ T8426] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 250.549775][ T8424] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 250.619603][ T8420] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 250.679719][ T8420] EXT4-fs (loop3): 1 truncate cleaned up [ 250.692118][ T8420] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,noblock_validity,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue. Quota mode: writeback. [ 250.763262][ T8399] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 250.784703][ T8399] PKCS7: Only support pkcs7_signedData type [ 250.822328][ T8399] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 250.888970][ T3704] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f [ 250.896103][ T3704] hackrf 5-1:0.0: Could not detect board [ 250.921635][ T3704] hackrf: probe of 5-1:0.0 failed with error -71 [ 250.938179][ T3704] usb 5-1: USB disconnect, device number 11 [ 251.052532][ T8441] loop2: detected capacity change from 0 to 4096 [ 251.495866][ T8446] FAULT_INJECTION: forcing a failure. [ 251.495866][ T8446] name failslab, interval 1, probability 0, space 0, times 0 [ 251.589328][ T8446] CPU: 1 PID: 8446 Comm: syz.3.1107 Not tainted 5.15.164-syzkaller #0 [ 251.597496][ T8446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 251.607535][ T8446] Call Trace: [ 251.610806][ T8446] [ 251.613726][ T8446] dump_stack_lvl+0x1e3/0x2d0 [ 251.618398][ T8446] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 251.624020][ T8446] ? panic+0x860/0x860 [ 251.628082][ T8446] ? __might_sleep+0xc0/0xc0 [ 251.632667][ T8446] should_fail+0x38a/0x4c0 [ 251.637079][ T8446] should_failslab+0x5/0x20 [ 251.641578][ T8446] slab_pre_alloc_hook+0x53/0xc0 [ 251.646507][ T8446] ? io_submit_one+0x157/0x18d0 [ 251.651347][ T8446] kmem_cache_alloc+0x3f/0x280 [ 251.656110][ T8446] io_submit_one+0x157/0x18d0 [ 251.660796][ T8446] ? lookup_ioctx+0x620/0x620 [ 251.665471][ T8446] ? __might_fault+0xb8/0x110 [ 251.670151][ T8446] ? __lock_acquire+0x1ff0/0x1ff0 [ 251.675176][ T8446] ? __might_fault+0xb4/0x110 [ 251.679841][ T8446] __se_sys_io_submit+0x17b/0x2f0 [ 251.684849][ T8446] ? __x64_sys_io_submit+0x80/0x80 [ 251.689941][ T8446] ? syscall_enter_from_user_mode+0x2e/0x240 [ 251.695900][ T8446] ? lockdep_hardirqs_on+0x94/0x130 [ 251.701076][ T8446] ? syscall_enter_from_user_mode+0x2e/0x240 [ 251.707034][ T8446] do_syscall_64+0x3b/0xb0 [ 251.711426][ T8446] ? clear_bhb_loop+0x15/0x70 [ 251.716085][ T8446] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 251.721953][ T8446] RIP: 0033:0x7fc5b8fcc3b9 [ 251.726350][ T8446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.745930][ T8446] RSP: 002b:00007fc5b744b048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 251.754321][ T8446] RAX: ffffffffffffffda RBX: 00007fc5b915af80 RCX: 00007fc5b8fcc3b9 [ 251.762272][ T8446] RDX: 0000000020000380 RSI: 0000000000000002 RDI: 00007fc5b741a000 [ 251.770220][ T8446] RBP: 00007fc5b744b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 251.778166][ T8446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.786111][ T8446] R13: 000000000000000b R14: 00007fc5b915af80 R15: 00007ffde7ea4518 [ 251.794069][ T8446] [ 252.072326][ T8457] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1112'. [ 252.114590][ T8457] device bridge1 entered promiscuous mode [ 252.149820][ T8457] loop2: detected capacity change from 0 to 64 [ 252.386746][ T8449] loop1: detected capacity change from 0 to 40427 [ 252.464750][ T8449] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 252.489477][ T8449] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 252.496968][ T8455] loop4: detected capacity change from 0 to 32768 [ 252.540285][ T8449] F2FS-fs (loop1): invalid crc value [ 252.594179][ T8449] F2FS-fs (loop1): Found nat_bits in checkpoint [ 252.612694][ T25] audit: type=1804 audit(2000000033.150:111): pid=8455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1111" name="/newroot/11/bus/bus" dev="loop4" ino=7 res=1 errno=0 [ 252.706952][ T25] audit: type=1800 audit(2000000033.190:112): pid=8455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1111" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 252.800202][ T8449] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 252.808186][ T8449] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 253.323319][ T8492] overlayfs: failed to resolve './file1': -2 [ 253.664906][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1118'. [ 253.778618][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1129'. [ 253.802913][ T8510] overlayfs: failed to resolve './file1': -2 [ 253.902160][ T8509] tmpfs: Unknown parameter 'usrquota' [ 255.201856][ T8528] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1133'. [ 255.459754][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.466464][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.924157][ T8532] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 257.164091][ T8545] loop2: detected capacity change from 0 to 256 [ 257.789194][ T25] audit: type=1804 audit(2000000038.320:113): pid=8553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1141" name="/newroot/30/bus/bus" dev="loop2" ino=1048648 res=1 errno=0 [ 258.625847][ T8566] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1144'. [ 258.657627][ T8543] loop1: detected capacity change from 0 to 40427 [ 258.816975][ T4197] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 258.922705][ T8543] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 258.967542][ T8543] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 259.268629][ T8543] F2FS-fs (loop1): invalid crc value [ 259.536227][ T8543] F2FS-fs (loop1): Found nat_bits in checkpoint [ 259.719971][ T8543] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 259.764396][ T8543] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 259.908930][ T4197] usb 3-1: Using ep0 maxpacket: 16 [ 260.236695][ T4197] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 260.248968][ T4197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.256956][ T4197] usb 3-1: Product: syz [ 260.288188][ T4197] usb 3-1: Manufacturer: syz [ 260.292845][ T4197] usb 3-1: SerialNumber: syz [ 260.319260][ T4197] r8152-cfgselector 3-1: config 0 descriptor?? [ 260.652229][ T8579] syz.1.1147[8579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.652364][ T8579] syz.1.1147[8579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.819075][ T4197] r8152-cfgselector 3-1: Unknown version 0x0000 [ 260.848080][ T8583] overlayfs: failed to resolve './file1': -2 [ 260.854378][ T4197] r8152-cfgselector 3-1: bad CDC descriptors [ 260.918223][ T4197] r8152-cfgselector 3-1: Unknown version 0x0000 [ 260.962330][ T4197] r8152-cfgselector 3-1: USB disconnect, device number 12 [ 261.440484][ T8585] netlink: 'syz.2.1149': attribute type 21 has an invalid length. [ 261.476063][ T8585] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1149'. [ 262.255802][ T8603] loop4: detected capacity change from 0 to 512 [ 262.429546][ T8603] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 262.437013][ T8603] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 262.437013][ T8603] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 262.437013][ T8603] [ 262.455652][ T8603] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 262.910990][ T8603] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 262.919020][ T8603] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842801c, mo2=0002] [ 262.927805][ T8603] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 262.937521][ T8603] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 262.946255][ T8603] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,nomblk_io_submit,noblock_validity,data_err=abort,nouser_xattr,jqfmt=vfsv0,barrier=0x000000000000d95b,debug,,errors=continue. Quota mode: none. [ 263.004367][ T8602] EXT4-fs warning (device loop4): dx_probe:892: inode #2: comm syz.4.1156: dx entry: limit 65535 != root limit 120 [ 263.016919][ T8602] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.1156: Corrupt directory, running e2fsck is recommended [ 263.032487][ T8602] EXT4-fs warning (device loop4): dx_probe:892: inode #2: comm syz.4.1156: dx entry: limit 65535 != root limit 120 [ 263.045054][ T8602] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.1156: Corrupt directory, running e2fsck is recommended [ 263.060387][ T8602] EXT4-fs warning (device loop4): dx_probe:892: inode #2: comm syz.4.1156: dx entry: limit 65535 != root limit 120 [ 263.072506][ T8602] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.1156: Corrupt directory, running e2fsck is recommended [ 263.085620][ T8602] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz.4.1156: path /23/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 263.927004][ T8606] loop2: detected capacity change from 0 to 40427 [ 263.997349][ T8606] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 264.022921][ T8606] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 264.055950][ T8606] F2FS-fs (loop2): invalid crc value [ 264.108505][ T8606] F2FS-fs (loop2): Found nat_bits in checkpoint [ 264.240420][ T8606] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 264.255291][ T8606] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 264.934757][ T8627] loop1: detected capacity change from 0 to 2048 [ 264.973090][ T3843] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.072347][ T8627] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 265.089666][ T8627] System zones: 0-7 [ 265.097965][ T8627] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,debug,,errors=continue. Quota mode: none. [ 265.139235][ T3843] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.249349][ T3843] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.305803][ T8621] chnl_net:caif_netlink_parms(): no params data found [ 265.427052][ T3843] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.620491][ T8621] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.661123][ T8621] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.688607][ T8621] device bridge_slave_0 entered promiscuous mode [ 265.737099][ T8621] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.756503][ T8621] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.767300][ T8621] device bridge_slave_1 entered promiscuous mode [ 265.881105][ T8650] loop4: detected capacity change from 0 to 1024 [ 265.889401][ T8621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.931724][ T8621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.973826][ T8650] EXT4-fs (loop4): Ignoring removed orlov option [ 265.982658][ T8650] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 266.022260][ T8655] serio: Serial port ptm0 [ 266.104873][ T8650] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 266.111059][ T8621] team0: Port device team_slave_0 added [ 266.135042][ T8621] team0: Port device team_slave_1 added [ 266.192777][ T8621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.208769][ T8621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.238779][ T8621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.311485][ T8621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.318623][ T8621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.458847][ T8621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.645476][ T8680] serio: Serial port ptm0 [ 266.754147][ T8621] device hsr_slave_0 entered promiscuous mode [ 266.769806][ T8621] device hsr_slave_1 entered promiscuous mode [ 266.809261][ T8401] Bluetooth: hci6: command 0x0409 tx timeout [ 267.177522][ T8697] loop1: detected capacity change from 0 to 512 [ 267.273638][ T8697] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1180: inode #1: comm syz.1.1180: iget: illegal inode # [ 267.432507][ T8697] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1180: error while reading EA inode 1 err=-117 [ 267.486105][ T8697] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 267.559029][ T8697] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1180: inode #1: comm syz.1.1180: iget: illegal inode # [ 267.596535][ T8697] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1180: error while reading EA inode 1 err=-117 [ 267.629748][ T8697] EXT4-fs (loop1): 1 orphan inode deleted [ 267.640527][ T8697] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 267.875018][ T3843] device hsr_slave_0 left promiscuous mode [ 267.891436][ T3843] device hsr_slave_1 left promiscuous mode [ 267.945942][ T3843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.975889][ T3843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.017809][ T8720] loop4: detected capacity change from 0 to 128 [ 268.029660][ T3843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.037095][ T3843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.076899][ T3843] device bridge_slave_1 left promiscuous mode [ 268.090233][ T3843] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.130266][ T3843] device bridge_slave_0 left promiscuous mode [ 268.147435][ T3843] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.198601][ T3843] device veth1_macvtap left promiscuous mode [ 268.204879][ T3843] device veth0_macvtap left promiscuous mode [ 268.211143][ T3843] device veth1_vlan left promiscuous mode [ 268.217042][ T3843] device veth0_vlan left promiscuous mode [ 268.350807][ T8730] serio: Serial port ptm0 [ 268.443685][ T8728] loop4: detected capacity change from 0 to 8192 [ 268.494402][ T8728] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 268.868582][ T3843] team0 (unregistering): Port device team_slave_1 removed [ 268.889175][ T3613] Bluetooth: hci6: command 0x041b tx timeout [ 268.917694][ T3843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.967862][ T3843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.256616][ T3843] bond0 (unregistering): Released all slaves [ 269.378895][ T8740] loop1: detected capacity change from 0 to 32768 [ 269.454624][ T8740] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1191 (8740) [ 269.498769][ T8621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 269.522687][ T8745] loop2: detected capacity change from 0 to 8192 [ 269.532499][ T8740] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 269.545677][ T8621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 269.584959][ T8740] BTRFS info (device loop1): using free space tree [ 269.594363][ T8621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 269.598890][ T8740] BTRFS info (device loop1): has skinny extents [ 269.655975][ T8621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 269.669518][ T8745] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 269.872486][ T8740] BTRFS info (device loop1): enabling ssd optimizations [ 270.000954][ T25] audit: type=1800 audit(2000000050.540:114): pid=8740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1191" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 270.114343][ T8621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.133252][ T25] audit: type=1804 audit(2000000050.620:115): pid=8740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1191" name="/newroot/77/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 270.139583][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.214375][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.236141][ T8621] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.308408][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.317862][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.349263][ T3708] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.356311][ T3708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.387373][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.415263][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.455797][ T3708] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.462888][ T3708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.501343][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.539838][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.547716][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.569617][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.589733][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.616821][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.644038][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.669455][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.688235][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.714593][ T8621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.753310][ T8621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.007867][ T8797] Bluetooth: hci6: command 0x040f tx timeout [ 271.019229][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.037431][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.057500][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.267185][ T8621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.300355][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.307909][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.390042][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.399481][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.426841][ T8621] device veth0_vlan entered promiscuous mode [ 271.488378][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.501936][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.544225][ T8621] device veth1_vlan entered promiscuous mode [ 271.560438][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.568150][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.631777][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 271.712208][ T8817] input: syz0 as /devices/virtual/input/input10 [ 271.730442][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.739879][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.780357][ T8621] device veth0_macvtap entered promiscuous mode [ 271.820196][ T8621] device veth1_macvtap entered promiscuous mode [ 271.862512][ T8621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.904496][ T8621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.934972][ T8621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.966614][ T8621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.005185][ T8621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.039436][ T8621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.076344][ T8621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.107217][ T8621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.130951][ T8621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.176749][ T8621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.208805][ T8621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.246825][ T8621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.290229][ T8621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.329377][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.337450][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 272.365420][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.396954][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.441158][ T8621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.476538][ T8621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.481696][ T8825] serio: Serial port ptm0 [ 272.510043][ T8621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.548714][ T8621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.571522][ T8621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.644238][ T8621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.678133][ T8621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.718935][ T8621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.749066][ T8621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.776487][ T8832] overlayfs: failed to resolve './file1': -2 [ 272.788933][ T8621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.808722][ T8621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.848934][ T8621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.892097][ T8621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.924042][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.943141][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.985233][ T8621] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.026144][ T8621] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.049301][ T8797] Bluetooth: hci6: command 0x0419 tx timeout [ 273.061666][ T8621] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.110008][ T8621] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.219318][ T7754] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 273.261792][ T7754] FAT-fs (loop4): Filesystem has been set read-only [ 273.430884][ T3844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.460687][ T3844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.538446][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 273.582661][ T8839] loop4: detected capacity change from 0 to 128 [ 273.605274][ T3653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.625059][ T3653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.692064][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 274.696133][ T8851] Cannot find add_set index 0 as target [ 274.924614][ T8853] loop3: detected capacity change from 0 to 1024 [ 274.989735][ T8855] sit0: mtu less than device minimum [ 275.006683][ T8853] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.364376][ T8867] netlink: 'syz.3.1211': attribute type 1 has an invalid length. [ 275.393230][ T8870] overlayfs: failed to get inode (-116) [ 275.406611][ T8870] overlayfs: failed to get inode (-116) [ 275.418120][ T8870] overlayfs: failed to get inode (-116) [ 275.426248][ T8870] overlayfs: failed to get inode (-116) [ 275.505830][ T8875] syz.1.1213 uses obsolete (PF_INET,SOCK_PACKET) [ 276.652491][ T8928] dccp_invalid_packet: P.Data Offset(172) too large [ 276.843100][ T8940] loop3: detected capacity change from 0 to 2048 [ 276.963370][ T8948] loop4: detected capacity change from 0 to 512 [ 276.989157][ T8947] loop1: detected capacity change from 0 to 2048 [ 277.008264][ T8940] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.091715][ T8947] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 277.131331][ T8948] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 277.179163][ T8948] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038 (0x7fffffff) [ 277.204570][ T25] audit: type=1800 audit(2000000057.740:116): pid=8947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1241" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 277.224806][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.289166][ T8957] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 277.506974][ T7512] EXT4-fs error (device loop1): ext4_map_blocks:601: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 277.549948][ T7512] EXT4-fs error (device loop1): __ext4_get_inode_loc:4309: comm syz-executor: Invalid inode table block 4 in block_group 0 [ 277.596151][ T7512] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 277.626459][ T7512] EXT4-fs error (device loop1): ext4_dirty_inode:5993: inode #2: comm syz-executor: mark_inode_dirty error [ 277.701000][ T8799] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 277.849590][ T3843] EXT4-fs error (device loop1): __ext4_get_inode_loc:4309: comm kworker/u4:9: Invalid inode table block 4 in block_group 0 [ 277.889262][ T8799] usb 5-1: device descriptor read/64, error -71 [ 278.186611][ T8799] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 278.378878][ T8799] usb 5-1: device descriptor read/64, error -71 [ 278.390491][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.485667][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.504572][ T8991] loop3: detected capacity change from 0 to 2048 [ 278.539129][ T8799] usb usb5-port1: attempt power cycle [ 278.622988][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.743059][ T8991] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 278.764913][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.820900][ T25] audit: type=1800 audit(2000000059.360:117): pid=8991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1257" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 278.913354][ T8991] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 278.948784][ T8799] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 279.049231][ T8799] usb 5-1: device descriptor read/8, error -71 [ 279.081252][ T8621] EXT4-fs error (device loop3): ext4_map_blocks:601: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 279.186457][ T8621] EXT4-fs error (device loop3): __ext4_get_inode_loc:4309: comm syz-executor: Invalid inode table block 4 in block_group 0 [ 279.228994][ T8621] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 279.243091][ T8988] loop2: detected capacity change from 0 to 40427 [ 279.309013][ T8621] EXT4-fs error (device loop3): ext4_dirty_inode:5993: inode #2: comm syz-executor: mark_inode_dirty error [ 279.320757][ T8799] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 279.351697][ T8988] F2FS-fs (loop2): Invalid log sectorsize (2) [ 279.357832][ T8988] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 279.410505][ T8988] F2FS-fs (loop2): Found nat_bits in checkpoint [ 279.418933][ T8799] usb 5-1: device descriptor read/8, error -71 [ 279.429720][ T144] EXT4-fs error (device loop3): __ext4_get_inode_loc:4309: comm kworker/u4:1: Invalid inode table block 4 in block_group 0 [ 279.447493][ T8992] chnl_net:caif_netlink_parms(): no params data found [ 279.510666][ T8988] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 279.517817][ T8988] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 279.559100][ T8799] usb usb5-port1: unable to enumerate USB device [ 279.645139][ T9016] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 279.660594][ T9016] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 279.766663][ T8992] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.789992][ T144] attempt to access beyond end of device [ 279.789992][ T144] loop2: rw=2049, want=40992, limit=40427 [ 279.801545][ T8992] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.818411][ T9016] overlayfs: cleanup of 'work/#21' failed (-5) [ 279.835781][ T8992] device bridge_slave_0 entered promiscuous mode [ 279.843256][ T9016] overlayfs: cleanup of 'work/#22' failed (-5) [ 279.858920][ T9016] overlayfs: failed to set xattr on upper [ 279.897920][ T7885] attempt to access beyond end of device [ 279.897920][ T7885] loop2: rw=524288, want=45072, limit=40427 [ 279.913078][ T8992] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.920648][ T7885] attempt to access beyond end of device [ 279.920648][ T7885] loop2: rw=0, want=45072, limit=40427 [ 279.938773][ T8992] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.949085][ T8992] device bridge_slave_1 entered promiscuous mode [ 280.090369][ T8992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.109798][ T7754] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /44/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 280.115870][ T8992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.320160][ T8992] team0: Port device team_slave_0 added [ 280.327973][ T8992] team0: Port device team_slave_1 added [ 280.445538][ T8992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.469730][ T8992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.495613][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.503494][ T8992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.529719][ T8992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.537135][ T8992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.563748][ T8992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.739238][ T4197] Bluetooth: hci2: command 0x0409 tx timeout [ 280.781616][ T8992] device hsr_slave_0 entered promiscuous mode [ 280.798861][ T8992] device hsr_slave_1 entered promiscuous mode [ 280.808419][ T8992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.828654][ T8992] Cannot create hsr debugfs directory [ 281.033691][ T9047] binder: 9046:9047 ioctl 40046205 0 returned -22 [ 281.350725][ T154] device hsr_slave_0 left promiscuous mode [ 281.404217][ T154] device hsr_slave_1 left promiscuous mode [ 281.424318][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.458763][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.479390][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.487001][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.559382][ T154] device bridge_slave_1 left promiscuous mode [ 281.565576][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.598616][ T154] device bridge_slave_0 left promiscuous mode [ 281.639221][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.671531][ T154] device veth1_macvtap left promiscuous mode [ 281.677704][ T154] device veth0_macvtap left promiscuous mode [ 281.708925][ T154] device veth1_vlan left promiscuous mode [ 281.715513][ T154] device veth0_vlan left promiscuous mode [ 282.182045][ T154] team0 (unregistering): Port device team_slave_1 removed [ 282.209720][ T154] team0 (unregistering): Port device team_slave_0 removed [ 282.223709][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.254829][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.398967][ T154] bond0 (unregistering): Released all slaves [ 282.649128][ T4197] Bluetooth: hci1: command 0x0409 tx timeout [ 282.819070][ T4197] Bluetooth: hci2: command 0x041b tx timeout [ 282.865301][ T9033] chnl_net:caif_netlink_parms(): no params data found [ 283.205040][ T8992] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 283.242653][ T9055] chnl_net:caif_netlink_parms(): no params data found [ 283.268470][ T9033] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.276168][ T9033] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.302507][ T9033] device bridge_slave_0 entered promiscuous mode [ 283.329854][ T8992] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 283.354765][ T9033] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.379246][ T9033] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.387234][ T9033] device bridge_slave_1 entered promiscuous mode [ 283.413527][ T8992] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 283.521655][ T8992] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 283.619088][ T4197] Bluetooth: hci5: command 0x0409 tx timeout [ 283.642035][ T9033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.701606][ T9033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.905537][ T9033] team0: Port device team_slave_0 added [ 283.927827][ T9055] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.938895][ T9055] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.946843][ T9055] device bridge_slave_0 entered promiscuous mode [ 284.013203][ T9033] team0: Port device team_slave_1 added [ 284.020466][ T9055] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.035327][ T9055] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.054870][ T9055] device bridge_slave_1 entered promiscuous mode [ 284.197156][ T9033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.221312][ T9033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.275879][ T9033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.331327][ T9055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.345017][ T9033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.358725][ T9033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.434205][ T9033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.473787][ T8992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.490724][ T9055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.614415][ T8992] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.663908][ T9033] device hsr_slave_0 entered promiscuous mode [ 284.699215][ T9033] device hsr_slave_1 entered promiscuous mode [ 284.714587][ T9033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.728862][ T8797] Bluetooth: hci1: command 0x041b tx timeout [ 284.731485][ T9033] Cannot create hsr debugfs directory [ 284.748086][ T9055] team0: Port device team_slave_0 added [ 284.760746][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.769712][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.804478][ T9055] team0: Port device team_slave_1 added [ 284.812493][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.822413][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.831247][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.838298][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.846283][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.869366][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.877721][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.884805][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.913295][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 284.922280][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 284.949254][ T5236] Bluetooth: hci2: command 0x040f tx timeout [ 285.002774][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.019831][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.038401][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.070293][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.081678][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.098636][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 285.110017][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.156984][ T8992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.179062][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 285.187169][ T9055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.206056][ T9055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.272823][ T9055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.293998][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 285.311157][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 285.327864][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.346439][ T9055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.369594][ T9055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.467057][ T9055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.684242][ T9033] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.699051][ T3614] Bluetooth: hci5: command 0x041b tx timeout [ 285.772604][ T9055] device hsr_slave_0 entered promiscuous mode [ 285.799749][ T9055] device hsr_slave_1 entered promiscuous mode [ 285.818824][ T9055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.838846][ T9055] Cannot create hsr debugfs directory [ 285.849590][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 285.857007][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 285.933405][ T9033] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.001455][ T8992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.172074][ T9033] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.228899][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 286.250981][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 286.297808][ T9033] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.376818][ T8992] device veth0_vlan entered promiscuous mode [ 286.422575][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.451667][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 286.481928][ T8992] device veth1_vlan entered promiscuous mode [ 286.501527][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.510197][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.529339][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 286.573755][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 286.599501][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.619248][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.643835][ T8992] device veth0_macvtap entered promiscuous mode [ 286.700510][ T8992] device veth1_macvtap entered promiscuous mode [ 286.755130][ T9055] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.783829][ T9033] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 286.808366][ T9033] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 286.821456][ T4197] Bluetooth: hci1: command 0x040f tx timeout [ 286.866843][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.889329][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.908897][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.928888][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.958734][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.979091][ T5235] Bluetooth: hci2: command 0x0419 tx timeout [ 