last executing test programs: 7.466603129s ago: executing program 1 (id=383): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x20, 0x6c, 0x1}, 0x20}}, 0x0) 7.282756544s ago: executing program 1 (id=385): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000740)=0xa0000) r2 = dup(r1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7cb, &(0x7f0000000100)={&(0x7f0000001100)={{@local}, {@hyper}, 0x400, "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"}, 0x418}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.043790624s ago: executing program 1 (id=388): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x5bc, &(0x7f0000000000)="$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") r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.243921509s ago: executing program 1 (id=392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) fsopen(0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x813014, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(r3, &(0x7f00000061c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r4, @ANYRESHEX=r5, @ANYBLOB=',\x00']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000340)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1a, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"054b3b0518c4"}}}}}}}, 0x0) 5.86375624s ago: executing program 4 (id=398): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x78, r4, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x5a, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {}, @broadcast, @device_b, @random="15c1e9681747"}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 5.030389128s ago: executing program 1 (id=399): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000740)=0xa0000) r2 = dup(r1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7cb, &(0x7f0000000100)={&(0x7f0000001100)={{@local}, {@hyper}, 0x400, "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"}, 0x418}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.00676785s ago: executing program 2 (id=401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@base={0xa, 0x2, 0x9, 0x9}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 4.921666917s ago: executing program 4 (id=402): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x4, 0x241, &(0x7f00000002c0)="$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") timer_create(0xfffffffffffffffc, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f0000000c40)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000040)=ANY=[], 0x1, 0x5e7, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 4.636925331s ago: executing program 2 (id=404): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 4.541911219s ago: executing program 2 (id=406): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x7d, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) 4.462000085s ago: executing program 4 (id=408): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x42, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0) 4.461318295s ago: executing program 2 (id=409): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x10000) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x100) listen(r1, 0x8) r3 = socket$inet(0xa, 0x801, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000640)={0x0, 0x4, 0x9, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000a40)={r4, 0xd40, 0x5}) listen(r3, 0x8) r5 = syz_usbip_server_init(0x3) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/39, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000140)={0x2, 0x0, [{0x0, 0x8a, &(0x7f00000003c0)=""/138}, {0x0, 0xfc, &(0x7f0000000540)=""/252}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f00000002c0)=0x4000000) write$usbip_server(r5, &(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYRES32=r0], 0x1be7) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x1) r8 = socket$inet(0xa, 0x3, 0xf) listen(r8, 0x8) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) 4.129137102s ago: executing program 0 (id=411): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4.128444042s ago: executing program 4 (id=412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) fsopen(0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x813014, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(r3, &(0x7f00000061c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r4, @ANYRESHEX=r5, @ANYBLOB=',\x00']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000340)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1a, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"054b3b0518c4"}}}}}}}, 0x0) 3.840707556s ago: executing program 0 (id=413): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x14, r1, 0x1}, 0x14}}, 0x0) 3.041285921s ago: executing program 0 (id=414): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) close(r0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)) 3.032835352s ago: executing program 4 (id=415): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x7}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000300)) 2.958345788s ago: executing program 2 (id=417): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 2.904146072s ago: executing program 0 (id=418): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 2.830867288s ago: executing program 0 (id=420): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000040, &(0x7f00000004c0)=ANY=[@ANYBLOB='gid=forget,umask=00000000000000000000003,gid=', @ANYRESDEC=0x0, @ANYBLOB=',session=00000000000000043620,gid=ignore,iocharset=euc-jp,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c6164696e6963622c6d6f64653d30303030303030303030303030303030303030303030332c6e6f7374726963742c009b801a9990a34c426430bf3757fbcea5d9a21b29b4ae2c6d10e74873111016bc74ff654722640a72d8cc5e210fef2b359e9e61ade82c60025773de99df3af6548534bfdef68d88ae15c726"], 0xfe, 0xc2d, &(0x7f0000000f40)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80000000) 2.733608907s ago: executing program 1 (id=421): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001e00995e00000000000000000c00000000000000000001"], 0x1c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000000000000000000000bfa1a563f377b5e297266f100d8cc1982461f8822afae4ba8c1cfa197633d4b492a8fbf7d13ffc0d0a1154c3f63714c49bd4b5b7e53c3f874b102a75e322ab3d371fccfe4b2f32d6131dfb8730b6af75493745835093eaf1b611cf287b2482e0c280c76aa4229b1f38a4b2d0558ccc20126aa1"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0400292020"], 0x7) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x100000000000600d, 0x1) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0x48, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x0, 0x0, 0x0, 0x300}}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000003380)) eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) 1.875831256s ago: executing program 2 (id=423): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r5}, 0x90) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x0, 0x8000, 0x4, 0xcd}, 0x48) fchmodat(0xffffffffffffffff, &(0x7f0000000440)='./file3\x00', 0x0) clock_gettime(0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x2, 0x17d, &(0x7f00000004c0)="$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") execve(&(0x7f0000000040)='./file2\x00', 0x0, 0x0) 1.844830099s ago: executing program 0 (id=424): syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000006}, {@dev}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) 1.577137591s ago: executing program 3 (id=426): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000180)={[{@fat=@flush}, {@uni_xlate}, {@numtail}, {@rodir}, {@utf8}, {@numtail}, {@uni_xlate}, {@numtail}, {@uni_xlateno}, {@utf8}, {@uni_xlateno}, {@utf8}, {@uni_xlate}, {@numtail}, {@fat=@dos1xfloppy}, {@rodir}, {@uni_xlate}, {@fat=@quiet}]}, 0xf5, 0x2f0, &(0x7f0000000f80)="$eJzs3ctrE0EcwPFf3klrTQ8iIgpDBVGkSxPw5sEiLYgBpW0EKwhbu9WQbVKyoRAR24Pg1bOHHjyKIII3LyJee/Ev8HXrpTcLFlc2u5umyZqmlT79fg7NdOf325ndme1j2uyuXHk+W5yxtF92VJr1S1giXnlRLn5a+np2/OMx93OlRocnMlmlwiJy9/HrgQ/V3tvvjr9PyHL/vZXV7I/lMxMivyceSlgVLFWybdtWU+VyNeQkTxesoqbULdPQLUMVSpZRqSq9Xq9PmYaaMctzczWll6b7euYqhmUpvVRTRaOmqmVVrdSU/kAvlJSmaaqvR1AfLF+4rS7UKTH/as22ZdUZoMSi2LYdEL3oF2Lea+LfOouDpGX8O8a2TY7IbvYMe2HNjjbGP77F+OPoca//by+6uf5x9IzfmbwxnMuNjCmVFJl9Np+fz7uvbv2XXimIKYYsjV2aXBdnjngk5HwcvZ4bGVJ1/XJ+dsHLX5jPu98chme8/IyknZ9TmvLFz8+4+Wpzfkx6mvOzkpYTwflZP1/CTflxuXCuKV+TtHy+L2UxZVqc3I38Jxmlrt3MtbSfqscBAAAAAAAAAHAYaaphY/0+1PhTb0rTEvX/+GjUp5zNTpwb0FhfH5K0rAevzw8Fru9H5XR0Hw8cAAAAAID/iFV7VNRN06jsTiHyMtWhiZiIOAWRpwNOZzru8KTX4+5aj4tIe1WkcxObCqnLbntvxryOyW6eqB0WwiLSvMV9s4Zz8OZbPyYlQenhbU2AwXjgmU/u6SFLN8GS3NnETnQ9tVoLoXV/y6nAGDu09X5s3Yy5W/wLc6vWr27rcvhrIdl6oga/u/s1O3zR+NlY4gMAAABwiDT94gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbJjm4e5t+3f3OVeI+Ib78lW+tz4rnvPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAD6E8AAAD//+b9sCg=") 771.549927ms ago: executing program 4 (id=427): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) timer_create(0x1, &(0x7f0000000040)={0x0, 0x0, 0x2, @tid=r0}, &(0x7f0000000080)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000000c0)) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f00000001c0)) semget(0x1, 0x4, 0x660) 538.288636ms ago: executing program 3 (id=429): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r0) r1 = socket$unix(0x1, 0x1, 0x0) setgroups(0x1, &(0x7f0000000000)=[0x0]) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) 387.869668ms ago: executing program 3 (id=430): r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) write$damon_schemes(r0, 0x0, 0x0) 290.937536ms ago: executing program 3 (id=431): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000740)=0xa0000) r2 = dup(r1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7cb, &(0x7f0000000100)={&(0x7f0000001100)={{@local}, {@hyper}, 0x400, "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"}, 0x418}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 183.152715ms ago: executing program 3 (id=432): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) close(r0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)) 0s ago: executing program 3 (id=433): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): veth0: link becomes ready [ 56.171977][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.180829][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.190493][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.205110][ T3544] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.232162][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.240235][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.249653][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.273566][ T3546] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.284991][ T3546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.301979][ T3550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.314850][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.324312][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.333547][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.340681][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.349056][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.357641][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.365944][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.373035][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.381509][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.390372][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.398942][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.407762][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.415967][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.425406][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.433516][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.459330][ T3550] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.467891][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.479148][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.493439][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.503691][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.515946][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.533974][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.547367][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.585383][ T3544] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.605853][ T3544] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.642974][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.651310][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.666165][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.674795][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.688864][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.701350][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.712456][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.721425][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.728537][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.736519][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.746836][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.755126][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.762226][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.770948][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.780425][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.788199][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.818711][ T3546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.833060][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.841362][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.849103][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.904438][ T3545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.921601][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.931820][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.941927][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.952028][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.960892][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.968407][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.975785][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.985854][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.994323][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.002836][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.017837][ T3557] Bluetooth: hci0: command tx timeout [ 57.017854][ T3559] Bluetooth: hci2: command tx timeout [ 57.023231][ T3557] Bluetooth: hci3: command tx timeout [ 57.029052][ T3559] Bluetooth: hci1: command tx timeout [ 57.034023][ T3561] Bluetooth: hci4: command tx timeout [ 57.039712][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.052921][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.061815][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.077948][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.117718][ T3554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.135484][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.144630][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.153733][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.162300][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.183879][ T3545] device veth0_vlan entered promiscuous mode [ 57.213163][ T3546] device veth0_vlan entered promiscuous mode [ 57.226961][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.234682][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.249792][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.258829][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.273205][ T3545] device veth1_vlan entered promiscuous mode [ 57.287671][ T3554] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.310265][ T3544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.317348][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.325008][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.332877][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.341831][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.349828][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.357479][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.364838][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.374037][ T3546] device veth1_vlan entered promiscuous mode [ 57.416856][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.427436][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.435474][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.443991][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.453793][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.462485][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.469620][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.477679][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.486785][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.495319][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.502462][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.511369][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.535280][ T3545] device veth0_macvtap entered promiscuous mode [ 57.556595][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.564486][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.573406][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.582348][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.590940][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.599859][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.608340][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.617020][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.647404][ T3546] device veth0_macvtap entered promiscuous mode [ 57.656789][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.664823][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.676280][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.684881][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.694188][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.702729][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.711052][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.718680][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.726267][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.736501][ T3546] device veth1_macvtap entered promiscuous mode [ 57.746844][ T3545] device veth1_macvtap entered promiscuous mode [ 57.761347][ T3544] device veth0_vlan entered promiscuous mode [ 57.770691][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.779019][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.787227][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.795699][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.804162][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.812441][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.837858][ T3546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.851260][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.859415][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.867343][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.875752][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.887139][ T3550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.907421][ T3554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.918943][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.934282][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.943680][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.952669][ T3544] device veth1_vlan entered promiscuous mode [ 57.966040][ T3546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.979009][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.991291][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.003608][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.014164][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.023040][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.045191][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.054423][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.064678][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.073572][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.084770][ T3546] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.095715][ T3546] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.104549][ T3546] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.113433][ T3546] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.132234][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.144475][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.156360][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.187468][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.198944][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.207997][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.241996][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.259185][ T3545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.274019][ T3545] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.283735][ T3545] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.292780][ T3545] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.307602][ T3544] device veth0_macvtap entered promiscuous mode [ 58.345213][ T3544] device veth1_macvtap entered promiscuous mode [ 58.393649][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.403234][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.412056][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.424897][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.445839][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.460102][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.471309][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.482368][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.494655][ T3544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.504851][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.515515][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.525650][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.537663][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.549165][ T3544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.557667][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.566279][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.574899][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.583622][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.617350][ T3554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.660039][ T3544] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.671051][ T3544] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.680364][ T3544] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.680678][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.689156][ T3544] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.712079][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.712794][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.734143][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.734889][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.767054][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.780860][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.790408][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.799941][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.835012][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.843050][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.851596][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.871733][ T3550] device veth0_vlan entered promiscuous mode [ 58.887869][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.895667][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.912568][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.913967][ T3554] device veth0_vlan entered promiscuous mode [ 58.926818][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.942699][ T3550] device veth1_vlan entered promiscuous mode [ 58.962370][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.975912][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.983814][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.992698][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.002229][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.010032][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.037114][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.045697][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.060904][ T3554] device veth1_vlan entered promiscuous mode [ 59.081084][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.093670][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.103678][ T3559] Bluetooth: hci1: command tx timeout [ 59.103873][ T3561] Bluetooth: hci2: command tx timeout [ 59.109099][ T3559] Bluetooth: hci0: command tx timeout [ 59.109185][ T3559] Bluetooth: hci4: command tx timeout [ 59.109210][ T3559] Bluetooth: hci3: command tx timeout [ 59.123142][ T3550] device veth0_macvtap entered promiscuous mode [ 59.142447][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.151798][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.160111][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.169403][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.180611][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.188727][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.197149][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.208677][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.247242][ T3550] device veth1_macvtap entered promiscuous mode [ 59.285539][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.293553][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.308647][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.313547][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.323053][ T3627] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 59.329623][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.339185][ T3627] Bluetooth: MGMT ver 1.22 [ 59.350898][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.362084][ T3554] device veth0_macvtap entered promiscuous mode [ 59.382706][ T3554] device veth1_macvtap entered promiscuous mode [ 59.405635][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.418042][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.460470][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.487980][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.498720][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.506856][ T3631] loop0: detected capacity change from 0 to 2048 [ 59.516455][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.526408][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.536948][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.549886][ T3550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.568466][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.579832][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.596469][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.629996][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.640434][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.652516][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.665858][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.677481][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.712539][ T3550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.735756][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.763387][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.774102][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.791187][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.801392][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.812496][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.836529][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.836756][ T3631] loop0: unable to read partition table [ 59.850869][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.863247][ T3631] loop0: partition table beyond EOD, truncated [ 59.875109][ T3631] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 59.878462][ T3554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.922868][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.933684][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.961225][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.983108][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.012165][ T3550] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.033624][ T3550] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.045765][ T3550] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.049050][ T3002] loop0: unable to read partition table [ 60.057885][ T3550] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.080867][ T3002] loop0: partition table beyond EOD, truncated [ 60.095320][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.117547][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.148073][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.159118][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.169400][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.180071][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.190662][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.209994][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.224423][ T3554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.251027][ T3643] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10'. [ 60.270190][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.274248][ T26] audit: type=1326 audit(1721148523.790:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3642 comm="syz.2.10" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14d4775bd9 code=0x0 [ 60.286806][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.310571][ T3563] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 60.332363][ T3635] loop1: detected capacity change from 0 to 32768 [ 60.369665][ T3646] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.391245][ T3554] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.425565][ T3554] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.440680][ T3554] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.445236][ T3635] find_entry called with index = 0 [ 60.449711][ T3554] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.478637][ T3635] read_mapping_page failed! [ 60.497971][ T3635] ERROR: (device loop1): txCommit: [ 60.497971][ T3635] [ 60.521460][ T3635] ERROR: (device loop1): remounting filesystem as read-only [ 60.619822][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.632649][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.654090][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.736394][ T3639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.748086][ T3639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.766965][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.774977][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.832368][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.841508][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.861075][ T3639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.882484][ T3639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.910046][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.176383][ T3561] Bluetooth: hci2: command tx timeout [ 61.181879][ T3561] Bluetooth: hci3: command tx timeout [ 61.187325][ T3561] Bluetooth: hci4: command tx timeout [ 61.188116][ T3557] Bluetooth: hci0: command tx timeout [ 61.192700][ T3561] Bluetooth: hci1: command tx timeout [ 61.213504][ T3670] loop4: detected capacity change from 0 to 1024 [ 61.221568][ T3670] EXT4-fs: Ignoring removed orlov option [ 61.227329][ T3670] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.247682][ T3675] loop0: detected capacity change from 0 to 1024 [ 61.308459][ T3670] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 61.317895][ T3675] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 61.331576][ T3684] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22'. [ 61.351913][ T3670] System zones: 0-1, 3-36 [ 61.376271][ T3670] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 61.523223][ T3545] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 61.588427][ T3545] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 61.617378][ T3550] EXT4-fs (loop4): unmounting filesystem. [ 61.623998][ T3545] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 61.665946][ T3545] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 61.740875][ T3545] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 62.515940][ T3699] netlink: 56 bytes leftover after parsing attributes in process `syz.1.28'. [ 62.547107][ T26] audit: type=1326 audit(1721148526.050:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3698 comm="syz.1.28" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f91d75bd9 code=0x0 [ 62.573739][ T3545] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 62.612441][ T3545] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 62.653819][ T3545] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 62.693129][ T3545] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 62.718912][ T3710] loop3: detected capacity change from 0 to 64 [ 62.725827][ T3545] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 63.171747][ T3685] loop2: detected capacity change from 0 to 32768 [ 63.233325][ T3685] XFS (loop2): Mounting V5 Filesystem [ 63.332991][ T3729] loop1: detected capacity change