last executing test programs: 45.322067025s ago: executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getmulticast={0x14}, 0x14}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 37.063216307s ago: executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getmulticast={0x14}, 0x14}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 27.772205044s ago: executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getmulticast={0x14}, 0x14}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 17.88683778s ago: executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getmulticast={0x14}, 0x14}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 8.756375444s ago: executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getmulticast={0x14}, 0x14}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 4.880354246s ago: executing program 4: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x5}, {}], 0x2) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setxattr$incfs_size(0x0, 0x0, 0x0, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000002240)=[0x7fff]) 4.792528199s ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000200)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473ba6100b021ee66b9800000c00f146635004000000f300f20e06635800000000f22e0f30fa6c8", 0x54}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a000000000000000000"], 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.631764964s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x5451, 0x0) 4.551211796s ago: executing program 4: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f0000020040)=ANY=[], 0x0, 0x6a7, &(0x7f00000000c0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000e80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000a80), 0x40000, 0x0) pwritev2(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000b80)="47db60ab60d23e3b", 0x8}], 0x2, 0x1, 0x401, 0x18) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) alarm(0x3ce) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000a40)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) alarm(0x0) 4.223574055s ago: executing program 0: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpid() fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) syz_mount_image$fuse(&(0x7f0000004080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000004200)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000040)={0x0, 0x0, 0x4b}) 4.157366015s ago: executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = memfd_create(&(0x7f0000000980)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\x00\x80\x00\x00\x00\x00\x00\x00}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\x7f\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1$)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x03\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bI\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9b\x81\x00\x00\x00\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x05\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\b\x00\x00\x00\x00\x00\x00\x00\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12mk\xc8\xd9\x97*k\x7f\x00\x00\x00\x00\x00\x00\x00q(\xae\\\xb6\x14I\xf7\xe0z\xf10xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000100)}, 0x20) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x8800, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=koi8-r,umask=00000000000020000000000,iocharset=cp1inue,umask=00000000000000000025072,iocharset=macroman,errors=continue,errors=remount-ro,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=cp850,\x00'], 0x5, 0x1514, &(0x7f0000000ac0)="$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") syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a", @ANYRES16=r1], 0x0) tkill(0x0, 0x0) 2.681604407s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r0, &(0x7f00000001c0)={0x10}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000660400000800", @ANYRES32=r3, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) 2.480428247s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, r2, 0x25, 0x4, @val=@tcx={@prog_fd}}, 0x40) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r3, r4}, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) 2.230175465s ago: executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) connect$inet(r0, &(0x7f00000000c0), 0x10) rt_sigreturn() read$char_usb(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1060, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) shutdown(r0, 0x0) 2.031724514s ago: executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0xfffffffffffffffe}, 0x78) write$cgroup_devices(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="01202a3a8a"], 0x8) close(r2) socket(0x11, 0x3, 0x0) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) pipe(0x0) 1.993665651s ago: executing program 1: bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000024) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RLOPEN(r2, 0x0, 0x0) rt_sigreturn() msgctl$IPC_RMID(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/47, 0x2f}], 0x1}, 0x0) write$binfmt_script(r3, 0x0, 0x0) 1.843655473s ago: executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) readv(r1, 0x0, 0x0) close(r1) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mount$overlay(0x0, 0x0, &(0x7f00000000c0), 0x3114035, 0x0) 1.834341464s ago: executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) pipe(&(0x7f0000000300)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 1.676218308s ago: executing program 1: creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000340), 0xffffff46) rt_sigreturn() write$binfmt_misc(r3, &(0x7f0000000080)={'syz1'}, 0x4) close(r1) socket$inet_udp(0x2, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) 1.487634287s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r0, &(0x7f00000001c0)={0x10}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000066040000080003", @ANYRES32=r3, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) 1.308718483s ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000200)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473ba6100b021ee66b9800000c00f146635004000000f300f20e06635800000000f22e0f30fa6c8", 0x54}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a000000000000000000"], 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.213941448s ago: executing program 4: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f0000020040)=ANY=[], 0x0, 0x6a7, &(0x7f00000000c0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000e80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000a80), 0x40000, 0x0) pwritev2(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000b80)="47db60ab60d23e3b", 0x8}], 0x2, 0x1, 0x401, 0x18) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) alarm(0x3ce) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000a40)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) alarm(0x0) 648.565312ms ago: executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003b40)=[{{&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffff24}}], 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = dup3(r3, r2, 0x0) accept$inet6(r4, 0x0, 0x0) accept4$unix(r2, 0x0, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) preadv2(r6, 0x0, 0x0, 0x0, 0x0, 0x0) close(r6) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r7, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r8) rt_sigreturn() openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x5450, 0x0) 323.820272ms ago: executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=ANY=[@ANYBLOB="f80000"], 0xf8}}, 0x0) 217.421147ms ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, r2, 0x25, 0x4, @val=@tcx={@prog_fd}}, 0x40) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r3, r4}, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) 198.14263ms ago: executing program 3: r0 = gettid() timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x0, 0x0}) 27.686446ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x2320, 0x0, 0x0, 0xc00d, 0x304c, 0x0, 0x0, 0x0, 0x0}, 0x50) 27.445506ms ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') r2 = socket$unix(0x1, 0x1, 0x0) recvmmsg$unix(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x5450, 0x0) r4 = ioctl$NS_GET_PARENT(r1, 0x5450, 0x0) dup3(r2, r4, 0x0) ioctl$TIOCGPTPEER(r0, 0x5450, 0x0) r5 = msgget$private(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/47, 0x2f}], 0x1}, 0x0) msgrcv(r5, 0x0, 0x0, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000180)=@req3={0xce7, 0x224, 0x62a0, 0xbe, 0x3, 0x1, 0xfffffffe}, 0x1c) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 0s ago: executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getmulticast={0x14}, 0x14}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) kernel console output (not intermixed with test programs): 51.392169][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.424402][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.465188][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.486926][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.508322][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.529950][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.551144][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.571844][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.592676][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.624892][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.645034][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.664875][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.706320][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.726670][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.746285][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.776315][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.783762][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.797594][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.821190][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.839156][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.862151][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.894945][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.924637][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.947943][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.969066][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.010421][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.048183][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.068945][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.090095][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.110823][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.130921][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.153198][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.169308][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.197924][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.209229][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.219264][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.230099][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.240307][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.250932][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.263998][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.289273][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.303875][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.324007][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.333954][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.354823][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.375303][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.379218][ T5302] loop4: detected capacity change from 0 to 8 [ 152.387204][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.403865][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.412108][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.431787][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.456885][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.466305][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.518496][ T5126] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.551045][ T5126] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.564546][ T5126] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.579707][ T5126] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.622712][ T5104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.654123][ T5104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.672269][ T5104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.684924][ T5104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.953033][ T5326] loop4: detected capacity change from 0 to 1024 [ 152.978752][ T3608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.996332][ T3608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.030775][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.048986][ T3608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.060839][ T3608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.077166][ T5326] hfsplus: failed to load root directory [ 153.083633][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.107547][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.140870][ T5332] loop0: detected capacity change from 0 to 8 [ 153.151429][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.160377][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.188264][ T3608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.193512][ T5326] loop4: detected capacity change from 0 to 512 [ 153.211578][ T3608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.328534][ T5326] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 153.345056][ T5326] ext4 filesystem being mounted at /root/syzkaller-testdir1174635931/syzkaller.qskq0A/68/file0 supports timestamps until 2038 (0x7fffffff) [ 153.421214][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.796420][ T5368] loop3: detected capacity change from 0 to 8 [ 154.073408][ T4056] device hsr_slave_0 left promiscuous mode [ 154.107817][ T4056] device hsr_slave_1 left promiscuous mode [ 154.118979][ T4056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.147823][ T4056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.198461][ T4056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.216554][ T4056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.245943][ T4056] device bridge_slave_1 left promiscuous mode [ 154.272857][ T4056] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.294415][ T4056] device bridge_slave_0 left promiscuous mode [ 154.321405][ T4056] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.371349][ T4056] device hsr_slave_0 left promiscuous mode [ 154.390632][ T4056] device hsr_slave_1 left promiscuous mode [ 154.415669][ T4056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.454235][ T4056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.466689][ T4056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.474160][ T4056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.554521][ T4056] device bridge_slave_1 left promiscuous mode [ 154.571615][ T4056] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.612486][ T4056] device bridge_slave_0 left promiscuous mode [ 154.632361][ T4056] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.692389][ T4056] device veth1_macvtap left promiscuous mode [ 154.700974][ T4056] device veth0_macvtap left promiscuous mode [ 154.719115][ T4056] device veth1_vlan left promiscuous mode [ 154.741087][ T4056] device veth0_vlan left promiscuous mode [ 154.764103][ T4056] device veth1_macvtap left promiscuous mode [ 154.805201][ T4056] device veth0_macvtap left promiscuous mode [ 154.813504][ T4056] device veth1_vlan left promiscuous mode [ 154.834984][ T4056] device veth0_vlan left promiscuous mode [ 154.892223][ T5388] loop1: detected capacity change from 0 to 1024 [ 154.980266][ T5388] EXT4-fs (loop1): Ignoring removed nobh option [ 154.994916][ T5388] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.058550][ T5388] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 155.151167][ T5385] loop3: detected capacity change from 0 to 40427 [ 155.155504][ T5388] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz-executor.1: couldn't read orphan inode 11 (err -117) [ 155.202952][ T5385] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 155.211915][ T5385] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 155.225703][ T5388] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,dioread_nolock,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 155.231968][ T5385] F2FS-fs (loop3): invalid crc value [ 155.291035][ T5385] F2FS-fs (loop3): Found nat_bits in checkpoint [ 155.390237][ T5385] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 155.397809][ T5385] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 155.624892][ T3572] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 155.864975][ T3572] usb 2-1: Using ep0 maxpacket: 8 [ 155.928005][ T4056] team0 (unregistering): Port device team_slave_1 removed [ 155.961618][ T5104] attempt to access beyond end of device [ 155.961618][ T5104] loop3: rw=2051, want=53248, limit=40427 [ 155.971414][ T4056] team0 (unregistering): Port device team_slave_0 removed [ 155.981238][ T5104] attempt to access beyond end of device [ 155.981238][ T5104] loop3: rw=2051, want=77824, limit=40427 [ 156.008995][ T5104] attempt to access beyond end of device [ 156.008995][ T5104] loop3: rw=2051, want=86016, limit=40427 [ 156.011285][ T4056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.034704][ T5104] F2FS-fs (loop3): Issue discard(6144, 6144, 512) failed, ret: -5 [ 156.034755][ T5104] F2FS-fs (loop3): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 156.035311][ T3572] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 156.064954][ T5104] F2FS-fs (loop3): Issue discard(10240, 10240, 512) failed, ret: -5 [ 156.066812][ T3572] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 156.086623][ T3572] usb 2-1: config 135 has no interface number 0 [ 156.093017][ T3572] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.101719][ T4056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.278857][ T3572] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 156.296369][ T3572] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.304609][ T3572] usb 2-1: Product: syz [ 156.317593][ T3572] usb 2-1: Manufacturer: syz [ 156.322321][ T3572] usb 2-1: SerialNumber: syz [ 156.353363][ T4056] bond0 (unregistering): Released all slaves [ 156.615183][ T3572] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 156.621597][ T3572] usb 2-1: No valid video chain found. [ 156.647279][ T3572] usb 2-1: USB disconnect, device number 6 [ 156.662100][ T4056] team0 (unregistering): Port device team_slave_1 removed [ 156.684053][ T4056] team0 (unregistering): Port device team_slave_0 removed [ 156.705353][ T4056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.743363][ T4056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.912779][ T4056] bond0 (unregistering): Released all slaves [ 157.511298][ T5424] loop3: detected capacity change from 0 to 1024 [ 157.535129][ T13] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 157.604136][ T5424] hfsplus: failed to load root directory [ 157.724324][ T5424] loop3: detected capacity change from 0 to 512 [ 157.867424][ T5424] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 157.893151][ T5424] ext4 filesystem being mounted at /root/syzkaller-testdir4160038042/syzkaller.P0k0jM/14/file0 supports timestamps until 2038 (0x7fffffff) [ 157.904997][ T5421] chnl_net:caif_netlink_parms(): no params data found [ 157.908769][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.978291][ T5432] loop4: detected capacity change from 0 to 8 [ 158.015063][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.034905][ T13] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 158.058660][ T5421] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.066013][ T5421] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.074412][ T5421] device bridge_slave_0 entered promiscuous mode [ 158.084468][ T5421] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.084930][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.091908][ T5421] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.108219][ T5421] device bridge_slave_1 entered promiscuous mode [ 158.185961][ T13] usb 2-1: config 0 descriptor?? [ 158.197698][ T5421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.210692][ T5421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.269976][ T5421] team0: Port device team_slave_0 added [ 158.296277][ T5421] team0: Port device team_slave_1 added [ 158.386766][ T5421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.393778][ T5421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.446859][ T5447] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.447454][ T5445] loop0: detected capacity change from 0 to 1024 [ 158.483930][ T5421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.507078][ T5421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.514140][ T5421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.549209][ T5445] EXT4-fs (loop0): Ignoring removed nobh option [ 158.565042][ T5445] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 158.597449][ T5421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.600723][ T5445] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 158.655294][ T5445] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz-executor.0: couldn't read orphan inode 11 (err -117) [ 158.665691][ T13] hid (null): bogus close delimiter [ 158.672886][ T5445] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,dioread_nolock,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 158.765319][ T5421] device hsr_slave_0 entered promiscuous mode [ 158.795223][ T5421] device hsr_slave_1 entered promiscuous mode [ 158.805114][ T5421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.812715][ T5421] Cannot create hsr debugfs directory [ 158.974940][ T3576] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 159.125156][ T13] usb 2-1: language id specifier not provided by device, defaulting to English [ 159.196541][ T5421] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.235069][ T3576] usb 1-1: Using ep0 maxpacket: 8 [ 159.318142][ T5421] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.395273][ T3576] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 159.403670][ T3576] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 159.450788][ T3576] usb 1-1: config 135 has no interface number 0 [ 159.464986][ T3576] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.501065][ T5421] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.515000][ T3571] Bluetooth: hci5: command 0x0409 tx timeout [ 159.551450][ T5470] loop4: detected capacity change from 0 to 8 [ 159.614423][ T5421] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.685967][ T3576] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 159.704838][ T3576] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.712868][ T3576] usb 1-1: Product: syz [ 159.745977][ T3576] usb 1-1: Manufacturer: syz [ 159.750716][ T3576] usb 1-1: SerialNumber: syz [ 159.851395][ T5421] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 159.867578][ T5421] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 159.877975][ T5421] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 159.885101][ T13] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71 [ 159.897742][ T5421] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 159.911364][ T13] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 159.934924][ T13] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 159.974212][ T13] usb 2-1: USB disconnect, device number 7 [ 160.045573][ T3576] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 160.057646][ T3576] usb 1-1: No valid video chain found. [ 160.081441][ T5421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.100204][ T3576] usb 1-1: USB disconnect, device number 4 [ 160.125725][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.134434][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.148326][ T5421] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.162579][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.173003][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.181839][ T3573] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.189068][ T3573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.220850][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.235887][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.253827][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.272801][ T3573] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.280082][ T3573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.294318][ T5477] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.318674][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.335434][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.356902][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.372813][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.393463][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.402917][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.438052][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.460981][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.489661][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.521595][ T5421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.554945][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.593219][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.610965][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.692121][ T26] audit: type=1800 audit(1719017077.041:178): pid=5488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1950 res=0 errno=0 [ 160.784434][ T5496] loop1: detected capacity change from 0 to 8 [ 160.845807][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.853560][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.893896][ T5502] loop0: detected capacity change from 0 to 1024 [ 160.920219][ T5421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.982946][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.996683][ T5502] hfsplus: failed to load root directory [ 