286.979310][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.008859][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.037082][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.058847][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.078735][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.088545][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.120421][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.144285][ T8992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.174329][ T9055] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.189187][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 287.197208][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 287.217028][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.235538][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.256716][ T9033] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 287.329967][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.366776][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.398906][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.428959][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.459131][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.478910][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.498823][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.518806][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.528605][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.548813][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.559200][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.579398][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.592300][ T8992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.615722][ T8992] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.629623][ T8992] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.648473][ T8992] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.667905][ T8992] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.695077][ T9033] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 287.737324][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 287.757030][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.769166][ T3611] Bluetooth: hci5: command 0x040f tx timeout [ 287.794106][ T9055] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.010708][ T9055] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.216364][ T3844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.243797][ T3844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.253009][ T3843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.274373][ T3843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.286757][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 288.368204][ T9033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.399845][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 288.422552][ T9055] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 288.457267][ T9033] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.551816][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.560781][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.579928][ T9055] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 288.591129][ T9055] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 288.611779][ T9055] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 288.701690][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.728664][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.737432][ T3609] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.744532][ T3609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.806753][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 288.815079][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 288.839203][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.847646][ T8799] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.854740][ T8799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.889098][ T3611] Bluetooth: hci1: command 0x0419 tx timeout [ 288.995911][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.019762][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.028407][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.068471][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.101900][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.125504][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 289.139523][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 289.249301][ T9033] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 289.287595][ T9033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.317709][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.326807][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.356582][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 289.372047][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.507112][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 289.565934][ T9055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.605044][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.620244][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.646799][ T9055] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.685216][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.699952][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.721586][ T3611] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.728673][ T3611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.750350][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.778983][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.790945][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.811581][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.818661][ T5236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.826841][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.836135][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.866488][ T9033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.880554][ T4197] Bluetooth: hci5: command 0x0419 tx timeout [ 289.897967][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 289.910178][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 289.927380][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.948767][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.958449][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 289.974834][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.023441][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 290.037050][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 290.056043][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.083516][ T9055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.113403][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 290.163919][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 290.269012][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.359540][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 290.368122][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.448357][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 290.477974][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.593734][ T9169] syz.1.1284[9169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.593820][ T9169] syz.1.1284[9169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.685450][ T9033] device veth0_vlan entered promiscuous mode [ 290.780866][ T9174] loop1: detected capacity change from 0 to 128 [ 290.791586][ T9174] EXT4-fs (loop1): Test dummy encryption mode enabled [ 290.810699][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.818475][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.849642][ T9174] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 290.889391][ T9174] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038 (0x7fffffff) [ 290.988443][ T9033] device veth1_vlan entered promiscuous mode [ 291.124921][ T9033] device veth0_macvtap entered promiscuous mode [ 291.159554][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 291.167560][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 291.428116][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 291.449648][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 291.549387][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 291.720643][ T9033] device veth1_macvtap entered promiscuous mode [ 291.864530][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 291.898519][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 292.076248][ T9055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.118439][ T154] device hsr_slave_0 left promiscuous mode [ 292.186782][ T154] device hsr_slave_1 left promiscuous mode [ 292.210483][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.217879][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.260241][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.267885][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.296363][ T154] device bridge_slave_1 left promiscuous mode [ 292.328030][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.358006][ T154] device bridge_slave_0 left promiscuous mode [ 292.383411][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.429633][ T154] device hsr_slave_0 left promiscuous mode [ 292.460025][ T154] device hsr_slave_1 left promiscuous mode [ 292.479774][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.487185][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.703988][ T1523] Bluetooth: hci3: Frame reassembly failed (-84) [ 292.788524][ T8799] Bluetooth: hci6: command 0x0409 tx timeout [ 292.897485][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.938842][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.959472][ T154] device bridge_slave_1 left promiscuous mode [ 292.965631][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.991117][ T154] device bridge_slave_0 left promiscuous mode [ 292.997276][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.027863][ T154] device veth1_macvtap left promiscuous mode [ 293.049834][ T154] device veth0_macvtap left promiscuous mode [ 293.055906][ T154] device veth1_vlan left promiscuous mode [ 293.064074][ T154] device veth0_vlan left promiscuous mode [ 293.080416][ T154] device veth1_macvtap left promiscuous mode [ 293.086683][ T154] device veth0_macvtap left promiscuous mode [ 293.098820][ T154] device veth1_vlan left promiscuous mode [ 293.104613][ T154] device veth0_vlan left promiscuous mode [ 293.804618][ T154] team0 (unregistering): Port device team_slave_1 removed [ 293.871186][ T9194] loop1: detected capacity change from 0 to 16 [ 293.897527][ T154] team0 (unregistering): Port device team_slave_0 removed [ 293.901490][ T9194] erofs: (device loop1): mounted with root inode @ nid 36. [ 293.925181][ T9194] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 293.937089][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.942738][ T9194] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 293.985136][ T9194] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 293.993782][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.119522][ T154] bond0 (unregistering): Released all slaves [ 294.446063][ T9198] overlayfs: failed to resolve './file1': -2 [ 294.473228][ T9198] netlink: 'syz.1.1291': attribute type 32 has an invalid length. [ 294.728921][ T8797] Bluetooth: hci3: command 0x1003 tx timeout [ 294.736070][ T3579] Bluetooth: hci3: sending frame failed (-49) [ 294.808832][ T8797] Bluetooth: hci6: command 0x041b tx timeout [ 295.072704][ T154] team0 (unregistering): Port device team_slave_1 removed [ 295.092306][ T9200] loop1: detected capacity change from 0 to 512 [ 295.099254][ T154] team0 (unregistering): Port device team_slave_0 removed [ 295.113437][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.133619][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.210558][ T9200] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 295.233716][ T9200] ext4 filesystem being mounted at /10/bus supports timestamps until 2038 (0x7fffffff) [ 295.283881][ T154] bond0 (unregistering): Released all slaves [ 