from 0 to 1024 [ 63.344262][ T3545] EXT4-fs (loop0): unmounting filesystem. [ 63.353935][ T3685] XFS (loop2): Ending clean mount [ 63.373651][ T3729] ======================================================= [ 63.373651][ T3729] WARNING: The mand mount option has been deprecated and [ 63.373651][ T3729] and is ignored by this kernel. Remove the mand [ 63.373651][ T3729] option from the mount to silence this warning. [ 63.373651][ T3729] ======================================================= [ 63.475560][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.497663][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 63.537285][ T3729] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 63.573477][ T3703] hfsplus: b-tree write err: -5, ino 4 [ 63.614039][ T3544] XFS (loop2): Unmounting Filesystem [ 63.647380][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.742548][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 63.795011][ T3732] loop1: detected capacity change from 0 to 512 [ 63.824052][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.859438][ T3732] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 63.873188][ T7] usb 4-1: New USB device found, idVendor=0c45, idProduct=624c, bcdDevice=15.f2 [ 63.904896][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.907248][ T3736] loop4: detected capacity change from 0 to 128 [ 63.949637][ T7] usb 4-1: config 0 descriptor?? [ 63.988911][ T7] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624c [ 64.013077][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.052462][ T3732] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #16: comm syz.1.39: iget: bad extended attribute block 128 [ 64.064478][ T3740] ALSA: seq fatal error: cannot create timer (-22) [ 64.086039][ T3732] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.39: couldn't read orphan inode 16 (err -117) [ 64.119622][ T3732] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 64.178987][ T3732] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038 (0x7fffffff) [ 64.207396][ T7] gspca_sn9c20x: Write register 1000 failed -71 [ 64.218009][ T7] gspca_sn9c20x: Device initialization failed [ 64.231959][ T3745] loop4: detected capacity change from 0 to 256 [ 64.234030][ T7] gspca_sn9c20x: probe of 4-1:0.0 failed with error -71 [ 64.311100][ T7] usb 4-1: USB disconnect, device number 2 [ 64.317826][ T3732] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.39: bg 0: block 352: padding at end of block bitmap is not set [ 64.359037][ T3745] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 64.403475][ T3732] EXT4-fs error (device loop1): ext4_xattr_block_set:2191: inode #12: comm syz.1.39: bad block 0 [ 64.418034][ T3561] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.435967][ T3557] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.445458][ T3557] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.454355][ T3557] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.462838][ T3557] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.471052][ T3557] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.793474][ T26] audit: type=1800 audit(1721148528.310:4): pid=3732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.39" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 64.794517][ T3732] Quota error (device loop1): write_blk: dquota write failed [ 64.812688][ C1] vkms_vblank_simulate: vblank timer overrun [ 64.873739][ T3732] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 64.921591][ T3732] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.39: Failed to acquire dquot type 1 [ 64.954730][ T3765] netlink: 32 bytes leftover after parsing attributes in process `syz.3.48'. [ 65.035520][ T3768] Bluetooth: MGMT ver 1.22 [ 65.109797][ T3546] EXT4-fs (loop1): unmounting filesystem. [ 65.174858][ T3774] loop2: detected capacity change from 0 to 512 [ 65.270673][ T3778] ALSA: seq fatal error: cannot create timer (-22) [ 65.270866][ T3774] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.50: bg 0: block 248: padding at end of block bitmap is not set [ 65.294932][ T3774] Quota error (device loop2): write_blk: dquota write failed [ 65.314057][ T3774] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 65.344926][ T3774] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.50: Failed to acquire dquot type 1 [ 65.422536][ T3774] EXT4-fs (loop2): 1 truncate cleaned up [ 65.433740][ T3774] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 65.454987][ T3747] chnl_net:caif_netlink_parms(): no params data found [ 65.486389][ T3774] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 65.767324][ T3544] EXT4-fs (loop2): unmounting filesystem. [ 66.546242][ T3557] Bluetooth: hci0: command tx timeout [ 66.622512][ T3809] loop4: detected capacity change from 0 to 512 [ 66.660984][ T3811] netlink: 32 bytes leftover after parsing attributes in process `syz.1.62'. [ 66.718300][ T3820] ALSA: seq fatal error: cannot create timer (-22) [ 67.050683][ T3809] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz.4.61: iget: bad extended attribute block 128 [ 67.313223][ T3809] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.61: couldn't read orphan inode 16 (err -117) [ 67.522208][ T3809] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 67.546370][ T3809] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038 (0x7fffffff) [ 67.639477][ T3809] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.61: bg 0: block 352: padding at end of block bitmap is not set [ 67.684646][ T3809] EXT4-fs error (device loop4): ext4_xattr_block_set:2191: inode #12: comm syz.4.61: bad block 0 [ 67.770848][ T3815] device pim6reg1 entered promiscuous mode [ 67.790722][ T3747] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.807119][ T3747] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.830487][ T3747] device bridge_slave_0 entered promiscuous mode [ 67.916323][ T3747] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.939357][ T3747] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.973657][ T3747] device bridge_slave_1 entered promiscuous mode [ 68.009888][ T26] audit: type=1800 audit(1721148531.530:5): pid=3837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.61" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 68.033059][ T3837] Quota error (device loop4): write_blk: dquota write failed [ 68.054834][ T3847] loop1: detected capacity change from 0 to 1024 [ 68.064439][ T3837] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 68.085510][ T3837] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.61: Failed to acquire dquot type 1 [ 68.124262][ T3847] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 68.247342][ T57] device hsr_slave_0 left promiscuous mode [ 68.254070][ T57] device hsr_slave_1 left promiscuous mode [ 68.262525][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.270577][ T3550] EXT4-fs (loop4): unmounting filesystem. [ 68.271955][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.297539][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.309154][ T3546] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 68.321676][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.343913][ T57] device bridge_slave_1 left promiscuous mode [ 68.363204][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.375681][ T3546] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 68.409710][ T57] device bridge_slave_0 left promiscuous mode [ 68.422765][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.437975][ T3546] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 68.479150][ T3546] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 68.493897][ T57] device veth1_macvtap left promiscuous mode [ 68.504691][ T57] device veth0_macvtap left promiscuous mode [ 68.515517][ T3546] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 68.532681][ T57] device veth1_vlan left promiscuous mode [ 68.544177][ T57] device veth0_vlan left promiscuous mode [ 68.570557][ T3546] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 68.594313][ T3546] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 68.634368][ T3557] Bluetooth: hci0: command tx timeout [ 68.809835][ T3546] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 69.414799][ T3546] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 69.418599][ T3857] loop3: detected capacity change from 0 to 2048 [ 69.470133][ T3546] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 69.671622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 69.683491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 69.849382][ T3857] loop3: unable to read partition table [ 69.886251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.895856][ T3857] loop3: partition table beyond EOD, truncated [ 69.970627][ T3857] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 70.036312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.070780][ T3886] loop4: detected capacity change from 0 to 8 [ 70.150351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 70.159009][ T3886] SQUASHFS error: zlib decompression failed, data probably corrupt [ 70.172544][ T3002] loop3: unable to read partition table [ 70.182264][ T3886] SQUASHFS error: Failed to read block 0x9b: -5 [ 70.200719][ T3002] loop3: partition table beyond EOD, truncated [ 70.216378][ T3886] SQUASHFS error: Unable to read metadata cache entry [99] [ 70.243778][ T3886] SQUASHFS error: Unable to read inode 0x127 [ 70.538276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 70.776381][ T3559] Bluetooth: hci0: command tx timeout [ 70.888756][ T57] team0 (unregistering): Port device team_slave_1 removed [ 70.978566][ T57] team0 (unregistering): Port device team_slave_0 removed [ 71.040017][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.156813][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.185394][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.195174][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.226294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.799538][ T57] bond0 (unregistering): Released all slaves [ 71.865287][ T3747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.936989][ T3897] device pim6reg1 entered promiscuous mode [ 71.988720][ T3747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.073083][ T3908] loop3: detected capacity change from 0 to 64 [ 72.102071][ T3747] team0: Port device team_slave_0 added [ 72.121303][ T3747] team0: Port device team_slave_1 added [ 72.151819][ T3546] EXT4-fs (loop1): unmounting filesystem. [ 72.262833][ T3912] loop4: detected capacity change from 0 to 4096 [ 72.269378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.271008][ T3747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.315103][ T3912] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 72.319836][ T3747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.361610][ T152] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.426422][ T3747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.455796][ T3747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.471974][ T3747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.524115][ T3912] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 72.526088][ T3747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.626233][ T152] usb 3-1: Using ep0 maxpacket: 32 [ 72.660263][ T26] audit: type=1800 audit(1721148536.180:6): pid=3912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.88" name="file1" dev="loop4" ino=24 res=0 errno=0 [ 72.718495][ T3550] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 72.782441][ T3550] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 72.856325][ T3557] Bluetooth: hci0: command tx timeout [ 72.930497][ T3747] device hsr_slave_0 entered promiscuous mode [ 73.587436][ T3929] delete_channel: no stack [ 73.616595][ T3747] device hsr_slave_1 entered promiscuous mode [ 73.656385][ T3927] netlink: 56 bytes leftover after parsing attributes in process `syz.4.92'. [ 73.695118][ T3559] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.704323][ T3559] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.715520][ T26] audit: type=1326 audit(1721148537.230:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3926 comm="syz.4.92" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb44c375bd9 code=0x0 [ 73.741446][ T3559] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.756023][ T3561] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.763739][ T3561] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.771831][ T3561] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.790998][ T152] usb 3-1: New USB device found, idVendor=199e, idProduct=8102, bcdDevice=33.4f [ 73.826672][ T152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.841091][ T152] usb 3-1: Product: syz [ 73.845377][ T152] usb 3-1: Manufacturer: syz [ 73.855266][ T152] usb 3-1: SerialNumber: syz [ 73.884748][ T152] usb 3-1: config 0 descriptor?? [ 74.136152][ T3561] Bluetooth: hci1: command tx timeout [ 74.151308][ T3909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.168050][ T3940] loop4: detected capacity change from 0 to 2048 [ 74.192633][ T3909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.233798][ T3940] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 74.356098][ T3940] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.458911][ T3940] EXT4-fs (loop4): Remounting filesystem read-only [ 74.535590][ T3931] chnl_net:caif_netlink_parms(): no params data found [ 74.686266][ T152] usb 3-1: Found UVC 0.00 device syz (199e:8102) [ 74.686312][ T152] usb 3-1: No valid video chain found. [ 74.692449][ T152] usb 3-1: USB disconnect, device number 2 [ 74.806459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.071935][ T3550] EXT4-fs (loop4): unmounting filesystem. [ 75.084195][ T3931] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.106868][ T3931] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.114978][ T3931] device bridge_slave_0 entered promiscuous mode [ 75.232893][ T3931] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.240863][ T3931] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.268878][ T3931] device bridge_slave_1 entered promiscuous mode [ 75.440224][ T3931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.502472][ T3931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.620148][ T3931] team0: Port device team_slave_0 added [ 75.636268][ T3959] loop3: detected capacity change from 0 to 32768 [ 75.670944][ T3747] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.700877][ T3959] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 75.700877][ T3959] [ 75.731327][ T3931] team0: Port device team_slave_1 added [ 75.753634][ T3959] ERROR: (device loop3): remounting filesystem as read-only [ 75.757748][ T3747] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.786332][ T3959] ERROR: (device loop3): jfs_unlink: [ 75.786332][ T3959] [ 75.826715][ T3561] Bluetooth: hci2: command tx timeout [ 75.884635][ T3747] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.911768][ T3973] loop2: detected capacity change from 0 to 128 [ 75.928394][ T3931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.935368][ T3931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.961285][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.015447][ T3554] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 76.015447][ T3554] [ 76.036514][ T3554] ERROR: (device loop3): remounting filesystem as read-only [ 76.063516][ T3931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.155294][ T3982] loop2: detected capacity change from 0 to 512 [ 76.164275][ T3747] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.190113][ T3982] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 76.215659][ T3931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.226786][ T3931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.267789][ T3982] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.285221][ T3931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.298527][ T14] cfg80211: failed to load regulatory.db [ 76.306454][ T3982] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.103: bad orphan inode 15 [ 76.350880][ T3557] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.361850][ T3557] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.375954][ T3982] ext4_test_bit(bit=14, block=18) = 1 [ 76.382213][ T3557] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.384489][ T3982] is_bad_inode(inode)=0 [ 76.395159][ T3559] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.403857][ T3559] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.411333][ T3559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.430322][ T3982] NEXT_ORPHAN(inode)=1023 [ 76.434763][ T3982] max_ino=32 [ 76.465564][ T3982] i_nlink=0 [ 76.519656][ T3982] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2926: inode #15: comm syz.2.103: corrupted xattr block 19 [ 76.541325][ T3982] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 76.552220][ T3982] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 76.595157][ T3931] device hsr_slave_0 entered promiscuous mode [ 76.602351][ T3931] device hsr_slave_1 entered promiscuous mode [ 76.609182][ T3931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.618295][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 76.622885][ T3544] EXT4-fs (loop2): unmounting filesystem. [ 76.626487][ T3931] Cannot create hsr debugfs directory [ 76.682643][ T3991] loop2: detected capacity change from 0 to 8 [ 76.721196][ T3991] SQUASHFS error: zlib decompression failed, data probably corrupt [ 76.729348][ T3991] SQUASHFS error: Failed to read block 0x9b: -5 [ 76.735754][ T3991] SQUASHFS error: Unable to read metadata cache entry [99] [ 76.744728][ T3991] SQUASHFS error: Unable to read inode 0x127 [ 76.748880][ T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.833794][ T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.855714][ T3747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.908371][ T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.977141][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.985005][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.986421][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.023439][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.024702][ T3747] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.038962][ T7] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 77.049729][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.068930][ T7] usb 4-1: config 0 descriptor?? [ 77.094524][ T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.175156][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.185585][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.202561][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.209726][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.224660][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.233611][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.248674][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.255775][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.294900][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.339545][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.370433][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.434394][ T3931] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.440460][ T4009] loop2: detected capacity change from 0 to 2048 [ 77.473737][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.485020][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.501773][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.516816][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.525410][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.534288][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.543477][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.547268][ T7] hid (null): bogus close delimiter [ 77.552412][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.571677][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.611299][ T3931] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.619003][ T4009] loop2: unable to read partition table [ 77.633765][ T4009] loop2: partition table beyond EOD, truncated [ 77.640853][ T4009] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 77.661185][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.682690][ T3985] chnl_net:caif_netlink_parms(): no params data found [ 77.766698][ T7] usb 4-1: language id specifier not provided by device, defaulting to English [ 77.832697][ T3931] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.849846][ T3002] loop2: unable to read partition table [ 77.855644][ T3002] loop2: partition table beyond EOD, truncated [ 77.906304][ T3559] Bluetooth: hci2: command tx timeout [ 77.993603][ T3931] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.122532][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.139131][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.173274][ T3747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.247998][ T3985] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.255239][ T3985] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.265933][ T3985] device bridge_slave_0 entered promiscuous mode [ 78.359794][ T3985] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.376465][ T3985] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.407240][ T3985] device bridge_slave_1 entered promiscuous mode [ 78.456207][ T3559] Bluetooth: hci3: command tx timeout [ 78.486432][ T7] uclogic 0003:256C:006D.0001: v1 frame probing failed: -71 [ 78.495984][ T7] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 78.504595][ T7] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 78.533843][ T7] usb 4-1: USB disconnect, device number 3 [ 78.578092][ T3985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.610757][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.641985][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.663215][ T3985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.837419][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.845743][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.922802][ T3985] team0: Port device team_slave_0 added [ 78.961538][ T3985] team0: Port device team_slave_1 added [ 78.973227][ T3747] device veth0_vlan entered promiscuous mode [ 78.991121][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.012772][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.126872][ T3747] device veth1_vlan entered promiscuous mode [ 79.239422][ T3931] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.279960][ T3985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.303272][ T3985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.337745][ T3985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.381972][ T3985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.392532][ T3985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.427610][ T3985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.453094][ T4048] loop2: detected capacity change from 0 to 32768 [ 79.501153][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.513907][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.524000][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.533014][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.544134][ T4048] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 79.544134][ T4048] [ 79.561381][ T4048] ERROR: (device loop2): remounting filesystem as read-only [ 79.569111][ T4048] ERROR: (device loop2): jfs_unlink: [ 79.569111][ T4048] [ 79.579657][ T4048] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 79.579657][ T4048] [ 79.792418][ T3931] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.905738][ T3931] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.006633][ T3559] Bluetooth: hci2: command tx timeout [ 80.169545][ T3985] device hsr_slave_0 entered promiscuous mode [ 80.186384][ T3985] device hsr_slave_1 entered promiscuous mode [ 80.213615][ T3985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.242709][ T3985] Cannot create hsr debugfs directory [ 80.446149][ T3747] device veth0_macvtap entered promiscuous mode [ 80.455646][ T3747] device veth1_macvtap entered promiscuous mode [ 80.501970][ T3931] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.536222][ T3559] Bluetooth: hci3: command tx timeout [ 81.341772][ T4078] loop2: detected capacity change from 0 to 64 [ 81.374316][ T4070] netlink: 'syz.3.114': attribute type 2 has an invalid length. [ 81.405666][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.540801][ T3747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.612307][ T3747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.632335][ T3747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.681164][ T3747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.721477][ T3747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.746213][ T3747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.776510][ T3747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.804394][ T3747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.844255][ T3747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.898894][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.924427][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.958077][ T3747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.985825][ T3747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.025075][ T3747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.046103][ T3747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.056390][ T3559] Bluetooth: hci2: command tx timeout [ 82.066153][ T3747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.088646][ T3747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.116088][ T3747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.149093][ T3747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.169795][ T3747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.238859][ T4086] loop3: detected capacity change from 0 to 32768 [ 82.272440][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.279952][ T4086] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.118 (4086) [ 82.293568][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.326344][ T152] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.331396][ T3747] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.348925][ T3747] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.367963][ T3747] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.371589][ T4086] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 82.406299][ T4086] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 82.411786][ T3747] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.425008][ T4086] BTRFS info (device loop3): using free space tree [ 82.616676][ T3559] Bluetooth: hci3: command tx timeout [ 82.671389][ T4086] BTRFS info (device loop3): enabling ssd optimizations [ 82.706568][ T152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.722453][ T152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.733999][ T152] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 82.747109][ T152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.760344][ T152] usb 3-1: config 0 descriptor?? [ 82.857075][ T3931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.867466][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.882492][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.916696][ T57] device hsr_slave_0 left promiscuous mode [ 82.923167][ T57] device hsr_slave_1 left promiscuous mode [ 82.930810][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.932024][ T3554] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 82.938439][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.957745][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.965270][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.981460][ T57] device bridge_slave_1 left promiscuous mode [ 82.990115][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.026286][ T57] device bridge_slave_0 left promiscuous mode [ 83.040715][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.097897][ T57] device hsr_slave_0 left promiscuous mode [ 83.104379][ T57] device hsr_slave_1 left promiscuous mode [ 83.111559][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.119407][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.128117][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.135737][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.143503][ T57] device bridge_slave_1 left promiscuous mode [ 83.149978][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.160468][ T57] device bridge_slave_0 left promiscuous mode [ 83.167002][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.209179][ T57] device veth1_macvtap left promiscuous mode [ 83.215308][ T57] device veth0_macvtap left promiscuous mode [ 83.221860][ T57] device veth1_vlan left promiscuous mode [ 83.228441][ T152] hid (null): bogus close delimiter [ 83.239769][ T57] device veth0_vlan left promiscuous mode [ 83.249462][ T57] device veth1_macvtap left promiscuous mode [ 83.255553][ T57] device veth0_macvtap left promiscuous mode [ 83.268908][ T57] device veth1_vlan left promiscuous mode [ 83.274825][ T57] device veth0_vlan left promiscuous mode [ 83.447601][ T152] usb 3-1: language id specifier not provided by device, defaulting to English [ 83.614475][ T4139] loop3: detected capacity change from 0 to 32768 [ 83.621827][ T4139] XFS: attr2 mount option is deprecated. [ 83.672402][ T4139] XFS (loop3): Mounting V5 Filesystem [ 83.710322][ T4139] XFS (loop3): Ending clean mount [ 83.730900][ T4139] XFS (loop3): Quotacheck needed: Please wait. [ 83.772089][ T4139] XFS (loop3): Quotacheck: Done. [ 83.847290][ T3554] XFS (loop3): Unmounting Filesystem [ 84.027184][ T57] team0 (unregistering): Port device team_slave_1 removed [ 84.075079][ T57] team0 (unregistering): Port device team_slave_0 removed [ 84.172940][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.193422][ T152] uclogic 0003:256C:006D.0002: v1 frame probing failed: -71 [ 84.204114][ T152] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 84.225359][ T152] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 84.236898][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.254598][ T152] usb 3-1: USB disconnect, device number 3 [ 84.585746][ T57] bond0 (unregistering): Released all slaves [ 84.706238][ T3559] Bluetooth: hci3: command tx timeout [ 84.952526][ T57] team0 (unregistering): Port device team_slave_1 removed [ 84.985200][ T57] team0 (unregistering): Port device team_slave_0 removed [ 85.019712][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.056762][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.147251][ T4163] loop2: detected capacity change from 0 to 32768 [ 85.168570][ T4163] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.127 (4163) [ 85.233452][ T4163] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 85.251742][ T4163] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 85.264966][ T4163] BTRFS info (device loop2): using free space tree [ 85.413685][ T4163] BTRFS info (device loop2): enabling ssd optimizations [ 85.537651][ T57] bond0 (unregistering): Released all slaves [ 85.627885][ T3544] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 85.660043][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.669282][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.685590][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.716484][ T3931] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.788665][ T4160] device macvtap0 entered promiscuous mode [ 85.799105][ T4161] bridge0: port 3(bond0) entered blocking state [ 85.817311][ T4161] bridge0: port 3(bond0) entered disabled state [ 85.836637][ T4161] device bond0 entered promiscuous mode [ 85.842212][ T4161] device bond_slave_0 entered promiscuous mode [ 85.856538][ T4161] device bond_slave_1 entered promiscuous mode [ 85.864650][ T4161] bridge0: port 3(bond0) entered blocking state [ 85.871348][ T4161] bridge0: port 3(bond0) entered forwarding state [ 85.939335][ T4193] loop2: detected capacity change from 0 to 512 [ 85.962304][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.971489][ T4193] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000079f) [ 85.981375][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.984162][ T4193] FAT-fs (loop2): Filesystem has been set read-only [ 85.989863][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.003510][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.011520][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.020344][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.030874][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.031269][ T4193] trusted_key: encrypted_key: insufficient parameters specified [ 86.038003][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.049487][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.057058][ T3803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.070708][ T3803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.076743][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.094743][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.105135][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.166508][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.183196][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.192746][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.204199][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.221717][ T3931] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.243374][ T3931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.259095][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.282356][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.297306][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.329073][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.349421][ T4200] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 86.366711][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.384256][ T4197] loop3: detected capacity change from 0 to 4096 [ 86.388713][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.398424][ T41] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 86.580083][ T4197] ntfs3: loop3: failed to convert "0000" to iso8859-9 [ 86.616753][ T4197] ntfs3: loop3: failed to convert "0000" to iso8859-9 [ 86.646681][ T41] usb 3-1: Using ep0 maxpacket: 16 [ 86.690306][ T3985] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.748535][ T3985] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.777245][ T3985] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.799150][ T3985] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.866554][ T41] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 87.074749][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.082396][ T41] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.096987][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.104393][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.142580][ T3985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.165826][ T41] usb 3-1: Product: syz [ 87.171027][ T41] usb 3-1: Manufacturer: ᨵĒ麶쟃︆ẵꕴ᤮ [ 87.187062][ T3931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.205841][ T41] usb 3-1: SerialNumber: syz [ 87.237225][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.254979][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.284440][ T3985] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.310194][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.327045][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.351028][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.358202][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.402107][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.439281][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.466576][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.495506][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.502661][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.531536][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.555774][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.583084][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.601757][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.621924][ T4189] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 87.625570][ T3931] device veth0_vlan entered promiscuous mode [ 87.651070][ T3931] device veth1_vlan entered promiscuous mode [ 87.662058][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.684537][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.703419][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.714609][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.739335][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.755688][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.770478][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.804263][ T26] audit: type=1326 audit(1721148551.320:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4243 comm="syz.0.143" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27b0d75bd9 code=0x0 [ 87.826832][ T41] cdc_ncm 3-1:1.0: bind() failure [ 87.847848][ T3985] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.864328][ T41] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 87.866148][ T4189] usb 4-1: Using ep0 maxpacket: 32 [ 87.871299][ T41] cdc_ncm 3-1:1.1: bind() failure [ 87.894001][ T3985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.897940][ T41] usb 3-1: USB disconnect, device number 4 [ 87.943454][ T4247] loop0: detected capacity change from 0 to 512 [ 87.962074][ T3931] device veth0_macvtap entered promiscuous mode [ 87.975599][ T4247] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 88.011187][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.024360][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.047023][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.096614][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.117332][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.135275][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.150598][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.166391][ T4189] usb 4-1: New USB device found, idVendor=199e, idProduct=8102, bcdDevice=33.4f [ 88.166745][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.186889][ T4189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.204422][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.216939][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.223071][ T4189] usb 4-1: Product: syz [ 88.239408][ T3931] device veth1_macvtap entered promiscuous mode [ 88.247997][ T4189] usb 4-1: Manufacturer: syz [ 88.263379][ T4189] usb 4-1: SerialNumber: syz [ 88.273623][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.282286][ T4189] usb 4-1: config 0 descriptor?? [ 88.282721][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.316583][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.332721][ T3931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.363223][ T3931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.394039][ T3931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.422782][ T3931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.435702][ T3931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.447553][ T3931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.492815][ T3931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.515912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.529476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.544899][ T4232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.568361][ T4232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.594419][ T3931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.607589][ T3931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.625453][ T3931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.636097][ T3931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.646109][ T3931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.675924][ T3931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.721653][ T3931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.785193][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.816485][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.825287][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.832837][ T4189] usb 4-1: Found UVC 0.00 device syz (199e:8102) [ 88.841718][ T4189] usb 4-1: No valid video chain found. [ 88.856795][ T4189] usb 4-1: USB disconnect, device number 4 [ 88.862924][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.891277][ T3931] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.906305][ T3931] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.915169][ T3931] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.923954][ T3931] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.942693][ T3985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.169556][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.204931][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.280334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 89.291991][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.314393][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.473123][ T4280] loop0: detected capacity change from 0 to 2048 [ 89.481269][ T3559] Bluetooth: hci4: command tx timeout [ 90.053090][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.105115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.120348][ T4280] loop0: p1 < > p4 [ 90.127243][ T4280] loop0: p4 size 8388608 extends beyond EOD, truncated [ 90.380879][ T4286] sctp: [Deprecated]: syz.2.149 (pid 4286) Use of int in maxseg socket option. [ 90.380879][ T4286] Use struct sctp_assoc_value instead [ 90.458366][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 90.523082][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 90.598053][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.777003][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.105651][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.156953][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.254850][ T3985] device veth0_vlan entered promiscuous mode [ 91.330065][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.365021][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.590192][ T3985] device veth1_vlan entered promiscuous mode [ 91.774187][ T3985] device veth0_macvtap entered promiscuous mode [ 91.821649][ T3985] device veth1_macvtap entered promiscuous mode [ 91.855713][ T3985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.867140][ T3985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.877074][ T3985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.887550][ T3985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.897606][ T3985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.908315][ T3985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.920202][ T3985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.947045][ T3985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.996626][ T41] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 92.166466][ T4320] loop0: detected capacity change from 0 to 2048 [ 92.193792][ T3985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.227401][ T4320] loop0: p1 < > p4 [ 92.279044][ T4320] loop0: p4 size 8388608 extends beyond EOD, truncated [ 92.348641][ T41] usb 3-1: Using ep0 maxpacket: 32 [ 92.588101][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.596898][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.606184][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.615426][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.646679][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.658050][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 92.671860][ T3564] udevd[3564]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 92.689019][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.738070][ T3985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.766913][ T3985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.786244][ T41] usb 3-1: New USB device found, idVendor=199e, idProduct=8102, bcdDevice=33.4f [ 92.805603][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.815717][ T41] usb 3-1: Product: syz [ 92.819956][ T3985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.825820][ T41] usb 3-1: Manufacturer: syz [ 92.845228][ T3985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.846062][ T41] usb 3-1: SerialNumber: syz [ 92.876148][ T3985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.883535][ T41] usb 3-1: config 0 descriptor?? [ 92.902059][ T3985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.931703][ T3985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.949772][ T3985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.957821][ T4299] loop3: detected capacity change from 0 to 32768 [ 92.965490][ T3985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.001754][ T3985] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.028227][ T3985] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.069673][ T4299] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.154 (4299) [ 93.082982][ T3985] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.091855][ T3985] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.112571][ T4299] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 93.140203][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.152503][ T4313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.153551][ T4299] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 93.186872][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.205494][ T4313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.245180][ T4299] BTRFS info (device loop3): using free space tree [ 93.346476][ T41] usb 3-1: Found UVC 0.00 device syz (199e:8102) [ 93.358689][ T41] usb 3-1: No valid video chain found. [ 93.384754][ T41] usb 3-1: USB disconnect, device number 5 [ 93.396218][ T3639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.434394][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.452592][ T3639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.466251][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.474758][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.488987][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.601661][ T4325] loop1: detected capacity change from 0 to 32768 [ 93.675081][ T4299] BTRFS error (device loop3): open_ctree failed [ 93.677620][ T4325] XFS: attr2 mount option is deprecated. [ 93.700169][ T4351] loop4: detected capacity change from 0 to 1024 [ 93.736311][ T3561] Bluetooth: hci1: command tx timeout [ 93.742582][ T4325] XFS (loop1): Mounting V5 Filesystem [ 93.788309][ T4351] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 93.836826][ T4323] hfsplus: b-tree write err: -5, ino 4 [ 93.847103][ T4325] XFS (loop1): Ending clean mount [ 93.879042][ T4325] XFS (loop1): Quotacheck needed: Please wait. [ 93.940412][ T4325] XFS (loop1): Quotacheck: Done. [ 94.108141][ T3931] XFS (loop1): Unmounting Filesystem [ 94.215990][ T4369] loop2: detected capacity change from 0 to 256 [ 94.223913][ T4189] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 94.371023][ T4369] FAT-fs (loop2): Directory bread(block 64) failed [ 94.392750][ T4369] FAT-fs (loop2): Directory bread(block 65) failed [ 94.431954][ T4369] FAT-fs (loop2): Directory bread(block 66) failed [ 94.448018][ T4369] FAT-fs (loop2): Directory bread(block 67) failed [ 94.454679][ T4369] FAT-fs (loop2): Directory bread(block 68) failed [ 94.461929][ T4369] FAT-fs (loop2): Directory bread(block 69) failed [ 94.476644][ T4369] FAT-fs (loop2): Directory bread(block 70) failed [ 94.493547][ T4369] FAT-fs (loop2): Directory bread(block 71) failed [ 94.513768][ T4369] FAT-fs (loop2): Directory bread(block 72) failed [ 94.666298][ T4369] FAT-fs (loop2): Directory bread(block 73) failed [ 94.673555][ T4379] loop3: detected capacity change from 0 to 2048 [ 94.728584][ T4379] loop3: p1 < > p4 [ 94.738907][ T4379] loop3: p4 size 8388608 extends beyond EOD, truncated [ 95.266400][ T4189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.286515][ T4189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.298855][ T4189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 95.316231][ T4189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 95.327267][ T4189] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 95.341389][ T4189] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 95.350720][ T4189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.426665][ T4189] usb 5-1: config 0 descriptor?? [ 95.494052][ T3564] udevd[3564]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 95.535116][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 95.592858][ T3564] udevd[3564]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 95.612350][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 95.622639][ T4390] loop3: detected capacity change from 0 to 1024 [ 95.662180][ T4395] netlink: 56 bytes leftover after parsing attributes in process `syz.2.178'. [ 95.671992][ T4390] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 95.681740][ T4395] netlink: 'syz.2.178': attribute type 5 has an invalid length. [ 95.702015][ T4395] netlink: 44 bytes leftover after parsing attributes in process `syz.2.178'. [ 95.713472][ T9] hfsplus: b-tree write err: -5, ino 4 [ 95.796126][ T4133] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.838187][ T4400] loop3: detected capacity change from 0 to 512 [ 95.863167][ T4400] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000079f) [ 95.893973][ T4400] FAT-fs (loop3): Filesystem has been set read-only [ 95.903234][ T4400] trusted_key: encrypted_key: insufficient parameters specified [ 95.906499][ T4402] tap0: tun_chr_ioctl cmd 1074025677 [ 95.928310][ T4402] tap0: linktype set to 512 [ 95.946310][ T4189] ntrig 0003:1B96:000A.0003: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 96.066184][ T4133] usb 2-1: Using ep0 maxpacket: 32 [ 96.105471][ T4404] loop2: detected capacity change from 0 to 4096 [ 96.110739][ T4396] loop0: detected capacity change from 0 to 32768 [ 96.119676][ T4396] XFS: attr2 mount option is deprecated. [ 96.143462][ T4404] ntfs: (device loop2): parse_options(): The errors option requires an argument. [ 96.161283][ T4396] XFS (loop0): Mounting V5 Filesystem [ 96.184982][ T4396] XFS (loop0): Ending clean mount [ 96.186210][ T4183] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.202909][ T4396] XFS (loop0): Quotacheck needed: Please wait. [ 96.216454][ T4189] ntrig 0003:1B96:000A.0003: Firmware version: 7.15.22.15.1 (3e5f f1c1) [ 96.284290][ T4396] XFS (loop0): Quotacheck: Done. [ 96.356934][ T3747] XFS (loop0): Unmounting Filesystem [ 96.386484][ T4133] usb 2-1: New USB device found, idVendor=199e, idProduct=8102, bcdDevice=33.4f [ 96.396019][ T4133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.418821][ T4133] usb 2-1: Product: syz [ 96.423144][ T4133] usb 2-1: Manufacturer: syz [ 96.436270][ T4183] usb 4-1: Using ep0 maxpacket: 16 [ 96.437601][ T4133] usb 2-1: SerialNumber: syz [ 96.467532][ T4133] usb 2-1: config 0 descriptor?? [ 96.638424][ T4183] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 96.689863][ T41] usb 5-1: USB disconnect, device number 2 [ 96.878805][ T4423] loop2: detected capacity change from 0 to 2048 [ 96.975615][ T4389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.989071][ T4423] loop2: p1 < > p4 [ 97.047612][ T4423] loop2: p4 size 8388608 extends beyond EOD, truncated [ 97.322554][ T4389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.526277][ T4183] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.573509][ T4391] udevd[4391]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 97.583503][ T3559] Bluetooth: hci2: command tx timeout [ 97.629103][ T3564] udevd[3564]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 97.643702][ T4183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.672166][ T4183] usb 4-1: Product: syz [ 97.690294][ T4183] usb 4-1: Manufacturer: ᨵĒ麶쟃︆ẵꕴ᤮ [ 97.716139][ T4183] usb 4-1: SerialNumber: syz [ 97.723306][ T4434] netlink: 56 bytes leftover after parsing attributes in process `syz.2.191'. [ 97.749662][ T4434] netlink: 'syz.2.191': attribute type 5 has an invalid length. [ 97.760203][ T4434] netlink: 44 bytes leftover after parsing attributes in process `syz.2.191'. [ 97.776394][ T4133] usb 2-1: Found UVC 0.00 device syz (199e:8102) [ 97.789800][ T4133] usb 2-1: No valid video chain found. [ 97.824757][ T4133] usb 2-1: USB disconnect, device number 2 [ 97.882223][ T4438] tap0: tun_chr_ioctl cmd 1074025677 [ 97.923286][ T4438] tap0: linktype set to 512 [ 98.111312][ T4442] loop0: detected capacity change from 0 to 4096 [ 98.159542][ T4442] ntfs: (device loop0): parse_options(): The errors option requires an argument. [ 98.518311][ T3563] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 98.541888][ T4183] cdc_ncm 4-1:1.0: bind() failure [ 99.802239][ T4456] loop1: detected capacity change from 0 to 2048 [ 99.839481][ T4183] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 99.839737][ T4456] loop1: p1 < > p4 [ 99.847923][ T4183] cdc_ncm 4-1:1.1: bind() failure [ 99.851418][ T4456] loop1: p4 size 8388608 extends beyond EOD, truncated [ 99.922801][ T4183] usb 4-1: USB disconnect, device number 5 [ 99.984814][ T4468] netlink: 56 bytes leftover after parsing attributes in process `syz.3.204'. [ 100.012544][ T4468] netlink: 'syz.3.204': attribute type 5 has an invalid length. [ 100.032790][ T4468] netlink: 44 bytes leftover after parsing attributes in process `syz.3.204'. [ 100.034152][ T3002] loop1: p1 < > p4 [ 100.059541][ T3002] loop1: p4 size 8388608 extends beyond EOD, truncated [ 100.178860][ T4476] tap0: tun_chr_ioctl cmd 1074025677 [ 100.203831][ T4476] tap0: linktype set to 512 [ 100.326250][ T4130] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 100.526258][ T4485] loop4: detected capacity change from 0 to 4096 [ 100.537604][ T4391] udevd[4391]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 100.562747][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 100.564760][ T4485] ntfs: (device loop4): parse_options(): The errors option requires an argument. [ 100.586981][ T4492] loop0: detected capacity change from 0 to 512 [ 100.636002][ T4492] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000079f) [ 100.644824][ T4492] FAT-fs (loop0): Filesystem has been set read-only [ 100.668151][ T4492] trusted_key: encrypted_key: insufficient parameters specified [ 100.716546][ T4130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.727614][ T3564] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 100.737684][ T4130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.760650][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 100.773862][ T4391] udevd[4391]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 100.804621][ T4130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 100.852147][ T4130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 100.882743][ T4130] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 100.933416][ T4499] netlink: 56 bytes leftover after parsing attributes in process `syz.1.219'. [ 100.943560][ T4130] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 100.946244][ T4183] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.958479][ T4499] netlink: 'syz.1.219': attribute type 5 has an invalid length. [ 100.979455][ T4130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.987891][ T4503] loop3: detected capacity change from 0 to 64 [ 100.993467][ T4499] netlink: 44 bytes leftover after parsing attributes in process `syz.1.219'. [ 101.013645][ T4130] usb 3-1: config 0 descriptor?? [ 101.040605][ T26] audit: type=1326 audit(1721148564.560:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.3.221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e9db75bd9 code=0x0 [ 101.216301][ T4183] usb 1-1: Using ep0 maxpacket: 16 [ 101.270332][ T4516] tap0: tun_chr_ioctl cmd 1074025677 [ 101.283103][ T4516] tap0: linktype set to 512 [ 101.416450][ T4183] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 101.464208][ T4525] loop4: detected capacity change from 0 to 4096 [ 101.471583][ T4525] ntfs: (device loop4): parse_options(): The errors option requires an argument. [ 101.526318][ T3564] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 101.540869][ T4130] ntrig 0003:1B96:000A.0004: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 101.586244][ T4183] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.595758][ T4183] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.610354][ T4183] usb 1-1: Product: syz [ 101.614627][ T4183] usb 1-1: Manufacturer: ᨵĒ麶쟃︆ẵꕴ᤮ [ 101.622773][ T4183] usb 1-1: SerialNumber: syz [ 101.830083][ T4527] loop4: detected capacity change from 0 to 40427 [ 101.841121][ T4527] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 101.849178][ T4527] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 101.861526][ T4130] ntrig 0003:1B96:000A.0004: Firmware version: 7.15.22.15.1 (3e5f f1c1) [ 101.925416][ T4527] F2FS-fs (loop4): Found nat_bits in checkpoint [ 102.071951][ T4527] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 102.079767][ T4527] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 102.127334][ T4183] cdc_ncm 1-1:1.0: bind() failure [ 102.150621][ T4183] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 102.520136][ T4536] loop3: detected capacity change from 0 to 2048 [ 103.435894][ T4536] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 103.456440][ T4538] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.458167][ T4536] syz.3.233: attempt to access beyond end of device [ 103.458167][ T4536] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 103.558134][ T4183] cdc_ncm 1-1:1.1: bind() failure [ 103.888155][ T4190] usb 3-1: USB disconnect, device number 6 [ 103.898078][ T4183] usb 1-1: USB disconnect, device number 2 [ 104.011987][ T4540] syz.4.232: attempt to access beyond end of device [ 104.011987][ T4540] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 104.045978][ T26] audit: type=1804 audit(1721148567.560:10): pid=4540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.232" name="/newroot/17/bus/bus" dev="loop4" ino=10 res=1 errno=0 [ 104.368414][ T4549] netlink: 56 bytes leftover after parsing attributes in process `syz.3.234'. [ 104.391317][ T4549] netlink: 'syz.3.234': attribute type 5 has an invalid length. [ 104.530595][ T4549] netlink: 44 bytes leftover after parsing attributes in process `syz.3.234'. [ 104.613616][ T4545] loop2: detected capacity change from 0 to 16 [ 104.719881][ T4545] erofs: (device loop2): mounted with root inode @ nid 36. [ 104.730476][ T4545] process 'syz.2.236' launched './file2' with NULL argv: empty string added [ 104.756803][ T3559] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 104.785479][ T4545] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 104.809553][ T26] audit: type=1800 audit(1721148568.330:11): pid=4545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.236" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 105.093248][ T4563] loop0: detected capacity change from 0 to 512 [ 105.109338][ T4565] loop1: detected capacity change from 0 to 512 [ 105.137787][ T4563] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.199534][ T4565] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 105.217078][ T4563] EXT4-fs (loop0): 1 orphan inode deleted [ 105.222958][ T4563] EXT4-fs (loop0): 1 truncate cleaned up [ 105.229178][ T4563] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 105.229710][ T4565] EXT4-fs (loop1): 1 truncate cleaned up [ 105.247570][ T4565] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.308717][ T4562] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 105.360355][ T4562] EXT4-fs (loop0): Remounting filesystem read-only [ 105.438809][ T3747] EXT4-fs (loop0): unmounting filesystem. [ 105.519965][ T3931] EXT4-fs (loop1): unmounting filesystem. [ 105.786872][ T4189] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 105.842987][ T4590] netlink: 56 bytes leftover after parsing attributes in process `syz.4.253'. [ 105.876243][ T4590] netlink: 'syz.4.253': attribute type 5 has an invalid length. [ 105.884512][ T4590] netlink: 44 bytes leftover after parsing attributes in process `syz.4.253'. [ 106.063951][ T4599] loop1: detected capacity change from 0 to 512 [ 106.078758][ T4601] loop3: detected capacity change from 0 to 512 [ 106.087881][ T4599] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 106.107833][ T4601] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 106.132945][ T4599] EXT4-fs (loop1): 1 orphan inode deleted [ 106.136282][ T4601] EXT4-fs (loop3): 1 truncate cleaned up [ 106.144401][ T4601] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.144798][ T4599] EXT4-fs (loop1): 1 truncate cleaned up [ 106.163984][ T4599] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 106.173555][ T4189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.197948][ T4189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.216627][ T4189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 106.227756][ T4189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 106.230332][ T4598] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, [ 106.237508][ T4189] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 106.237549][ T4189] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 106.237572][ T4189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.239305][ T4189] usb 1-1: config 0 descriptor?? [ 106.245878][ T4598] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 106.291176][ T4598] EXT4-fs (loop1): Remounting filesystem read-only [ 106.329117][ T3554] EXT4-fs (loop3): unmounting filesystem. [ 106.341015][ T3931] EXT4-fs (loop1): unmounting filesystem. [ 106.785384][ T4189] ntrig 0003:1B96:000A.0005: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 106.834582][ T4630] loop3: detected capacity change from 0 to 512 [ 106.869582][ T4630] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.901937][ T4630] EXT4-fs (loop3): 1 orphan inode deleted [ 106.916340][ T4630] EXT4-fs (loop3): 1 truncate cleaned up [ 106.934072][ T4630] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.965114][ T4628] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 106.990524][ T4633] mmap: syz.1.272 (4633) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.037367][ T4189] ntrig 0003:1B96:000A.0005: Firmware version: 7.15.22.15.1 (3e5f f1c1) [ 107.073846][ T4628] EXT4-fs (loop3): Remounting filesystem read-only [ 107.220607][ T3554] EXT4-fs (loop3): unmounting filesystem. [ 107.663169][ T4190] usb 1-1: USB disconnect, device number 3 [ 107.844907][ T4674] loop4: detected capacity change from 0 to 512 [ 107.850912][ T4676] loop1: detected capacity change from 0 to 512 [ 107.868156][ T4674] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 107.991195][ T4680] loop3: detected capacity change from 0 to 16 [ 108.019398][ T4680] erofs: (device loop3): mounted with root inode @ nid 36. [ 108.077495][ T4676] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.292: corrupted in-inode xattr [ 108.096089][ T3559] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 108.151997][ T4680] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 108.199405][ T26] audit: type=1800 audit(1721148571.720:12): pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.287" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 108.482449][ T4676] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.292: couldn't read orphan inode 15 (err -117) [ 108.495176][ T4674] EXT4-fs (loop4): 1 orphan inode deleted [ 108.516121][ T4674] EXT4-fs (loop4): 1 truncate cleaned up [ 108.521803][ T4674] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 108.533844][ T4676] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 108.612595][ T4672] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 108.712499][ T4672] EXT4-fs (loop4): Remounting filesystem read-only [ 108.742729][ T26] audit: type=1326 audit(1721148572.260:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4683 comm="syz.2.294" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14d4775bd9 code=0x0 [ 108.875499][ T3931] EXT4-fs (loop1): unmounting filesystem. [ 108.987365][ T3985] EXT4-fs (loop4): unmounting filesystem. [ 109.306189][ T4709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 109.326466][ T4709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 109.355388][ T4709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 109.453311][ T4717] loop4: detected capacity change from 0 to 512 [ 109.462229][ T4718] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 109.478957][ T4717] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.500041][ T4717] EXT4-fs (loop4): 1 orphan inode deleted [ 109.521177][ T4717] EXT4-fs (loop4): 1 truncate cleaned up [ 109.536226][ T4717] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 109.572082][ T4715] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 109.587983][ T4715] EXT4-fs (loop4): Remounting filesystem read-only [ 109.701199][ T3985] EXT4-fs (loop4): unmounting filesystem. [ 109.893932][ T26] audit: type=1326 audit(1721148573.410:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4723 comm="syz.1.310" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1698375bd9 code=0x0 [ 110.018235][ T4725] loop0: detected capacity change from 0 to 40427 [ 110.032247][ T4725] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 110.040199][ T4725] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 110.103175][ T4725] F2FS-fs (loop0): Found nat_bits in checkpoint [ 110.184474][ T4725] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 110.192005][ T4725] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 110.518268][ T4740] syz.0.312: attempt to access beyond end of device [ 110.518268][ T4740] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 110.717433][ T26] audit: type=1804 audit(1721148574.060:15): pid=4740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.312" name="/newroot/37/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 110.787341][ T4744] loop4: detected capacity change from 0 to 512 [ 110.955685][ T4744] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000079f) [ 110.994112][ T4744] FAT-fs (loop4): Filesystem has been set read-only [ 111.157297][ T4754] trusted_key: encrypted_key: insufficient parameters