161.005022][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.052871][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.076173][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.102106][ T5502] loop0: detected capacity change from 0 to 512 [ 161.119355][ T5421] device veth0_vlan entered promiscuous mode [ 161.124729][ T5511] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 161.148149][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.157207][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.178002][ T5515] loop1: detected capacity change from 0 to 1024 [ 161.181476][ T5421] device veth1_vlan entered promiscuous mode [ 161.260961][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.265499][ T5515] EXT4-fs (loop1): Ignoring removed nobh option [ 161.269460][ T5502] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 161.290098][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.295351][ T5502] ext4 filesystem being mounted at /root/syzkaller-testdir1584202560/syzkaller.P0DgbL/72/file0 supports timestamps until 2038 (0x7fffffff) [ 161.312761][ T5515] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.329427][ T5421] device veth0_macvtap entered promiscuous mode [ 161.340931][ T5421] device veth1_macvtap entered promiscuous mode [ 161.352193][ T5515] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 161.362126][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.382794][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.392789][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.404325][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.414365][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.427527][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.439111][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.449911][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.459824][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.471688][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.481675][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.492955][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.495078][ T5515] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz-executor.1: couldn't read orphan inode 11 (err -117) [ 161.506813][ T5421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.525293][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.534646][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.543174][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.567081][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.589439][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.604540][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 161.612525][ T5515] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,dioread_nolock,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 161.618466][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.678855][ T5535] loop4: detected capacity change from 0 to 8 [ 161.694851][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.714890][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.729399][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.741528][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.772118][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.793032][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.804315][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.819270][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.829581][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.844860][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.893432][ T5421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.915465][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.931727][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.948018][ T5421] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.962383][ T5421] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.972097][ T5421] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.981062][ T5421] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.985382][ T1069] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 162.195843][ T3608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.213185][ T3608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.250305][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.285057][ T1069] usb 2-1: Using ep0 maxpacket: 8 [ 162.309625][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.334142][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.368276][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 162.405391][ T1069] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 162.424158][ T1069] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 162.465157][ T1069] usb 2-1: config 135 has no interface number 0 [ 162.472139][ T1069] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.495038][ T5554] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 162.695083][ T1069] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 162.714030][ T1069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.723584][ T1069] usb 2-1: Product: syz [ 162.737571][ T1069] usb 2-1: Manufacturer: syz [ 162.742245][ T1069] usb 2-1: SerialNumber: syz [ 162.787128][ T26] audit: type=1804 audit(1719017079.141:179): pid=5562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1174635931/syzkaller.qskq0A/97/file1" dev="sda1" ino=1966 res=1 errno=0 [ 162.860064][ T5567] loop4: detected capacity change from 0 to 8 [ 163.045203][ T1069] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 163.051608][ T1069] usb 2-1: No valid video chain found. [ 163.059323][ T1069] usb 2-1: USB disconnect, device number 8 [ 163.135186][ T4056] device hsr_slave_0 left promiscuous mode [ 163.141740][ T4056] device hsr_slave_1 left promiscuous mode [ 163.148193][ T4056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.148244][ T4056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.150543][ T4056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.150574][ T4056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.152886][ T4056] device bridge_slave_1 left promiscuous mode [ 163.154084][ T4056] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.161872][ T4056] device bridge_slave_0 left promiscuous mode [ 163.162019][ T4056] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.213770][ T4056] device veth1_macvtap left promiscuous mode [ 163.213905][ T4056] device veth0_macvtap left promiscuous mode [ 163.214010][ T4056] device veth1_vlan left promiscuous mode [ 163.214110][ T4056] device veth0_vlan left promiscuous mode [ 163.484374][ T5598] loop0: detected capacity change from 0 to 8 [ 163.646806][ T5603] loop1: detected capacity change from 0 to 1024 [ 163.692580][ T5603] hfsplus: failed to load root directory [ 163.773284][ T5603] loop1: detected capacity change from 0 to 512 [ 163.790712][ T4056] team0 (unregistering): Port device team_slave_1 removed [ 163.827601][ T4056] team0 (unregistering): Port device team_slave_0 removed [ 163.848500][ T5603] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 163.862415][ T5603] ext4 filesystem being mounted at /root/syzkaller-testdir3401589666/syzkaller.dkvDRT/25/file0 supports timestamps until 2038 (0x7fffffff) [ 163.862438][ T4056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.896816][ T4056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.003150][ T4056] bond0 (unregistering): Released all slaves [ 164.311406][ T5625] loop4: detected capacity change from 0 to 1024 [ 164.381937][ T5625] EXT4-fs (loop4): Ignoring removed nobh option [ 164.393393][ T5625] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 164.434673][ T5625] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 164.463748][ T5625] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 11 (err -117) [ 164.488598][ T5625] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,dioread_nolock,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 164.784964][ T3569] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 165.035781][ T3569] usb 5-1: Using ep0 maxpacket: 8 [ 165.155135][ T3569] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 165.170801][ T3569] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 165.199169][ T5641] loop3: detected capacity change from 0 to 8 [ 165.206683][ T3569] usb 5-1: config 135 has no interface number 0 [ 165.220806][ T3569] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.405121][ T3569] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 165.424608][ T3569] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.454301][ T3569] usb 5-1: Product: syz [ 165.459558][ T3569] usb 5-1: Manufacturer: syz [ 165.476543][ T3569] usb 5-1: SerialNumber: syz [ 165.765328][ T5664] loop1: detected capacity change from 0 to 8 [ 165.775150][ T3569] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 165.781547][ T3569] usb 5-1: No valid video chain found. [ 165.814425][ T3569] usb 5-1: USB disconnect, device number 3 [ 165.914173][ T5670] loop3: detected capacity change from 0 to 1024 [ 166.032480][ T5670] hfsplus: failed to load root directory [ 166.175930][ T5668] chnl_net:caif_netlink_parms(): no params data found [ 166.182476][ T5670] loop3: detected capacity change from 0 to 512 [ 166.301472][ T5668] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.309086][ T5668] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.320565][ T5668] device bridge_slave_0 entered promiscuous mode [ 166.331095][ T5668] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.338673][ T5668] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.347562][ T5668] device bridge_slave_1 entered promiscuous mode [ 166.364054][ T5670] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 166.385202][ T5670] ext4 filesystem being mounted at /root/syzkaller-testdir4160038042/syzkaller.P0k0jM/43/file0 supports timestamps until 2038 (0x7fffffff) [ 166.419680][ T5668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.432433][ T5668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.491306][ T5668] team0: Port device team_slave_0 added [ 166.520151][ T5668] team0: Port device team_slave_1 added [ 166.638661][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.662978][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.748110][ T5668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.812318][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.834969][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.921706][ T5668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.031007][ T5707] loop0: detected capacity change from 0 to 8 [ 167.050205][ T5668] device hsr_slave_0 entered promiscuous mode [ 167.090402][ T5668] device hsr_slave_1 entered promiscuous mode [ 167.115713][ T5668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.143735][ T5668] Cannot create hsr debugfs directory [ 167.348683][ T5722] loop1: detected capacity change from 0 to 1024 [ 167.413466][ T5722] EXT4-fs (loop1): Ignoring removed nobh option [ 167.443160][ T5722] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.491669][ T5668] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.512947][ T5722] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 167.541979][ T5722] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz-executor.1: couldn't read orphan inode 11 (err -117) [ 167.587500][ T5722] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,dioread_nolock,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 167.651901][ T5668] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.781701][ T5668] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.873166][ T5668] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.984911][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 167.996238][ T3571] Bluetooth: hci5: command 0x0409 tx timeout [ 168.032453][ T5742] loop0: detected capacity change from 0 to 8 [ 168.056855][ T5668] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 168.079407][ T5668] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 168.098960][ T5668] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 168.123578][ T5668] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 168.225013][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 168.345115][ T7] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 168.353776][ T7] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 168.367308][ T7] usb 2-1: config 135 has no interface number 0 [ 168.373829][ T7] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.407257][ T5668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.430464][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.439280][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.456739][ T5668] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.485702][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.494527][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.504379][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.511539][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.550385][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.565067][ T7] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 168.574193][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.586462][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.595708][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.611683][ T7] usb 2-1: Product: syz [ 168.616799][ T7] usb 2-1: Manufacturer: syz [ 168.625917][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.633051][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.642618][ T7] usb 2-1: SerialNumber: syz [ 168.663130][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.735863][ T5771] loop3: detected capacity change from 0 to 8 [ 168.736920][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.756041][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.767313][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.787470][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.799970][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.832444][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.845441][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.859790][ T5668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.878835][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.917445][ T5776] loop4: detected capacity change from 0 to 1024 [ 168.926148][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.934718][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.943044][ T7] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 168.954972][ T7] usb 2-1: No valid video chain found. [ 168.962307][ T7] usb 2-1: USB disconnect, device number 9 [ 168.969582][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.979306][ T5776] hfsplus: failed to load root directory [ 169.117931][ T5776] loop4: detected capacity change from 0 to 512 [ 169.202787][ T5776] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 169.207513][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.223203][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.235475][ T5776] ext4 filesystem being mounted at /root/syzkaller-testdir1174635931/syzkaller.qskq0A/116/file0 supports timestamps until 2038 (0x7fffffff) [ 169.261232][ T5668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.307982][ T4056] device hsr_slave_0 left promiscuous mode [ 169.317080][ T4056] device hsr_slave_1 left promiscuous mode [ 169.335546][ T4056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.343162][ T4056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.353618][ T4056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.366354][ T4056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.376137][ T4056] device bridge_slave_1 left promiscuous mode [ 169.382432][ T4056] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.396497][ T4056] device bridge_slave_0 left promiscuous mode [ 169.406090][ T4056] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.468438][ T4056] device veth1_macvtap left promiscuous mode [ 169.474707][ T4056] device veth0_macvtap left promiscuous mode [ 169.491488][ T4056] device veth1_vlan left promiscuous mode [ 169.497493][ T4056] device veth0_vlan left promiscuous mode [ 169.527766][ T5810] loop1: detected capacity change from 0 to 8 [ 170.044346][ T4056] team0 (unregistering): Port device team_slave_1 removed [ 170.068802][ T4056] team0 (unregistering): Port device team_slave_0 removed [ 170.076456][ T3567] Bluetooth: hci5: command 0x041b tx timeout [ 170.090466][ T4056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.123061][ T4056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.284244][ T4056] bond0 (unregistering): Released all slaves [ 170.294666][ T5834] loop3: detected capacity change from 0 to 1024 [ 170.342089][ T5834] EXT4-fs (loop3): Ignoring removed nobh option [ 170.355066][ T5834] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.382069][ T5834] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 170.416683][ T5834] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz-executor.3: couldn't read orphan inode 11 (err -117) [ 170.437324][ T5834] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,dioread_nolock,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 170.535334][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.545238][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.570223][ T5668] device veth0_vlan entered promiscuous mode [ 170.614748][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.623382][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.663575][ T5668] device veth1_vlan entered promiscuous mode [ 170.700671][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.713020][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.742245][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.754919][ T1069] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 170.786615][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.808637][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.828701][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.847714][ T5668] device veth0_macvtap entered promiscuous mode [ 170.860351][ T5851] loop0: detected capacity change from 0 to 8 [ 170.890911][ T5668] device veth1_macvtap entered promiscuous mode [ 170.933837][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.954180][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.977016][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.995062][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.011334][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.023162][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.040479][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.052390][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.054891][ T1069] usb 4-1: Using ep0 maxpacket: 8 [ 171.069975][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.082688][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.103788][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.113856][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 171.132586][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.142492][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.164644][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.216002][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.225169][ T1069] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 171.239641][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.244855][ T1069] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 171.263248][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.282692][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.292672][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.305002][ T1069] usb 4-1: config 135 has no interface number 0 [ 171.323755][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.331832][ T1069] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.349482][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.374654][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.393161][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.404260][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.428026][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.451414][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.461507][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.473415][ T5668] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.498955][ T5668] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.534332][ T5668] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.546063][ T5668] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.555065][ T1069] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 171.573563][ T1069] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.602194][ T1069] usb 4-1: Product: syz [ 171.622508][ T1069] usb 4-1: Manufacturer: syz [ 171.642814][ T1069] usb 4-1: SerialNumber: syz [ 171.702469][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.720406][ T26] audit: type=1804 audit(1719017088.071:180): pid=5864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1584202560/syzkaller.P0DgbL/112/file0" dev="sda1" ino=1944 res=1 errno=0 [ 171.757259][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.806741][ T3608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.817729][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.827078][ T3608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.878165][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 172.005341][ T1069] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 172.011749][ T1069] usb 4-1: No valid video chain found. [ 172.035462][ T1069] usb 4-1: USB disconnect, device number 5 [ 172.133604][ T5881] loop4: detected capacity change from 0 to 8 [ 172.296235][ T5883] loop0: detected capacity change from 0 to 1024 [ 172.335691][ T5883] hfsplus: failed to load root directory [ 172.449966][ T5883] loop0: detected capacity change from 0 to 512 [ 172.582018][ T5883] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 172.630692][ T5883] ext4 filesystem being mounted at /root/syzkaller-testdir1584202560/syzkaller.P0DgbL/116/file0 supports timestamps until 2038 (0x7fffffff) [ 173.129758][ T5914] loop1: detected capacity change from 0 to 8 [ 173.349003][ T5919] loop1: detected capacity change from 0 to 1024 [ 173.441729][ T5919] EXT4-fs (loop1): Ignoring removed nobh option [ 173.454877][ T5919] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.527893][ T5919] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 173.575181][ T5919] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz-executor.1: couldn't read orphan inode 11 (err -117) [ 173.661517][ T5919] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,dioread_nolock,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 173.808626][ T5941] loop4: detected capacity change from 0 to 8 [ 174.044967][ T3572] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 174.266560][ T3572] usb 2-1: device descriptor read/64, error -71 [ 174.297458][ T5520] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 174.348537][ T155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.569295][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 174.605083][ T3572] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 174.645813][ T5975] loop3: detected capacity change from 0 to 8 [ 174.649978][ T5973] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.722722][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.732473][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.741731][ T5953] device bridge_slave_0 entered promiscuous mode [ 174.750882][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.758821][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.770610][ T5953] device bridge_slave_1 entered promiscuous mode [ 174.800460][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.819847][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.835143][ T3572] usb 2-1: device descriptor read/64, error -71 [ 174.883440][ T5953] team0: Port device team_slave_0 added [ 174.895257][ T5953] team0: Port device team_slave_1 added [ 174.950608][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.958040][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.984883][ T3572] usb usb2-port1: attempt power cycle [ 174.997859][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.059799][ T155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.077425][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.084577][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.120638][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.162882][ T155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.178744][ T5998] loop3: detected capacity change from 0 to 1024 [ 175.230549][ T5953] device hsr_slave_0 entered promiscuous mode [ 175.243767][ T5998] hfsplus: failed to load root directory [ 175.252439][ T5953] device hsr_slave_1 entered promiscuous mode [ 175.260298][ T5953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.268154][ T5953] Cannot create hsr debugfs directory [ 175.283640][ T155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.349992][ T5998] loop3: detected capacity change from 0 to 512 [ 175.415233][ T3572] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 175.432469][ T5998] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 175.450290][ T6008] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.460985][ T5998] ext4 filesystem being mounted at /root/syzkaller-testdir4160038042/syzkaller.P0k0jM/77/file0 supports timestamps until 2038 (0x7fffffff) [ 175.543390][ T3572] usb 2-1: device descriptor read/8, error -71 [ 175.825012][ T3572] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 175.936005][ T3572] usb 2-1: device descriptor read/8, error -71 [ 176.055195][ T3572] usb usb2-port1: unable to enumerate USB device [ 176.225549][ T6039] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.315637][ T3572] Bluetooth: hci5: command 0x0409 tx timeout [ 176.605008][ T155] device hsr_slave_0 left promiscuous mode [ 176.626217][ T155] device hsr_slave_1 left promiscuous mode [ 176.642171][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.655990][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.688119][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.705051][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.737381][ T155] device bridge_slave_1 left promiscuous mode [ 176.743673][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.768127][ T155] device bridge_slave_0 left promiscuous mode [ 176.782047][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.798734][ T155] device veth1_macvtap left promiscuous mode [ 176.807743][ T155] device veth0_macvtap left promiscuous mode [ 176.816498][ T155] device veth1_vlan left promiscuous mode [ 176.830567][ T155] device veth0_vlan left promiscuous mode [ 177.169181][ T155] team0 (unregistering): Port device team_slave_1 removed [ 177.179290][ T6076] loop3: detected capacity change from 0 to 1024 [ 177.191436][ T155] team0 (unregistering): Port device team_slave_0 removed [ 177.210151][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.230026][ T6076] EXT4-fs (loop3): Ignoring removed nobh option [ 177.240666][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.244972][ T6076] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 177.284654][ T6076] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 177.312791][ T6076] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz-executor.3: couldn't read orphan inode 11 (err -117) [ 177.333745][ T6076] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,dioread_nolock,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 177.360655][ T155] bond0 (unregistering): Released all slaves [ 177.432766][ T5953] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 177.452484][ T6081] binder: 6080:6081 ioctl 8901 20000140 returned -22 [ 177.496579][ T5953] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 177.516886][ T5953] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 177.537946][ T5953] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 177.685267][ T3566] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 177.739461][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.777037][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.802520][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.824165][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.848140][ T6103] loop4: detected capacity change from 0 to 1024 [ 177.858769][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.868989][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.878140][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.885286][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.895113][ T3566] usb 4-1: device descriptor read/64, error -71 [ 177.916426][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.932100][ T6103] hfsplus: failed to load root directory [ 177.948127][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.957445][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.966291][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.973401][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.981252][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.997858][ T6109] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.018081][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.042292][ T6103] loop4: detected capacity change from 0 to 512 [ 178.054319][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.064171][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.093125][ T5953] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.131012][ T5953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.152911][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.173131][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.184725][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.186278][ T3566] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 178.194142][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.206630][ T6103] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 178.210180][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.230225][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.240335][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.262807][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.281116][ T6103] ext4 filesystem being mounted at /root/syzkaller-testdir1174635931/syzkaller.qskq0A/153/file0 supports timestamps until 2038 (0x7fffffff) [ 178.405037][ T1069] Bluetooth: hci5: command 0x041b tx timeout [ 178.484919][ T3566] usb 4-1: device descriptor read/64, error -71 [ 178.556388][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.563937][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.592314][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.617498][ T3566] usb usb4-port1: attempt power cycle [ 178.681519][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.700713][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.758392][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.777276][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.801396][ T5953] device veth0_vlan entered promiscuous mode [ 178.816939][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.826088][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.844667][ T5953] device veth1_vlan entered promiscuous mode [ 178.950500][ T6154] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.989461][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.007252][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.035862][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.044635][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.055560][ T3566] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 179.084521][ T5953] device veth0_macvtap entered promiscuous mode [ 179.131246][ T5953] device veth1_macvtap entered promiscuous mode [ 179.167047][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.192470][ T3566] usb 4-1: device descriptor read/8, error -71 [ 179.205873][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.234859][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.260465][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.273123][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.300167][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.331711][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.349918][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.364664][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.376486][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.417426][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.443106][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.457746][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.474815][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.485718][ T3566] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 179.503308][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.523780][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.554893][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.574825][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.585852][ T3566] usb 4-1: device descriptor read/8, error -71 [ 179.605028][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.624855][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.645587][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.666672][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.690473][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.705180][ T3566] usb usb4-port1: unable to enumerate USB device [ 179.712641][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.731105][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.750415][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.770978][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.785740][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.816252][ T5953] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.845899][ T5953] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.854734][ T5953] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.891741][ T5953] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.058216][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.073546][ T6190] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.094997][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.120835][ T4056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.141467][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 180.148877][ T4056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.207350][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 180.637261][ T6216] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.689458][ T6219] loop3: detected capacity change from 0 to 1024 [ 180.741178][ T6219] EXT4-fs (loop3): Ignoring removed nobh option [ 180.762989][ T6219] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.822464][ T6219] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 180.854103][ T6219] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz-executor.3: couldn't read orphan inode 11 (err -117) [ 180.891015][ T6219] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,dioread_nolock,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 180.908975][ T6229] loop0: detected capacity change from 0 to 1024 [ 180.963320][ T3572] Bluetooth: hci0: command 0x0406 tx timeout [ 181.005999][ T6229] hfsplus: failed to load root directory [ 181.124038][ T6229] loop0: detected capacity change from 0 to 512 [ 181.252323][ T6229] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 181.271829][ T6229] ext4 filesystem being mounted at /root/syzkaller-testdir1584202560/syzkaller.P0DgbL/154/file0 supports timestamps until 2038 (0x7fffffff) [ 181.287181][ T3572] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 181.482447][ T6249] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.494875][ T3572] usb 4-1: device descriptor read/64, error -71 [ 181.794928][ T3572] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 181.963336][ T6281] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.015195][ T3572] usb 4-1: device descriptor read/64, error -71 [ 182.135685][ T3572] usb usb4-port1: attempt power cycle [ 182.237992][ T6224] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 182.564888][ T3572] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 182.618318][ T6311] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 182.675361][ T3572] usb 4-1: device descriptor read/8, error -71 [ 182.819897][ T6326] loop4: detected capacity change from 0 to 1024 [ 182.862443][ T6326] hfsplus: failed to load root directory [ 182.951929][ T3572] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 182.994895][ T404] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.011961][ T6326] loop4: detected capacity change from 0 to 512 [ 183.046383][ T3572] usb 4-1: device descriptor read/8, error -71 [ 183.096166][ T6340] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 183.119932][ T6326] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 183.147987][ T6326] ext4 filesystem being mounted at /root/syzkaller-testdir1174635931/syzkaller.qskq0A/182/file0 supports timestamps until 2038 (0x7fffffff) [ 183.175196][ T3572] usb usb4-port1: unable to enumerate USB device [ 183.850224][ T6385] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.904579][ T6369] chnl_net:caif_netlink_parms(): no params data found [ 184.073409][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.082356][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.106169][ T6369] device bridge_slave_0 entered promiscuous mode [ 184.136686][ T6369] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.172929][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.200893][ T6369] device bridge_slave_1 entered promiscuous mode [ 184.279244][ T404] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.313267][ T6369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.339813][ T6407] loop0: detected capacity change from 0 to 1024 [ 184.354321][ T6369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.389077][ T404] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.400655][ T6407] EXT4-fs (loop0): Ignoring removed nobh option [ 184.418624][ T6407] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.479479][ T6369] team0: Port device team_slave_0 added [ 184.503922][ T6369] team0: Port device team_slave_1 added [ 184.524970][ T6407] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 184.546464][ T6407] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz-executor.0: couldn't read orphan inode 11 (err -117) [ 184.559819][ T6407] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,dioread_nolock,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 184.579903][ T404] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.678150][ T6419] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.717168][ T6224] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 184.753849][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.790608][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.834124][ T6369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.860273][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.873865][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.901603][ T3570] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 184.919082][ T6369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.097676][ T6369] device hsr_slave_0 entered promiscuous mode [ 185.105309][ T3570] usb 1-1: device descriptor read/64, error -71 [ 185.141828][ T6369] device hsr_slave_1 entered promiscuous mode [ 185.163627][ T6369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.172908][ T6369] Cannot create hsr debugfs directory [ 185.280621][ T6449] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.374920][ T3570] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 185.565065][ T3570] usb 1-1: device descriptor read/64, error -71 [ 185.575851][ T6465] loop1: detected capacity change from 0 to 1024 [ 185.595460][ T3569] Bluetooth: hci5: command 0x0409 tx timeout [ 185.633800][ T6465] hfsplus: failed to load root directory [ 185.695074][ T3570] usb usb1-port1: attempt power cycle [ 185.740055][ T6465] loop1: detected capacity change from 0 to 512 [ 185.747152][ T6477] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.812502][ T6465] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 185.830445][ T6465] ext4 filesystem being mounted at /root/syzkaller-testdir3401589666/syzkaller.dkvDRT/98/file0 supports timestamps until 2038 (0x7fffffff) [ 186.344312][ T404] device hsr_slave_0 left promiscuous mode [ 186.369405][ T404] device hsr_slave_1 left promiscuous mode [ 186.423796][ T404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.448657][ T404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.520307][ T404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.555004][ T404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.593444][ T404] device bridge_slave_1 left promiscuous mode [ 186.598282][ T3570] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 186.631382][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.643815][ T404] device bridge_slave_0 left promiscuous mode [ 186.673484][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.690875][ T404] device veth1_macvtap left promiscuous mode [ 186.695331][ T3570] usb 1-1: device descriptor read/8, error -71 [ 186.699487][ T404] device veth0_macvtap left promiscuous mode [ 186.720044][ T404] device veth1_vlan left promiscuous mode [ 186.739693][ T404] device veth0_vlan left promiscuous mode [ 186.965155][ T3570] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 187.055106][ T3570] usb 1-1: device descriptor read/8, error -71 [ 187.081763][ T404] team0 (unregistering): Port device team_slave_1 removed [ 187.104159][ T404] team0 (unregistering): Port device team_slave_0 removed [ 187.119005][ T404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.136429][ T404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.175121][ T3570] usb usb1-port1: unable to enumerate USB device [ 187.235713][ T404] bond0 (unregistering): Released all slaves [ 187.403655][ T6369] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 187.431858][ T6369] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 187.450398][ T6530] loop1: detected capacity change from 0 to 1024 [ 187.466868][ T6369] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 187.482207][ T6369] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 187.526564][ T6530] hfsplus: failed to load root directory [ 187.608227][ T6530] loop1: detected capacity change from 0 to 512 [ 187.677237][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 187.697276][ T6369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.716169][ T6530] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 187.734904][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.743263][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.751977][ T6530] ext4 filesystem being mounted at /root/syzkaller-testdir3401589666/syzkaller.dkvDRT/105/file0 supports timestamps until 2038 (0x7fffffff) [ 187.778423][ T6369] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.793024][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.802987][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.813156][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.820330][ T3571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.849710][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.858660][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.869205][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.878433][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.885781][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.894647][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.904258][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.914214][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.931562][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.996022][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.015102][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.035904][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.055232][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.081036][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.110116][ T6369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.154392][ T6369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.190454][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.205829][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.440396][ T6558] loop3: detected capacity change from 0 to 1024 [ 188.539812][ T6558] EXT4-fs (loop3): Ignoring removed nobh option [ 188.555541][ T6558] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 188.574834][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.585804][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.631321][ T6369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.641632][ T6558] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 188.663170][ T6558] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz-executor.3: couldn't read orphan inode 11 (err -117) [ 188.676029][ T6558] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,dioread_nolock,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 188.725471][ T6568] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 188.796794][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.807726][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.866339][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.875330][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.884332][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.933364][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.954161][ T6369] device veth0_vlan entered promiscuous mode [ 188.983213][ T6369] device veth1_vlan entered promiscuous mode [ 188.994963][ T3572] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 189.082327][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 189.091398][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 189.134461][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.169979][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.191707][ T6369] device veth0_macvtap entered promiscuous mode [ 189.224917][ T3572] usb 4-1: device descriptor read/64, error -71 [ 189.237093][ T6369] device veth1_macvtap entered promiscuous mode [ 189.296820][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.325575][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.351943][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.373692][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.399172][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.440276][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.461933][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.485140][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.504966][ T3572] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 189.518181][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.535595][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.567347][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.575038][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.587698][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 189.609966][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.625867][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.659155][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.680389][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.701045][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.714973][ T3572] usb 4-1: device descriptor read/64, error -71 [ 189.744332][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.755550][ T3568] Bluetooth: hci5: command 0x040f tx timeout [ 189.794829][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.825964][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.845286][ T3572] usb usb4-port1: attempt power cycle [ 189.861211][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.892505][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.902966][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.913988][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.927186][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.962891][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.976398][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.994301][ T6369] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.038122][ T6369] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.058924][ T6369] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.076265][ T6369] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.094144][ T6600] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 190.209277][ T4056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.228364][ T4056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.263378][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 190.274989][ T3572] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 190.283391][ T3608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.315707][ T3608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.349394][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 190.435143][ T3572] usb 4-1: device descriptor read/8, error -71 [ 190.724973][ T3572] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 190.815200][ T3572] usb 4-1: device descriptor read/8, error -71 [ 190.932783][ T6634] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 190.944125][ T3572] usb usb4-port1: unable to enumerate USB device [ 191.544339][ T6651] loop3: detected capacity change from 0 to 1024 [ 191.591772][ T6651] hfsplus: failed to load root directory [ 191.692090][ T6651] loop3: detected capacity change from 0 to 512 [ 191.759814][ T6651] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 191.773281][ T6651] ext4 filesystem being mounted at /root/syzkaller-testdir4160038042/syzkaller.P0k0jM/108/file0 supports timestamps until 2038 (0x7fffffff) [ 191.834549][ T6667] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 192.008128][ T6673] loop4: detected capacity change from 0 to 1024 [ 192.069264][ T6673] EXT4-fs (loop4): Ignoring removed nobh option [ 192.082614][ T6673] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 192.106703][ T6673] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 192.265396][ T6673] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 11 (err -117) [ 192.304513][ T6673] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,dioread_nolock,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 192.725893][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 192.821597][ T6678] loop0: detected capacity change from 0 to 32768 [ 192.888206][ T6678] Dev loop0 SGI disklabel: csum bad, label corrupted [ 192.931385][ T155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.945050][ T21] usb 5-1: device descriptor read/64, error -71 [ 193.214889][ T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 193.425024][ T21] usb 5-1: device descriptor read/64, error -71 [ 193.553477][ T6699] chnl_net:caif_netlink_parms(): no params data found [ 193.561799][ T21] usb usb5-port1: attempt power cycle [ 193.637005][ T6699] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.644147][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.653518][ T6699] device bridge_slave_0 entered promiscuous mode [ 193.662729][ T6699] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.672498][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.681340][ T6699] device bridge_slave_1 entered promiscuous mode [ 193.721556][ T6718] loop3: detected capacity change from 0 to 1024 [ 193.754142][ T6699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.794706][ T6718] hfsplus: failed to load root directory [ 193.795243][ T6699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.837482][ T155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.860512][ T6699] team0: Port device team_slave_0 added [ 193.869151][ T6699] team0: Port device team_slave_1 added [ 193.891614][ T6718] loop3: detected capacity change from 0 to 512 [ 193.917693][ T6699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.925114][ T6699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.951974][ T6699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.985020][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 193.991971][ T155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.025883][ T6718] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 194.045089][ T6718] ext4 filesystem being mounted at /root/syzkaller-testdir4160038042/syzkaller.P0k0jM/112/file0 supports timestamps until 2038 (0x7fffffff) [ 194.061359][ T6699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.070108][ T6699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.105607][ T21] usb 5-1: device descriptor read/8, error -71 [ 194.118703][ T6699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.158786][ T155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.239077][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.246358][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.270014][ T6699] device hsr_slave_0 entered promiscuous mode [ 194.296037][ T6699] device hsr_slave_1 entered promiscuous mode [ 194.322585][ T6699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.351441][ T6699] Cannot create hsr debugfs directory [ 194.395350][ T21] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 194.525114][ T21] usb 5-1: device descriptor read/8, error -71 [ 194.645243][ T21] usb usb5-port1: unable to enumerate USB device [ 195.359901][ T3570] Bluetooth: hci5: command 0x0409 tx timeout [ 195.458090][ T6784] loop0: detected capacity change from 0 to 1024 [ 195.543565][ T6784] EXT4-fs (loop0): Ignoring removed nobh option [ 195.554910][ T6784] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 195.577985][ T6699] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 195.600926][ T6784] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 195.626845][ T6793] loop1: detected capacity change from 0 to 1024 [ 195.633075][ T6784] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz-executor.0: couldn't read orphan inode 11 (err -117) [ 195.657609][ T6784] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,dioread_nolock,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 195.685576][ T6699] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 195.702406][ T6699] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 195.720673][ T6699] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 195.738723][ T6793] hfsplus: failed to load root directory [ 195.867820][ T6793] loop1: detected capacity change from 0 to 512 [ 195.966671][ T6793] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 196.011956][ T6793] ext4 filesystem being mounted at /root/syzkaller-testdir3401589666/syzkaller.dkvDRT/130/file0 supports timestamps until 2038 (0x7fffffff) [ 196.027210][ T155] device hsr_slave_0 left promiscuous mode [ 196.035105][ T21] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 196.054585][ T155] device hsr_slave_1 left promiscuous mode [ 196.063834][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.089225][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.114930][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.132691][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.143578][ T155] device bridge_slave_1 left promiscuous mode [ 196.155417][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.166721][ T155] device bridge_slave_0 left promiscuous mode [ 196.183487][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.202528][ T155] device veth1_macvtap left promiscuous mode [ 196.213191][ T155] device veth0_macvtap left promiscuous mode [ 196.225043][ T155] device veth1_vlan left promiscuous mode [ 196.235193][ T155] device veth0_vlan left promiscuous mode [ 196.295522][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 196.426428][ T21] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 196.437426][ T21] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 196.455118][ T21] usb 1-1: config 135 has no interface number 0 [ 196.461543][ T21] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.676360][ T21] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 196.698555][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.721023][ T21] usb 1-1: Product: syz [ 196.735380][ T21] usb 1-1: Manufacturer: syz [ 196.742645][ T21] usb 1-1: SerialNumber: syz [ 196.922538][ T155] team0 (unregistering): Port device team_slave_1 removed [ 196.954141][ T155] team0 (unregistering): Port device team_slave_0 removed [ 196.980866][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.014461][ T21] usb 1-1: USB disconnect, device number 9 [ 197.035711][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.141656][ T155] bond0 (unregistering): Released all slaves [ 197.232813][ T6699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.269508][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.285773][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.297726][ T6699] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.328650][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.341013][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.355988][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.363159][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.427871][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.443915][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.445454][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 197.453737][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.468751][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.475930][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.484213][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.504607][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.550287][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.567571][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.576829][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.586981][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.612492][ T6699] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.625795][ T6699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.671535][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.680522][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.689361][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.698930][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.707926][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.718640][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.961762][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.974398][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.005476][ T6699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.071135][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.089282][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.157024][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.195681][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.207095][ T6699] device veth0_vlan entered promiscuous mode [ 198.240611][ T6699] device veth1_vlan entered promiscuous mode [ 198.252773][ T6861] loop4: detected capacity change from 0 to 1024 [ 198.269013][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.270912][ T6864] loop1: detected capacity change from 0 to 1024 [ 198.278342][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.290994][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 198.343366][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.355216][ T6864] EXT4-fs (loop1): Ignoring removed nobh option [ 198.357427][ T6861] hfsplus: failed to load root directory [ 198.369672][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.372291][ T6864] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 198.384565][ T6699] device veth0_macvtap entered promiscuous mode [ 198.410382][ T6699] device veth1_macvtap entered promiscuous mode [ 198.433857][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.452126][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.471781][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.493259][ T6864] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 198.517206][ T6864] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz-executor.1: couldn't read orphan inode 11 (err -117) [ 198.545337][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.566813][ T6864] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,dioread_nolock,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 198.618536][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.658498][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.694867][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.738067][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.774884][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.798109][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.826327][ T6699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.849340][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.868728][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 198.870146][ T6861] loop4: detected capacity change from 0 to 512 [ 198.904998][ T7] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 198.913609][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.923075][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.949870][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.975318][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.980131][ T6861] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 199.001941][ T6861] ext4 filesystem being mounted at /root/syzkaller-testdir1174635931/syzkaller.qskq0A/232/file0 supports timestamps until 2038 (0x7fffffff) [ 199.016443][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.016468][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.016490][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.133159][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.173894][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.185156][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 199.222525][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.243381][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.265224][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.303750][ T6699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.311377][ T7] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 199.335379][ T7] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 199.355891][ T7] usb 2-1: config 135 has no interface number 0 [ 199.362649][ T7] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.368229][ T6875] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 199.411577][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.449931][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.468913][ T6699] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.495212][ T6699] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.524485][ T6699] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.545122][ T7] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 199.547323][ T3572] Bluetooth: hci5: command 0x040f tx timeout [ 199.554206][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.554231][ T7] usb 2-1: Product: syz [ 199.554248][ T7] usb 2-1: Manufacturer: syz [ 199.554265][ T7] usb 2-1: SerialNumber: syz [ 199.604961][ T6699] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.945972][ T3572] usb 2-1: USB disconnect, device number 14 [ 199.981655][ T404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.021001][ T404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.097665][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 200.146461][ T404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.210453][ T404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.287926][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 200.718112][ T6956] loop3: detected capacity change from 0 to 1024 [ 200.806516][ T6956] hfsplus: failed to load root directory [ 200.942280][ T6967] loop4: detected capacity change from 0 to 1024 [ 200.988435][ T6956] loop3: detected capacity change from 0 to 512 [ 201.047780][ T6967] EXT4-fs (loop4): Ignoring removed nobh option [ 201.060616][ T6967] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 201.130704][ T6956] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 201.143858][ T6967] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 201.151089][ T6956] ext4 filesystem being mounted at /root/syzkaller-testdir4160038042/syzkaller.P0k0jM/133/file0 supports timestamps until 2038 (0x7fffffff) [ 201.179954][ T6967] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 11 (err -117) [ 201.204829][ T6967] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,dioread_nolock,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 201.575099][ T3569] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 202.022739][ T5227] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.275810][ T3569] usb 5-1: Using ep0 maxpacket: 8 [ 202.395089][ T3569] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 202.414846][ T3569] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 202.434839][ T3569] usb 5-1: config 135 has no interface number 0 [ 202.441472][ T3569] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.615384][ T3569] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 202.624510][ T3569] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.664395][ T3569] usb 5-1: Product: syz [ 202.681226][ T7043] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 202.691304][ T3569] usb 5-1: Manufacturer: syz [ 202.701432][ T3569] usb 5-1: SerialNumber: syz [ 202.809445][ T7048] loop0: detected capacity change from 0 to 1024 [ 202.870214][ T7024] chnl_net:caif_netlink_parms(): no params data found [ 202.884705][ T7048] hfsplus: failed to load root directory [ 202.948184][ T3567] usb 5-1: USB disconnect, device number 8 [ 202.988019][ T7048] loop0: detected capacity change from 0 to 512 [ 203.017636][ T7024] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.025296][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.033692][ T7024] device bridge_slave_0 entered promiscuous mode [ 203.043031][ T7024] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.053388][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.062852][ T7024] device bridge_slave_1 entered promiscuous mode [ 203.080418][ T7048] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 203.100415][ T7048] ext4 filesystem being mounted at /root/syzkaller-testdir1584202560/syzkaller.P0DgbL/237/file0 supports timestamps until 2038 (0x7fffffff) [ 203.122337][ T7024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.148554][ T7024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.212221][ T7024] team0: Port device team_slave_0 added [ 203.233274][ T7024] team0: Port device team_slave_1 added [ 203.291875][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.313579][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.351302][ T7024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.351401][ T7081] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.390548][ T5227] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.550737][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.561128][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.611050][ T7024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.677390][ T5227] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.756401][ T7024] device hsr_slave_0 entered promiscuous mode [ 203.764301][ T7024] device hsr_slave_1 entered promiscuous mode [ 203.778700][ T7024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.801743][ T7024] Cannot create hsr debugfs directory [ 204.000946][ T5227] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.280717][ T7113] loop0: detected capacity change from 0 to 1024 [ 204.350982][ T7113] EXT4-fs (loop0): Ignoring removed nobh option [ 204.351546][ T7119] loop1: detected capacity change from 0 to 1024 [ 204.371184][ T7118] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.374242][ T7113] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 204.417598][ T7113] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 204.418772][ T7119] hfsplus: failed to load root directory [ 204.445673][ T7113] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz-executor.0: couldn't read orphan inode 11 (err -117) [ 204.465295][ T7113] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,dioread_nolock,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 204.555126][ T23] Bluetooth: hci5: command 0x0409 tx timeout [ 204.564159][ T7119] loop1: detected capacity change from 0 to 512 [ 204.632457][ T7119] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 204.654869][ T7119] ext4 filesystem being mounted at /root/syzkaller-testdir3401589666/syzkaller.dkvDRT/156/file0 supports timestamps until 2038 (0x7fffffff) [ 204.764918][ T3567] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 205.014920][ T3567] usb 1-1: Using ep0 maxpacket: 8 [ 205.135193][ T3567] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 205.155578][ T3567] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 205.214922][ T3567] usb 1-1: config 135 has no interface number 0 [ 205.243769][ T3567] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.277859][ T7024] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 205.320735][ T7024] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 205.339850][ T7024] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 205.352628][ T7154] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.377987][ T7024] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 205.475152][ T3567] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 205.494935][ T3567] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.519067][ T3567] usb 1-1: Product: syz [ 205.536896][ T3567] usb 1-1: Manufacturer: syz [ 205.542116][ T3567] usb 1-1: SerialNumber: syz [ 205.621454][ T7024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.668083][ T5227] device hsr_slave_0 left promiscuous mode [ 205.678920][ T5227] device hsr_slave_1 left promiscuous mode [ 205.686485][ T5227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.693965][ T5227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.703677][ T5227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.711181][ T5227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.721056][ T5227] device bridge_slave_1 left promiscuous mode [ 205.727491][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.738243][ T5227] device bridge_slave_0 left promiscuous mode [ 205.744559][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.768767][ T5227] device veth1_macvtap left promiscuous mode [ 205.779889][ T5227] device veth0_macvtap left promiscuous mode [ 205.790976][ T5227] device veth1_vlan left promiscuous mode [ 205.791257][ T7] usb 1-1: USB disconnect, device number 10 [ 205.800937][ T5227] device veth0_vlan left promiscuous mode [ 206.149833][ T5227] team0 (unregistering): Port device team_slave_1 removed [ 206.170997][ T5227] team0 (unregistering): Port device team_slave_0 removed [ 206.198546][ T5227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.224038][ T7187] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 206.245716][ T5227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.253710][ T7189] loop4: detected capacity change from 0 to 1024 [ 206.355108][ T7189] hfsplus: failed to load root directory [ 206.359977][ T5227] bond0 (unregistering): Released all slaves [ 206.444397][ T7024] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.466257][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.472684][ T7189] loop4: detected capacity change from 0 to 512 [ 206.483674][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.536689][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.556212][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.564723][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.572040][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.601380][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.625617][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.635278][ T3566] Bluetooth: hci5: command 0x041b tx timeout [ 206.651672][ T7189] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 206.655753][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.668066][ T7189] ext4 filesystem being mounted at /root/syzkaller-testdir1174635931/syzkaller.qskq0A/251/file0 supports timestamps until 2038 (0x7fffffff) [ 206.671384][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.871147][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.903981][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.912714][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.931349][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.981326][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.030933][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.051861][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.077279][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.105647][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.124134][ T7024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.163803][ T7024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.199032][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.217777][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.245371][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.662646][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.684349][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.715843][ T7024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.796652][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.816347][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.869976][ T7234] loop3: detected capacity change from 0 to 1024 [ 207.878312][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.889576][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.911215][ T7024] device veth0_vlan entered promiscuous mode [ 207.925823][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.934675][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.947130][ T7234] EXT4-fs (loop3): Ignoring removed nobh option [ 207.963707][ T7234] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 207.982608][ T7024] device veth1_vlan entered promiscuous mode [ 208.024423][ T7234] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 208.085447][ T7234] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz-executor.3: couldn't read orphan inode 11 (err -117) [ 208.088462][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.107342][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.117908][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.125301][ T7234] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,dioread_nolock,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 208.126874][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.169176][ T7024] device veth0_macvtap entered promiscuous mode [ 208.185966][ T7237] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.209151][ T7024] device veth1_macvtap entered promiscuous mode [ 208.296568][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.326089][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.360775][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.391994][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.430842][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.456074][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.475177][ T3572] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 208.499358][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.527982][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.543007][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.570580][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.593766][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.610907][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.629332][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.641096][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.665220][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.686457][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.718974][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.725313][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 208.739255][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.743110][ T3572] usb 4-1: Using ep0 maxpacket: 8 [ 208.765090][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.790782][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.801842][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.824327][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.846922][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.867900][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.889105][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.905205][ T3572] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 208.922270][ T3572] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 208.930453][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.950323][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.960639][ T3572] usb 4-1: config 135 has no interface number 0 [ 208.968559][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.983108][ T3572] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.998691][ T7024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.025277][ T7024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.045803][ T7024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.068616][ T7024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.215089][ T3572] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 209.232636][ T3572] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.241610][ T3608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.258266][ T3608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.268254][ T3572] usb 4-1: Product: syz [ 209.281668][ T3572] usb 4-1: Manufacturer: syz [ 209.304897][ T3572] usb 4-1: SerialNumber: syz [ 209.308893][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.334219][ T3608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.349161][ T3608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.361482][ T7268] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.391443][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 209.583249][ T3572] usb 4-1: USB disconnect, device number 18 [ 209.604636][ T7273] loop4: detected capacity change from 0 to 1024 [ 209.678360][ T7273] hfsplus: failed to load root directory [ 209.784555][ T7273] loop4: detected capacity change from 0 to 512 [ 209.909508][ T7273] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 209.935447][ T7273] ext4 filesystem being mounted at /root/syzkaller-testdir1174635931/syzkaller.qskq0A/253/file0 supports timestamps until 2038 (0x7fffffff) 2024/06/22 00:45:27 SYZFATAL: executor 2 failed 11 times: executor 2: exit status 67 err exit status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 exit status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 exit status 67 [ 211.360064][ T5227] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.490340][ T5227] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0