295.464605][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.489271][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.518299][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.558497][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.588430][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.629279][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.659676][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.689003][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.718498][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.738729][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.760176][ T9033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.813771][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.825771][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.838221][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.851548][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.866716][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.877643][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.887895][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.898849][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.908645][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.928280][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.948413][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.968723][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.000154][ T9033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.045145][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 296.054671][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 296.078605][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.104731][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.117676][ T9033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.129966][ T9033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.141454][ T9033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.158561][ T9033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.172357][ T9170] chnl_net:caif_netlink_parms(): no params data found [ 296.416602][ T9055] device veth0_vlan entered promiscuous mode [ 296.439621][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.447827][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.504903][ T9055] device veth1_vlan entered promiscuous mode [ 296.530984][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.549177][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.556909][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 296.612961][ T1523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.629113][ T1523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.654263][ T9170] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.672681][ T9170] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.689717][ T9170] device bridge_slave_0 entered promiscuous mode [ 296.711428][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 296.737186][ T9055] device veth0_macvtap entered promiscuous mode [ 296.743911][ T1523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.765624][ T1523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.774961][ T9170] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.788756][ T9170] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.796726][ T9170] device bridge_slave_1 entered promiscuous mode [ 296.808891][ T3609] Bluetooth: hci3: command 0x1001 tx timeout [ 296.815089][ T3579] Bluetooth: hci3: sending frame failed (-49) [ 296.850739][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 296.868922][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 296.877828][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 296.900969][ T9055] device veth1_macvtap entered promiscuous mode [ 296.913068][ T3609] Bluetooth: hci6: command 0x040f tx timeout [ 296.927072][ T9208] loop1: detected capacity change from 0 to 40427 [ 296.941844][ T9170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.979500][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 296.991378][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 297.027136][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.058882][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.079089][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.108801][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.128890][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.149387][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.168835][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.188800][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.209194][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.228856][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.248893][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.278763][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.300283][ T9055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.311716][ T9170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.346507][ T9208] F2FS-fs (loop1): invalid crc value [ 297.352641][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.385353][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.406069][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.423117][ T9208] F2FS-fs (loop1): Found nat_bits in checkpoint [ 297.426856][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.468859][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.498967][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.513120][ T9208] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 297.520289][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.548264][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.558498][ T9208] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 297.569851][ T9215] loop3: detected capacity change from 0 to 40427 [ 297.577257][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.599275][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.610360][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.621189][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.638952][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.659729][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.692036][ T9055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.768043][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 297.777527][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 297.788572][ T9215] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 297.807894][ T9215] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 298.029860][ T9221] overlayfs: failed to resolve './file0': -2 [ 298.255363][ T9055] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.266913][ T9055] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.275741][ T9055] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.304482][ T9055] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.349939][ T8992] attempt to access beyond end of device [ 298.349939][ T8992] loop1: rw=2049, want=45112, limit=40427 [ 298.357159][ T9215] F2FS-fs (loop3): Found nat_bits in checkpoint [ 298.366013][ T9170] team0: Port device team_slave_0 added [ 298.397363][ T9170] team0: Port device team_slave_1 added [ 298.457134][ T9215] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 298.464443][ T9215] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 298.532615][ T9170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.548787][ T9170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.632950][ T9170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.787311][ T9170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.799252][ T9170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.826340][ T9226] syz.3.1294[9226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 298.826428][ T9226] syz.3.1294[9226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 298.888895][ T3609] Bluetooth: hci3: command 0x1009 tx timeout [ 298.898702][ T9170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.969806][ T8799] Bluetooth: hci6: command 0x0419 tx timeout [ 299.086253][ T9228] loop1: detected capacity change from 0 to 128 [ 299.101955][ T9170] device hsr_slave_0 entered promiscuous mode [ 299.112747][ T9170] device hsr_slave_1 entered promiscuous mode [ 299.149938][ T9228] FAT-fs (loop1): Unrecognized mount option "errors=contGaG/M6inue" or missing value [ 299.219402][ T452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.227910][ T452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.359428][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 299.379629][ T452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.399049][ T452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.441512][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 299.527015][ T9170] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.589128][ T3610] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 299.670347][ T9170] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.804565][ T9170] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.932792][ T9235] device syzkaller0 entered promiscuous mode [ 299.993301][ T9170] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.009437][ T3610] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.026588][ T3610] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.139103][ T3610] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 300.158982][ T3610] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 300.166998][ T3610] usb 2-1: SerialNumber: syz [ 300.352518][ T9170] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 300.430842][ T9170] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 300.441371][ T3610] usb 2-1: 0:2 : does not exist [ 300.472502][ T9170] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 300.508895][ T9170] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 300.590200][ T9245] loop2: detected capacity change from 0 to 256 [ 300.786064][ T9055] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 300.795056][ T9170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.835329][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 300.843839][ T9055] FAT-fs (loop2): Filesystem has been set read-only [ 300.844152][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.879154][ T9055] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 300.895471][ T9170] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.907637][ T5235] usb 2-1: USB disconnect, device number 15 [ 300.969878][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.982263][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.991319][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.998389][ T3610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.006472][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 301.015287][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.024157][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.031240][ T3610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.081066][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 301.089554][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 301.098109][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 301.127335][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 301.149452][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 301.168080][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 301.188467][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 301.280346][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 301.288154][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 301.307975][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 301.343716][ T9170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.379518][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 301.410852][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 301.436020][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 301.789181][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.796635][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.841376][ T9170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.671398][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 302.690445][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 302.731555][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 302.783104][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.804246][ T9170] device veth0_vlan entered promiscuous mode [ 302.895278][ T9170] device veth1_vlan entered promiscuous mode [ 302.969073][ T8797] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 302.996886][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 303.009428][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 303.031237][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 303.108946][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 303.132856][ T9170] device veth0_macvtap entered promiscuous mode [ 303.164516][ T9263] chnl_net:caif_netlink_parms(): no params data found [ 303.190339][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 303.209736][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.219339][ T8797] usb 4-1: Using ep0 maxpacket: 16 [ 303.226909][ T9170] device veth1_macvtap entered promiscuous mode [ 303.264242][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 303.279430][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 303.338954][ T8797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.378855][ T8797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.388666][ T8797] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.431900][ T8797] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 303.446785][ T8797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.473617][ T8797] usb 4-1: config 0 descriptor?? [ 303.551229][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.592216][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.622640][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.664254][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.705451][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.734516][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.754605][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.798719][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.828731][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.868810][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.888560][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.908754][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.924206][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.937140][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.949456][ T9170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.979479][ T9280] ptrace attach of "./syz-executor exec"[9033] was attempted by "./syz-executor exec"[9280] [ 303.991568][ T9263] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.010465][ T9263] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.028291][ T9263] device bridge_slave_0 entered promiscuous mode [ 304.053273][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 304.065068][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 304.079964][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.092809][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.103067][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.114571][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.125862][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.136744][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.147277][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.158387][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.168945][ T3708] Bluetooth: hci5: command 0x0409 tx timeout [ 304.169113][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.186255][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.196372][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.207398][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.217571][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.229861][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.268585][ T9170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.294431][ T9170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.317824][ T9285] loop1: detected capacity change from 0 to 512 [ 304.329880][ T9170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.346055][ T9170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.355146][ T9170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.366619][ T9263] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.374273][ T9263] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.384024][ T9263] device bridge_slave_1 entered promiscuous mode [ 304.430000][ T9285] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 304.430000][ T9285] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 304.430000][ T9285] [ 304.454076][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 304.492734][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 304.542168][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.564916][ T9285] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 304.596901][ T9285] EXT4-fs (loop1): 1 truncate cleaned up [ 304.618838][ T9285] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,sb=0x7fffffffffffffff,noload,nombcache,usrjquota="init_itable=0x0000000800000601,noacl,data_err=abort,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 304.771685][ T3843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.804646][ T3843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.819329][ T3610] Bluetooth: hci7: command 0x0409 tx timeout [ 304.822519][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 304.836498][ T9263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.911160][ T9291] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 305.168754][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.219370][ T9274] chnl_net:caif_netlink_parms(): no params data found [ 305.237415][ T9263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.283701][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.346859][ T3653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.369968][ T3653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.463788][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.530432][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 305.612797][ T9263] team0: Port device team_slave_0 added [ 305.628222][ T9263] team0: Port device team_slave_1 added [ 305.639934][ T8797] usbhid 4-1:0.0: can't add hid device: -71 [ 305.656397][ T8797] usbhid: probe of 4-1:0.0 failed with error -71 [ 305.727358][ T8797] usb 4-1: USB disconnect, device number 7 [ 305.919012][ T8799] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 305.930704][ T9274] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.937766][ T9274] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.960516][ T9274] device bridge_slave_0 entered promiscuous mode [ 305.996199][ T9263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.022008][ T9263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.099691][ T9263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.131585][ T9274] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.138635][ T9274] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.168936][ T8799] usb 5-1: Using ep0 maxpacket: 8 [ 306.170036][ T9274] device bridge_slave_1 entered promiscuous mode [ 306.221177][ T9263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.228118][ T9263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.249113][ T1291] Bluetooth: hci5: command 0x041b tx timeout [ 306.296683][ T9263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.307822][ T8799] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 306.319201][ T8799] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 306.336314][ T8799] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 306.345731][ T8799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.407062][ T9274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.500855][ T9274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.601572][ T9263] device hsr_slave_0 entered promiscuous mode [ 306.620443][ T9263] device hsr_slave_1 entered promiscuous mode [ 306.636313][ T9263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.663457][ T8799] usb 5-1: string descriptor 0 read error: -71 [ 306.670520][ T8799] hub 5-1:32.0: USB hub found [ 306.680280][ T9263] Cannot create hsr debugfs directory [ 306.736555][ T8799] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 306.799554][ T8799] usb 5-1: USB disconnect, device number 16 [ 306.902531][ T9274] team0: Port device team_slave_0 added [ 306.922620][ T9274] team0: Port device team_slave_1 added [ 307.155580][ T9274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.197922][ T9274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.276939][ T9274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.310648][ T9274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.334721][ T9274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.369073][ T3609] Bluetooth: hci7: command 0x041b tx timeout [ 307.423659][ T9274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.658356][ T9274] device hsr_slave_0 entered promiscuous mode [ 307.677677][ T9274] device hsr_slave_1 entered promiscuous mode [ 307.697502][ T9274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.728611][ T9274] Cannot create hsr debugfs directory [ 308.328862][ T8799] Bluetooth: hci5: command 0x040f tx timeout [ 308.436054][ T9274] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.564757][ T9274] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.752648][ T9274] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.927106][ T9274] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.202025][ T9263] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 309.273974][ T9263] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 309.300655][ T9263] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 309.350923][ T9263] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 309.370606][ T9274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 309.441767][ T9274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 309.448868][ T3708] Bluetooth: hci7: command 0x040f tx timeout [ 309.489273][ T9274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 309.526269][ T9274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 309.556194][ T154] device hsr_slave_0 left promiscuous mode [ 309.573567][ T154] device hsr_slave_1 left promiscuous mode [ 309.600045][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.623123][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.644480][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.666624][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.698650][ T154] device bridge_slave_1 left promiscuous mode [ 309.742363][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.773560][ T9429] loop4: detected capacity change from 0 to 32768 [ 309.788460][ T154] device bridge_slave_0 left promiscuous mode [ 309.804553][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.823119][ T9429] Dev loop4 SGI disklabel: csum bad, label corrupted [ 309.880137][ T154] device hsr_slave_0 left promiscuous mode [ 309.897441][ T3026] Dev loop4 SGI disklabel: csum bad, label corrupted [ 309.907084][ T154] device hsr_slave_1 left promiscuous mode [ 309.927771][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.941655][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.958617][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.970017][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.978338][ T154] device bridge_slave_1 left promiscuous mode [ 309.997189][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.014987][ T154] device bridge_slave_0 left promiscuous mode [ 310.059592][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.135868][ T154] device veth1_macvtap left promiscuous mode [ 310.169092][ T154] device veth0_macvtap left promiscuous mode [ 310.177930][ T154] device veth1_vlan left promiscuous mode [ 310.203161][ T154] device veth0_vlan left promiscuous mode [ 310.340166][ T154] device veth1_macvtap left promiscuous mode [ 310.349500][ T154] device veth0_macvtap left promiscuous mode [ 310.369651][ T154] device veth1_vlan left promiscuous mode [ 310.375452][ T154] device veth0_vlan left promiscuous mode [ 310.408989][ T8799] Bluetooth: hci5: command 0x0419 tx timeout [ 311.088470][ T154] team0 (unregistering): Port device team_slave_1 removed [ 311.115778][ T154] team0 (unregistering): Port device team_slave_0 removed [ 