specified [ 111.175306][ T4753] loop1: detected capacity change from 0 to 512 [ 111.288417][ T4753] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 111.308612][ T4753] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038 (0x7fffffff) [ 111.364505][ T4763] loop3: detected capacity change from 0 to 512 [ 111.412417][ T4763] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 111.429083][ T4753] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz.1.318: corrupted inode contents [ 111.457082][ T4753] EXT4-fs error (device loop1): ext4_dirty_inode:6072: inode #2: comm syz.1.318: mark_inode_dirty error [ 111.476103][ T4183] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.513171][ T4763] EXT4-fs (loop3): 1 orphan inode deleted [ 111.519503][ T4753] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz.1.318: corrupted inode contents [ 111.543147][ T4763] EXT4-fs (loop3): 1 truncate cleaned up [ 111.596158][ T4763] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 111.617157][ T4753] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.318: mark_inode_dirty error [ 111.683051][ T4762] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 111.699470][ T4762] EXT4-fs (loop3): Remounting filesystem read-only [ 111.726155][ T4183] usb 5-1: Using ep0 maxpacket: 16 [ 111.776788][ T3554] EXT4-fs (loop3): unmounting filesystem. [ 111.926996][ T4183] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 111.927325][ T4766] loop2: detected capacity change from 0 to 8192 [ 112.111524][ T4183] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.141695][ T4183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.196173][ T4183] usb 5-1: Product: syz [ 112.200376][ T4183] usb 5-1: Manufacturer: ᨵĒ麶쟃︆ẵꕴ᤮ [ 112.247194][ T4183] usb 5-1: SerialNumber: syz [ 112.284436][ T3931] EXT4-fs (loop1): unmounting filesystem. [ 112.556193][ T4189] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 112.642822][ T26] audit: type=1326 audit(1721148576.160:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.1.328" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1698375bd9 code=0x0 [ 112.664402][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.766461][ T4183] cdc_ncm 5-1:1.0: bind() failure [ 112.783364][ T4183] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 112.806195][ T4189] usb 3-1: Using ep0 maxpacket: 16 [ 112.830985][ T4183] cdc_ncm 5-1:1.1: bind() failure [ 112.916640][ T4183] usb 5-1: USB disconnect, device number 3 [ 113.016377][ T4189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.074489][ T4189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.085900][ T4789] loop3: detected capacity change from 0 to 40427 [ 113.152303][ T4789] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 113.160231][ T4789] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 113.176546][ T4189] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.261042][ T4789] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.305319][ T4189] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 113.326429][ T4789] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 113.333536][ T4789] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 113.376273][ T4189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.429819][ T4189] usb 3-1: config 0 descriptor?? [ 113.442746][ T4770] loop0: detected capacity change from 0 to 40427 [ 113.567224][ T4770] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.604393][ T4789] syz.3.331: attempt to access beyond end of device [ 113.604393][ T4789] loop3: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 113.635156][ T26] audit: type=1804 audit(1721148577.150:17): pid=4789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.331" name="/newroot/74/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 113.926208][ T4770] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 114.178100][ T4189] ryos 0003:1E7D:31CE.0006: ignoring exceeding usage max [ 114.192533][ T3747] syz-executor: attempt to access beyond end of device [ 114.192533][ T3747] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 114.206648][ T4189] ryos 0003:1E7D:31CE.0006: ignoring exceeding usage max [ 114.213834][ T4189] ryos 0003:1E7D:31CE.0006: usage index exceeded [ 114.270965][ T4189] ryos 0003:1E7D:31CE.0006: item 0 0 2 2 parsing failed [ 114.297130][ T4189] ryos 0003:1E7D:31CE.0006: parse failed [ 114.332452][ T4189] ryos: probe of 0003:1E7D:31CE.0006 failed with error -22 [ 114.393572][ T3593] usb 3-1: USB disconnect, device number 7 [ 114.750106][ T4825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'. [ 114.790472][ T4825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'. [ 114.851471][ T4828] loop1: detected capacity change from 0 to 512 [ 114.859459][ T4825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'. [ 114.914850][ T4828] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 114.943632][ T4828] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038 (0x7fffffff) [ 115.000190][ T4828] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz.1.346: corrupted inode contents [ 115.028872][ T4828] EXT4-fs error (device loop1): ext4_dirty_inode:6072: inode #2: comm syz.1.346: mark_inode_dirty error [ 115.064929][ T4828] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz.1.346: corrupted inode contents [ 115.095499][ T4828] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.346: mark_inode_dirty error [ 115.259193][ T3931] EXT4-fs (loop1): unmounting filesystem. [ 115.283693][ T4839] loop3: detected capacity change from 0 to 2048 [ 115.367449][ T4839] loop3: p3 < > p4 < > [ 115.371760][ T4839] loop3: partition table partially beyond EOD, truncated [ 115.414225][ T4839] loop3: p3 start 4284289 is beyond EOD, truncated [ 115.526211][ T3002] loop3: p3 < > p4 < > [ 115.539195][ T3002] loop3: partition table partially beyond EOD, truncated [ 115.556256][ T3002] loop3: p3 start 4284289 is beyond EOD, truncated [ 115.725638][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 116.190943][ T4869] loop2: detected capacity change from 0 to 8192 [ 116.442452][ T4842] loop0: detected capacity change from 0 to 32768 [ 116.567221][ T4897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.373'. [ 116.579193][ T4842] XFS (loop0): Mounting V5 Filesystem [ 116.583598][ T4890] loop1: detected capacity change from 0 to 2048 [ 116.657519][ T4890] loop1: p3 < > p4 < > [ 116.661805][ T4890] loop1: partition table partially beyond EOD, truncated [ 116.686274][ T4186] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 116.766147][ T4890] loop1: p3 start 4284289 is beyond EOD, truncated [ 116.782436][ T4842] XFS (loop0): Ending clean mount [ 116.811570][ T4842] XFS (loop0): Quotacheck needed: Please wait. [ 116.936177][ T4186] usb 3-1: Using ep0 maxpacket: 16 [ 116.944360][ T4842] XFS (loop0): Quotacheck: Done. [ 117.056288][ T4186] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.116533][ T4186] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.181844][ T4186] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.215180][ T4917] QAT: Stopping all acceleration devices. [ 117.247151][ T4186] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 117.316080][ T4186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.385772][ T4186] usb 3-1: config 0 descriptor?? [ 117.511319][ T4924] loop3: detected capacity change from 0 to 1024 [ 117.743573][ T33] hfsplus: b-tree write err: -5, ino 4 [ 117.783015][ T4932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.386'. [ 117.906632][ T3747] XFS (loop0): Unmounting Filesystem [ 118.131408][ T4939] loop1: detected capacity change from 0 to 2048 [ 118.159269][ T4186] ryos 0003:1E7D:31CE.0007: ignoring exceeding usage max [ 118.197286][ T4186] ryos 0003:1E7D:31CE.0007: ignoring exceeding usage max [ 118.204361][ T4186] ryos 0003:1E7D:31CE.0007: usage index exceeded [ 118.231534][ T4186] ryos 0003:1E7D:31CE.0007: item 0 0 2 2 parsing failed [ 118.257764][ T4939] loop1: p3 < > p4 < > [ 118.262187][ T4939] loop1: partition table partially beyond EOD, truncated [ 118.275849][ T4186] ryos 0003:1E7D:31CE.0007: parse failed [ 118.306271][ T4939] loop1: p3 start 4284289 is beyond EOD, truncated [ 118.312905][ T4186] ryos: probe of 0003:1E7D:31CE.0007 failed with error -22 [ 118.343288][ T4945] device wlan1 entered promiscuous mode [ 118.405295][ T4186] usb 3-1: USB disconnect, device number 8 [ 118.411321][ T4945] device wlan1 left promiscuous mode [ 119.167256][ T4967] tmpfs: Bad value for 'uid' [ 119.754060][ T3559] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 119.762695][ T3559] Bluetooth: hci2: Injecting HCI hardware error event [ 119.772177][ T3561] Bluetooth: hci2: hardware error 0x00 [ 119.995334][ T4935] loop3: detected capacity change from 0 to 40427 [ 120.067920][ T4975] loop4: detected capacity change from 0 to 128 [ 120.084377][ T4975] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 120.106483][ T4935] F2FS-fs (loop3): Found nat_bits in checkpoint [ 120.108921][ T4977] device wlan1 entered promiscuous mode [ 120.135495][ T4977] device wlan1 left promiscuous mode [ 120.147246][ T4975] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 120.235872][ T4935] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 120.334669][ T4975] EXT4-fs error (device loop4): htree_dirblock_to_tree:1082: inode #2: comm syz.4.402: Directory block failed checksum [ 120.423605][ T3554] syz-executor: attempt to access beyond end of device [ 120.423605][ T3554] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 120.467126][ T3985] EXT4-fs (loop4): unmounting filesystem. [ 120.547764][ T4996] netlink: 6 bytes leftover after parsing attributes in process `syz.4.408'. [ 120.819991][ T5008] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 120.826822][ T5008] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 120.907440][ T5008] vhci_hcd vhci_hcd.0: Device attached [ 120.946376][ T3559] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 120.954940][ T3559] Bluetooth: hci3: Injecting HCI hardware error event [ 120.967653][ T3559] Bluetooth: hci3: hardware error 0x00 [ 120.995405][ T5009] vhci_hcd: connection closed [ 121.015306][ T33] vhci_hcd: stop threads [ 121.052676][ T33] vhci_hcd: release socket [ 121.063261][ T33] vhci_hcd: disconnect device [ 121.153454][ T5018] tmpfs: Bad value for 'uid' [ 121.816143][ T3561] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 121.839679][ T4190] vhci_hcd: vhci_device speed not set [ 122.050658][ T5029] device wlan1 entered promiscuous mode [ 122.100712][ T5029] device wlan1 left promiscuous mode [ 122.106361][ T5032] loop3: detected capacity change from 0 to 764 [ 122.145300][ T5032] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 122.171430][ T5034] loop0: detected capacity change from 0 to 2048 [ 122.241577][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.308996][ T5034] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18576, location=18576 [ 122.378684][ T5034] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.004151][ T3561] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 123.014259][ T3561] Bluetooth: hci0: Injecting HCI hardware error event [ 123.022789][ T3557] Bluetooth: hci0: hardware error 0x00 [ 123.064054][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.084195][ T3747] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 123.104590][ T3747] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 123.186711][ T3559] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 123.443526][ T5044] loop2: detected capacity change from 0 to 16 [ 123.482399][ T5044] erofs: (device loop2): mounted with root inode @ nid 36. [ 123.537061][ T3559] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 123.591423][ T5044] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 123.637285][ T26] audit: type=1800 audit(1721148587.160:18): pid=5044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.423" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 123.934221][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.961174][ T5047] loop3: detected capacity change from 0 to 128 [ 124.008135][ T5047] FAT-fs (loop3): bogus number of reserved sectors [ 124.035694][ T5047] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 124.078021][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.086558][ T5047] FAT-fs (loop3): Can't find a valid FAT filesystem [ 124.207516][ T3561] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.219296][ T3561] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.228192][ T3561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.238254][ T3561] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.258083][ T3561] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 124.265446][ T3561] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.850499][ T5048] chnl_net:caif_netlink_parms(): no params data found [ 124.874367][ T3559] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.889645][ T3559] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.898295][ T3559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.914343][ T3559] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.924352][ T3559] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 124.940854][ T3559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 125.003948][ T5077] device wlan1 entered promiscuous mode [ 125.024895][ T5077] device wlan1 left promiscuous mode [ 125.096353][ T3557] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 125.108836][ T3557] [ 125.111184][ T3557] ============================================ [ 125.117377][ T3557] WARNING: possible recursive locking detected [ 125.123521][ T3557] 6.1.99-syzkaller #0 Not tainted [ 125.128540][ T3557] -------------------------------------------- [ 125.134686][ T3557] kworker/u5:5/3557 is trying to acquire lock: [ 125.140833][ T3557] ffff888079920938 ((wq_completion)hci0){+.+.}-{0:0}, at: __flush_workqueue+0x157/0x1610 [ 125.150690][ T3557] [ 125.150690][ T3557] but task is already holding lock: [ 125.158052][ T3557] ffff888079920938 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 125.167811][ T3557] [ 125.167811][ T3557] other info that might help us debug this: [ 125.175865][ T3557] Possible unsafe locking scenario: [ 125.175865][ T3557] [ 125.183310][ T3557] CPU0 [ 125.186613][ T3557] ---- [ 125.189894][ T3557] lock((wq_completion)hci0); [ 125.194663][ T3557] lock((wq_completion)hci0); [ 125.199431][ T3557] [ 125.199431][ T3557] *** DEADLOCK *** [ 125.199431][ T3557] [ 125.207569][ T3557] May be due to missing lock nesting notation [ 125.207569][ T3557] [ 125.215886][ T3557] 2 locks held by kworker/u5:5/3557: [ 125.221171][ T3557] #0: ffff888079920938 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 125.231369][ T3557] #1: ffffc90003ecfd20 ((work_completion)(&hdev->error_reset)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 125.243134][ T3557] [ 125.243134][ T3557] stack backtrace: [ 125.249030][ T3557] CPU: 1 PID: 3557 Comm: kworker/u5:5 Not tainted 6.1.99-syzkaller #0 [ 125.257183][ T3557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 125.267242][ T3557] Workqueue: hci0 hci_error_reset [ 125.272289][ T3557] Call Trace: [ 125.275570][ T3557] [ 125.278505][ T3557] dump_stack_lvl+0x1e3/0x2cb [ 125.283194][ T3557] ? nf_tcp_handle_invalid+0x642/0x642 [ 125.288664][ T3557] ? panic+0x764/0x764 [ 125.292745][ T3557] validate_chain+0x4711/0x5950 [ 125.297620][ T3557] ? reacquire_held_locks+0x660/0x660 [ 125.303006][ T3557] ? __lock_acquire+0x1f80/0x1f80 [ 125.308041][ T3557] ? reacquire_held_locks+0x660/0x660 [ 125.313426][ T3557] ? mark_lock+0x9a/0x340 [ 125.317774][ T3557] ? __lock_acquire+0x125b/0x1f80 [ 125.322821][ T3557] ? mark_lock+0x9a/0x340 [ 125.327168][ T3557] __lock_acquire+0x125b/0x1f80 [ 125.332038][ T3557] lock_acquire+0x1f8/0x5a0 [ 125.336551][ T3557] ? __flush_workqueue+0x157/0x1610 [ 125.341760][ T3557] ? read_lock_is_recursive+0x10/0x10 [ 125.347147][ T3557] ? lockdep_softirqs_off+0x420/0x420 [ 125.352536][ T3557] ? __init_swait_queue_head+0xaa/0x140 [ 125.358094][ T3557] ? __flush_workqueue+0x157/0x1610 [ 125.363306][ T3557] __flush_workqueue+0x170/0x1610 [ 125.368334][ T3557] ? __flush_workqueue+0x157/0x1610 [ 125.373563][ T3557] ? trace_contention_end+0x61/0x170 [ 125.378863][ T3557] ? rcu_work_rcufn+0x140/0x140 [ 125.383725][ T3557] ? mark_lock+0x9a/0x340 [ 125.388071][ T3557] drain_workqueue+0xc5/0x390 [ 125.392774][ T3557] destroy_workqueue+0x7b/0xae0 [ 125.397631][ T3557] ? _raw_spin_unlock_irq+0x1f/0x40 [ 125.402840][ T3557] ? lockdep_hardirqs_on+0x94/0x130 [ 125.408044][ T3557] hci_release_dev+0x165/0x16b0 [ 125.412904][ T3557] ? devres_release_all+0x1e1/0x240 [ 