311.140867][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.174842][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.293575][ T154] bond0 (unregistering): Released all slaves [ 311.506465][ T154] team0 (unregistering): Port device team_slave_1 removed [ 311.528968][ T8797] Bluetooth: hci7: command 0x0419 tx timeout [ 311.545649][ T154] team0 (unregistering): Port device team_slave_0 removed [ 311.569733][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.586819][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.674927][ T154] bond0 (unregistering): Released all slaves [ 311.903705][ T9263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.946799][ T3580] Bluetooth: Wrong link type (-71) [ 311.958093][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 311.996818][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.033140][ T9263] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.097855][ T9274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.179555][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.197570][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.229415][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.236505][ T3610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.297594][ T9274] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.339954][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 312.350282][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.367802][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.411268][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.418453][ T5235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.465336][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.476800][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.489491][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 312.521546][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 312.531280][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.544000][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.557475][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.564538][ T5239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.572676][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.581361][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.601427][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.608459][ T5239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.644775][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 312.677551][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.728912][ T3609] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 312.745275][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 312.757518][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 312.786331][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 312.805883][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 312.867569][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 312.878383][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 312.894808][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 312.907461][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 312.922715][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 312.937652][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.961498][ T9263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.979045][ T3609] usb 5-1: Using ep0 maxpacket: 32 [ 312.990568][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.002009][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.016088][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.030793][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.039706][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.048333][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.073152][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.099081][ T3609] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 313.109862][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.117898][ T3609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.149596][ T9274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.170939][ T3609] usb 5-1: config 0 descriptor?? [ 313.211016][ T3609] gspca_main: sunplus-2.14.0 probing 041e:400b [ 313.218128][ T9274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.230209][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.238573][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.380631][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 313.388080][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 313.404083][ T9263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.469694][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 313.479441][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.543486][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 313.559402][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 313.590986][ T9263] device veth0_vlan entered promiscuous mode [ 313.599591][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 313.607645][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 313.653598][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 313.664112][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 313.682856][ T9274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.701730][ T9263] device veth1_vlan entered promiscuous mode [ 313.793142][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 313.809334][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 313.838390][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 313.880846][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.939144][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 313.951764][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 314.009986][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 314.039441][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 314.048956][ T9274] device veth0_vlan entered promiscuous mode [ 314.056212][ T9263] device veth0_macvtap entered promiscuous mode [ 314.086211][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 314.104537][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 314.136971][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 314.160454][ T9263] device veth1_macvtap entered promiscuous mode [ 314.199573][ T9274] device veth1_vlan entered promiscuous mode [ 314.245226][ T9263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.276690][ T9263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.308811][ T3609] gspca_sunplus: reg_w_riv err -71 [ 314.318900][ T3609] sunplus: probe of 5-1:0.0 failed with error -71 [ 314.340392][ T3609] usb 5-1: USB disconnect, device number 17 [ 314.347064][ T9263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.382521][ T9263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.406205][ T9263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.428046][ T9263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.448176][ T9263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.470860][ T9263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.491868][ T9263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.532021][ T9263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.561772][ T9263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.606463][ T9263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.638568][ T9263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.678047][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 314.701851][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 314.749860][ T9263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.761493][ T9263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.788727][ T9263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.819396][ T9263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.869717][ T9263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.915005][ T9263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.948245][ T9263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.992181][ T9263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.022696][ T9263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.033755][ T5239] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 315.071894][ T9263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.103904][ T9263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.125048][ T9263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.165861][ T9263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.186411][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 315.206386][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 315.225418][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 315.249415][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 315.281436][ T9274] device veth0_macvtap entered promiscuous mode [ 315.317309][ T9274] device veth1_macvtap entered promiscuous mode [ 315.323736][ T5239] usb 2-1: Using ep0 maxpacket: 8 [ 315.339768][ T9263] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.358741][ T9263] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.377828][ T9263] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.398087][ T9263] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.437537][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.458353][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.507041][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.528267][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.553442][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.570715][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.587923][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.600858][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.629996][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.648652][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.658823][ T3611] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 315.666736][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.687166][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.698435][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.719245][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.730144][ T5239] usb 2-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 315.746924][ T5239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.756877][ T9274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.778157][ T5239] usb 2-1: Product: syz [ 315.786531][ T5239] usb 2-1: Manufacturer: syz [ 315.793842][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.804450][ T5239] usb 2-1: SerialNumber: syz [ 315.820718][ T5239] usb 2-1: config 0 descriptor?? [ 315.828117][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.845901][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.860923][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.880661][ T5239] gspca_main: spca500-2.14.0 probing 046d:0900 [ 315.887888][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.906411][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.917304][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.940712][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.959039][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.977190][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.988186][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.007941][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.022373][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.042410][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.064428][ T9274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.080598][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 316.097519][ T3611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 316.117193][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 316.127462][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 316.136460][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 316.155804][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 316.178004][ T9274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.187968][ T9274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.199798][ T9274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.208491][ T9274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.299080][ T3611] usb 5-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice=fc.a0 [ 316.308121][ T3611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.329313][ T3611] usb 5-1: Product: syz [ 316.333531][ T3611] usb 5-1: Manufacturer: syz [ 316.338116][ T3611] usb 5-1: SerialNumber: syz [ 316.360686][ T3611] usb 5-1: config 0 descriptor?? [ 316.436374][ T3611] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (eb1a:e303, interface 0, class 0) [ 316.459005][ T3611] em28xx 5-1:0.0: Video interface 0 found: [ 316.512259][ T3843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.523805][ T3843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.552481][ T3844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.564631][ T3844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.636418][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 316.653638][ T3653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.662508][ T3658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.674684][ T3653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.681960][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 316.689426][ T3658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.723289][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 316.758633][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 316.769180][ T3611] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 316.904247][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.910570][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.108864][ T3611] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 317.127161][ T3611] em28xx 5-1:0.0: board has no eeprom [ 317.258941][ T3611] em28xx 5-1:0.0: Identified as Kaiomy TVnPC U2 (card=63) [ 317.269543][ T3611] em28xx 5-1:0.0: analog set to bulk mode. [ 317.305607][ T3611] usb 5-1: USB disconnect, device number 18 [ 317.338125][ T3611] em28xx 5-1:0.0: Disconnecting em28xx [ 317.420411][ T3614] em28xx 5-1:0.0: Registering V4L2 extension [ 317.436172][ T9586] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 317.677784][ T3614] i2c i2c-1: Invalid 7-bit I2C address 0x00 [ 317.787039][ T3614] tuner: 1-0061: Tuner -1 found with type(s) Radio TV. [ 317.831137][ T3614] failing symbol_get of non-GPLONLY symbol xc2028_attach. [ 317.929223][ T5239] gspca_spca500: reg write: error -71 [ 317.949623][ T5239] gspca_spca500: reg write: error -71 [ 317.988847][ T5239] gspca_spca500: reg write: error -71 [ 318.005032][ T3614] failing symbol_get of non-GPLONLY symbol xc2028_attach. [ 318.016338][ T3614] DVB: Unable to find symbol xc2028_attach() [ 318.024856][ T5239] gspca_spca500: reg write: error -71 [ 318.051894][ T3614] tuner: 1-0061: Tuner has no way to set tv freq [ 318.059143][ T5239] gspca_spca500: reg write: error -71 [ 318.087240][ T3614] em28xx 5-1:0.0: Config register raw data: 0xffffffed [ 318.094682][ T5239] gspca_spca500: reg write: error -71 [ 318.121754][ T3614] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 318.136394][ T5239] usb 2-1: USB disconnect, device number 16 [ 318.150219][ T3614] em28xx 5-1:0.0: No AC97 audio processor [ 318.158513][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 318.176782][ T3614] tuner: 1-0061: Tuner has no way to set tv freq [ 318.259951][ T3614] em28xx 5-1:0.0: Registered radio device as radio32 [ 318.266663][ T3614] usb 5-1: Decoder not found [ 318.288808][ T3614] em28xx 5-1:0.0: failed to create media graph [ 318.306488][ T3614] em28xx 5-1:0.0: V4L2 device radio32 deregistered [ 318.361560][ T3614] em28xx 5-1:0.0: V4L2 device video71 deregistered [ 318.395911][ T9620] ================================================================== [ 318.399032][ T3614] em28xx 5-1:0.0: Registering input extension [ 318.404312][ T9620] BUG: KASAN: use-after-free in v4l2_fh_open+0xc7/0x430 [ 318.417300][ T9620] Read of size 8 at addr ffff88801a448900 by task v4l_id/9620 [ 318.424745][ T9620] [ 318.427059][ T9620] CPU: 1 PID: 9620 Comm: v4l_id Not tainted 5.15.164-syzkaller #0 [ 318.428856][ T3611] em28xx 5-1:0.0: Closing input extension [ 318.434849][ T9620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 318.434863][ T9620] Call Trace: [ 318.434870][ T9620] [ 318.434878][ T9620] dump_stack_lvl+0x1e3/0x2d0 [ 318.434901][ T9620] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 318.434917][ T9620] ? _printk+0xd1/0x120 [ 318.471182][ T9620] ? __wake_up_klogd+0xcc/0x100 [ 318.476019][ T9620] ? panic+0x860/0x860 [ 318.480075][ T9620] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 318.485519][ T9620] print_address_description+0x63/0x3b0 [ 318.491044][ T9620] ? v4l2_fh_open+0xc7/0x430 [ 318.495615][ T9620] kasan_report+0x16b/0x1c0 [ 318.500104][ T9620] ? v4l2_fh_open+0xc7/0x430 [ 318.504686][ T9620] v4l2_fh_open+0xc7/0x430 [ 318.509087][ T9620] em28xx_v4l2_open+0x15d/0xa10 [ 318.513922][ T9620] v4l2_open+0x228/0x360 [ 318.518155][ T9620] chrdev_open+0x54a/0x630 [ 318.522570][ T9620] ? cd_forget+0x160/0x160 [ 318.526966][ T9620] ? do_raw_spin_unlock+0x137/0x8b0 [ 318.532144][ T9620] ? fsnotify_perm+0x47b/0x590 [ 318.536892][ T9620] ? cd_forget+0x160/0x160 [ 318.541282][ T9620] do_dentry_open+0x807/0xfb0 [ 318.545944][ T9620] path_openat+0x2705/0x2f20 [ 318.550531][ T9620] ? do_filp_open+0x460/0x460 [ 318.555197][ T9620] do_filp_open+0x21c/0x460 [ 318.559681][ T9620] ? vfs_tmpfile+0x2e0/0x2e0 [ 318.564259][ T9620] ? _raw_spin_unlock+0x24/0x40 [ 318.569085][ T9620] ? alloc_fd+0x598/0x630 [ 318.573400][ T9620] do_sys_openat2+0x13b/0x4f0 [ 318.578059][ T9620] ? do_sys_open+0x220/0x220 [ 318.582633][ T9620] __x64_sys_openat+0x243/0x290 [ 318.587464][ T9620] ? __ia32_sys_open+0x270/0x270 [ 318.592382][ T9620] ? syscall_enter_from_user_mode+0x2e/0x240 [ 318.598338][ T9620] ? lockdep_hardirqs_on+0x94/0x130 [ 318.603515][ T9620] ? syscall_enter_from_user_mode+0x2e/0x240 [ 318.609476][ T9620] do_syscall_64+0x3b/0xb0 [ 318.613868][ T9620] ? clear_bhb_loop+0x15/0x70 [ 318.618522][ T9620] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 318.624389][ T9620] RIP: 0033:0x7f0429f429a4 [ 318.628783][ T9620] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 318.648363][ T9620] RSP: 002b:00007fff2da7f0a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 318.656753][ T9620] RAX: ffffffffffffffda RBX: 00007fff2da7f2b8 RCX: 00007f0429f429a4 [ 318.664700][ T9620] RDX: 0000000000000000 RSI: 00007fff2da80f20 RDI: 00000000ffffff9c [ 318.672649][ T9620] RBP: 00007fff2da80f20 R08: 0000000000000000 R09: 0000000000000000 [ 318.680596][ T9620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.688541][ T9620] R13: 00007fff2da7f2d0 R14: 0000560578b0e670 R15: 00007f042a38ba80 [ 318.696501][ T9620] [ 318.699497][ T9620] [ 318.701794][ T9620] The buggy address belongs to the page: [ 318.707401][ T9620] page:ffffea0000691200 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1a448 [ 318.717525][ T9620] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 318.724620][ T9620] raw: 00fff00000000000 ffffea0000693608 ffff8880b9a409f0 0000000000000000 [ 318.733177][ T9620] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 318.741729][ T9620] page dumped because: kasan: bad access detected [ 318.748118][ T9620] page_owner tracks the page as freed [ 318.753467][ T9620] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 3614, ts 317475039423, free_ts 318393825094 [ 318.769161][ T9620] get_page_from_freelist+0x322a/0x33c0 [ 318.774691][ T9620] __alloc_pages+0x272/0x700 [ 318.779256][ T9620] kmalloc_order+0x41/0x150 [ 318.783734][ T9620] kmalloc_order_trace+0x15/0xe0 [ 318.788647][ T9620] em28xx_v4l2_init+0xe2/0x2d50 [ 318.793475][ T9620] em28xx_init_extension+0x11b/0x1c0 [ 318.798738][ T9620] process_one_work+0x8a1/0x10c0 [ 318.803654][ T9620] worker_thread+0xd83/0x1280 [ 318.808306][ T9620] kthread+0x3f6/0x4f0 [ 318.812350][ T9620] ret_from_fork+0x1f/0x30 [ 318.816745][ T9620] page last free stack trace: [ 318.821390][ T9620] free_unref_page_prepare+0xc34/0xcf0 [ 318.826823][ T9620] free_unref_page+0x95/0x2d0 [ 318.831474][ T9620] free_nonslab_page+0xe4/0x150 [ 318.836299][ T9620] kfree+0x1cf/0x270 [ 318.840170][ T9620] em28xx_v4l2_init+0x15d7/0x2d50 [ 318.845168][ T9620] em28xx_init_extension+0x11b/0x1c0 [ 318.850431][ T9620] process_one_work+0x8a1/0x10c0 [ 318.855346][ T9620] worker_thread+0xd83/0x1280 [ 318.860000][ T9620] kthread+0x3f6/0x4f0 [ 318.864043][ T9620] ret_from_fork+0x1f/0x30 [ 318.868435][ T9620] [ 318.870733][ T9620] Memory state around the buggy address: [ 318.876334][ T9620] ffff88801a448800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 318.884366][ T9620] ffff88801a448880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 318.892399][ T9620] >ffff88801a448900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 318.900429][ T9620] ^ [ 318.904471][ T9620] ffff88801a448980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 318.912505][ T9620] ffff88801a448a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 318.920535][ T9620] ================================================================== [ 318.928565][ T9620] Disabling lock debugging due to kernel taint [ 319.228963][ T9620] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 319.236180][ T9620] CPU: 1 PID: 9620 Comm: v4l_id Tainted: G B 5.15.164-syzkaller #0 [ 319.245366][ T9620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 319.255410][ T9620] Call Trace: [ 319.258683][ T9620] [ 319.261607][ T9620] dump_stack_lvl+0x1e3/0x2d0 [ 319.266282][ T9620] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 319.271911][ T9620] ? panic+0x860/0x860 [ 319.275975][ T9620] ? rcu_is_watching+0x11/0xa0 [ 319.280733][ T9620] ? preempt_schedule_common+0xa6/0xd0 [ 319.286186][ T9620] panic+0x318/0x860 [ 319.290076][ T9620] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 319.296227][ T9620] ? check_panic_on_warn+0x1d/0xa0 [ 319.301340][ T9620] ? fb_is_primary_device+0xd0/0xd0 [ 319.306537][ T9620] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 319.312513][ T9620] ? _raw_spin_unlock+0x40/0x40 [ 319.317357][ T9620] check_panic_on_warn+0x7e/0xa0 [ 319.322290][ T9620] ? v4l2_fh_open+0xc7/0x430 [ 319.326884][ T9620] end_report+0x6d/0xf0 [ 319.331030][ T9620] kasan_report+0x18e/0x1c0 [ 319.335526][ T9620] ? v4l2_fh_open+0xc7/0x430 [ 319.340109][ T9620] v4l2_fh_open+0xc7/0x430 [ 319.344522][ T9620] em28xx_v4l2_open+0x15d/0xa10 [ 319.349368][ T9620] v4l2_open+0x228/0x360 [ 319.353603][ T9620] chrdev_open+0x54a/0x630 [ 319.358016][ T9620] ? cd_forget+0x160/0x160 [ 319.362423][ T9620] ? do_raw_spin_unlock+0x137/0x8b0 [ 319.367613][ T9620] ? fsnotify_perm+0x47b/0x590 [ 319.372374][ T9620] ? cd_forget+0x160/0x160 [ 319.376784][ T9620] do_dentry_open+0x807/0xfb0 [ 319.381462][ T9620] path_openat+0x2705/0x2f20 [ 319.386065][ T9620] ? do_filp_open+0x460/0x460 [ 319.390745][ T9620] do_filp_open+0x21c/0x460 [ 319.395241][ T9620] ? vfs_tmpfile+0x2e0/0x2e0 [ 319.399832][ T9620] ? _raw_spin_unlock+0x24/0x40 [ 319.404678][ T9620] ? alloc_fd+0x598/0x630 [ 319.409004][ T9620] do_sys_openat2+0x13b/0x4f0 [ 319.413676][ T9620] ? do_sys_open+0x220/0x220 [ 319.418263][ T9620] __x64_sys_openat+0x243/0x290 [ 319.423109][ T9620] ? __ia32_sys_open+0x270/0x270 [ 319.428040][ T9620] ? syscall_enter_from_user_mode+0x2e/0x240 [ 319.434012][ T9620] ? lockdep_hardirqs_on+0x94/0x130 [ 319.439202][ T9620] ? syscall_enter_from_user_mode+0x2e/0x240 [ 319.445176][ T9620] do_syscall_64+0x3b/0xb0 [ 319.449583][ T9620] ? clear_bhb_loop+0x15/0x70 [ 319.454254][ T9620] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 319.460138][ T9620] RIP: 0033:0x7f0429f429a4 [ 319.464546][ T9620] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 319.484139][ T9620] RSP: 002b:00007fff2da7f0a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 319.492544][ T9620] RAX: ffffffffffffffda RBX: 00007fff2da7f2b8 RCX: 00007f0429f429a4 [ 319.500506][ T9620] RDX: 0000000000000000 RSI: 00007fff2da80f20 RDI: 00000000ffffff9c [ 319.508453][ T9620] RBP: 00007fff2da80f20 R08: 0000000000000000 R09: 0000000000000000 [ 319.516399][ T9620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.524349][ T9620] R13: 00007fff2da7f2d0 R14: 0000560578b0e670 R15: 00007f042a38ba80 [ 319.532307][ T9620] [ 319.535472][ T9620] Kernel Offset: disabled [ 319.539773][ T9620] Rebooting in 86400 seconds..