125.418112][ T3557] ? _raw_spin_unlock+0x40/0x40 [ 125.422951][ T3557] ? hci_unregister_suspend_notifier+0x90/0x90 [ 125.429089][ T3557] ? devres_release+0x90/0x90 [ 125.433756][ T3557] ? hci_sock_dev_event+0x2ee/0x5e0 [ 125.438948][ T3557] bt_host_release+0x7f/0x90 [ 125.443520][ T3557] ? bt_link_release+0x20/0x20 [ 125.448273][ T3557] device_release+0x91/0x1c0 [ 125.452867][ T3557] kobject_put+0x224/0x460 [ 125.457265][ T3557] ? process_one_work+0x7a9/0x11d0 [ 125.462358][ T3557] process_one_work+0x8a9/0x11d0 [ 125.467280][ T3557] ? worker_detach_from_pool+0x260/0x260 [ 125.472892][ T3557] ? _raw_spin_lock_irqsave+0x120/0x120 [ 125.478423][ T3557] ? kthread_data+0x4e/0xc0 [ 125.482909][ T3557] ? wq_worker_running+0x97/0x190 [ 125.487936][ T3557] worker_thread+0xa47/0x1200 [ 125.492611][ T3557] ? __sched_text_start+0x8/0x8 [ 125.497450][ T3557] kthread+0x28d/0x320 [ 125.501498][ T3557] ? worker_clr_flags+0x190/0x190 [ 125.506519][ T3557] ? kthread_blkcg+0xd0/0xd0 [ 125.511113][ T3557] ret_from_fork+0x1f/0x30 [ 125.515541][ T3557] [ 125.601861][ T5048] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.610045][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.617763][ T5048] device bridge_slave_0 entered promiscuous mode [ 125.636753][ T5048] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.643859][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.652658][ T5048] device bridge_slave_1 entered promiscuous mode [ 125.681103][ T5048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.735145][ T5048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.775735][ T5048] team0: Port device team_slave_0 added [ 125.793191][ T5048] team0: Port device team_slave_1 added [ 125.812901][ T5069] chnl_net:caif_netlink_parms(): no params data found [ 125.889329][ T5048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.902691][ T5048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.942981][ T5048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.957001][ T5048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.970143][ T5048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.998919][ T5048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.176843][ T11] device hsr_slave_0 left promiscuous mode [ 126.183124][ T11] device hsr_slave_1 left promiscuous mode [ 126.190079][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.199586][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.208708][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.220166][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.228748][ T11] device bridge_slave_1 left promiscuous mode [ 126.234929][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.243977][ T11] device bridge_slave_0 left promiscuous mode [ 126.250568][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.262571][ T11] device veth1_macvtap left promiscuous mode [ 126.268640][ T11] device veth0_macvtap left promiscuous mode [ 126.274691][ T11] device veth1_vlan left promiscuous mode [ 126.280923][ T11] device veth0_vlan left promiscuous mode [ 126.376131][ T3561] Bluetooth: hci2: command tx timeout [ 126.462133][ T11] team0 (unregistering): Port device team_slave_1 removed [ 126.489563][ T11] team0 (unregistering): Port device team_slave_0 removed [ 126.514886][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.539925][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.613595][ T11] bond0 (unregistering): Released all slaves [ 126.694496][ T5048] device hsr_slave_0 entered promiscuous mode [ 126.702769][ T5048] device hsr_slave_1 entered promiscuous mode [ 126.710774][ T5048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.719041][ T5048] Cannot create hsr debugfs directory [ 126.759635][ T5069] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.776164][ T5069] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.784041][ T5069] device bridge_slave_0 entered promiscuous mode [ 126.815163][ T5069] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.822675][ T5069] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.831006][ T5069] device bridge_slave_1 entered promiscuous mode [ 126.891455][ T5069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.919569][ T5069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.982964][ T5069] team0: Port device team_slave_0 added [ 126.990201][ T5069] team0: Port device team_slave_1 added [ 127.012474][ T5069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.026108][ T3561] Bluetooth: hci3: command tx timeout [ 127.031537][ T5069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.072045][ T5069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.126542][ T5069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.133515][ T5069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.206509][ T5069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.318020][ T5069] device hsr_slave_0 entered promiscuous mode [ 127.338132][ T5069] device hsr_slave_1 entered promiscuous mode [ 127.345039][ T5069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.366065][ T5069] Cannot create hsr debugfs directory [ 127.589915][ T5048] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 127.610002][ T5048] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 127.630515][ T5048] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 127.649185][ T5048] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 127.672324][ T5069] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.768985][ T5069] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.798303][ T5048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.812587][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.820713][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.831133][ T5048] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.846775][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.855280][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.864298][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.871413][ T4184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.889649][ T5069] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.915702][ T5048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.933195][ T5048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.958074][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.965943][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.987226][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.995593][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.002703][ T4190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.023792][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.041872][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.051203][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.068825][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.087872][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.105750][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.117911][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.128746][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.142989][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.153087][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.165546][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.181805][ T5069] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.200752][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.220578][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.243029][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.315542][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.367688][ T5069] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.396981][ T5069] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.420903][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.435225][ T5069] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.456091][ T3561] Bluetooth: hci2: command tx timeout [ 128.466539][ T5048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.474394][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.483083][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.497103][ T5069] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.544881][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.554318][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.593633][ T5048] device veth0_vlan entered promiscuous mode [ 128.624129][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.634677][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.679780][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.688229][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.699217][ T5048] device veth1_vlan entered promiscuous mode [ 128.768003][ T5069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.774925][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 128.799165][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 128.807922][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.826494][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.835336][ T5048] device veth0_macvtap entered promiscuous mode [ 128.888274][ T5048] device veth1_macvtap entered promiscuous mode [ 128.896543][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 128.904479][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.919950][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.927814][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.957291][ T5069] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.977472][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.995174][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.008780][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.015875][ T4185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.029743][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.047786][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.075962][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.095403][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.106583][ T3561] Bluetooth: hci3: command tx timeout [ 129.112851][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.125404][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.135406][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.147883][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.160191][ T5048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.188466][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.198172][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.216562][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.244653][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.266079][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.275902][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.301723][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.312359][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.323653][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.333705][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.344323][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.355428][ T5048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.364541][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.373967][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.384152][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.391253][ T4185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.401396][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.410104][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.438089][ T5048] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.447496][ T5048] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.457204][ T5048] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.465909][ T5048] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.486007][ T5069] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.500870][ T5069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.517121][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.527979][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.537724][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.547598][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.555985][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.565218][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.577740][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.586611][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.597769][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.617607][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.672392][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.698009][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.760573][ T5048] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 129.867698][ T3703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.868474][ T5048] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 129.875525][ T3703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.916436][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 129.970968][ T5069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.980437][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.989153][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.039790][ T4323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.061932][ T4323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.090700][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.313716][ T11] device hsr_slave_0 left promiscuous mode [ 130.323421][ T11] device hsr_slave_1 left promiscuous mode [ 130.330185][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.337812][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.345767][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.354861][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.362862][ T11] device bridge_slave_1 left promiscuous mode [ 130.369267][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.380026][ T11] device bridge_slave_0 left promiscuous mode [ 130.391081][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.402150][ T11] device hsr_slave_0 left promiscuous mode [ 130.414322][ T11] device hsr_slave_1 left promiscuous mode [ 130.421046][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.429115][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.437098][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.444862][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.453147][ T11] device bridge_slave_1 left promiscuous mode [ 130.466387][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.481111][ T11] device bridge_slave_0 left promiscuous mode [ 130.487382][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.499143][ T11] device veth1_macvtap left promiscuous mode [ 130.508587][ T11] device veth0_macvtap left promiscuous mode [ 130.514680][ T11] device veth1_vlan left promiscuous mode [ 130.522305][ T11] device veth0_vlan left promiscuous mode [ 130.529222][ T11] device veth1_macvtap left promiscuous mode [ 130.535239][ T11] device veth0_macvtap left promiscuous mode [ 130.542200][ T11] device veth1_vlan left promiscuous mode [ 130.546325][ T3561] Bluetooth: hci2: command tx timeout [ 130.548472][ T11] device veth0_vlan left promiscuous mode [ 130.829861][ T11] team0 (unregistering): Port device team_slave_1 removed [ 130.860103][ T11] team0 (unregistering): Port device team_slave_0 removed [ 130.875669][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.899613][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.959520][ T11] bond0 (unregistering): Released all slaves [ 131.104619][ T11] team0 (unregistering): Port device team_slave_1 removed [ 131.130854][ T11] team0 (unregistering): Port device team_slave_0 removed [ 131.155103][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.183773][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.186341][ T3561] Bluetooth: hci3: command tx timeout [ 131.268114][ T11] bond0 (unregistering): Released all slaves [ 131.342239][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.371261][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.384433][ T5069] device veth0_vlan entered promiscuous mode [ 131.410466][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.420615][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.434767][ T5069] device veth1_vlan entered promiscuous mode [ 131.476689][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.484412][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.492089][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 131.500488][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 131.510227][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.518756][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.528396][ T5069] device veth0_macvtap entered promiscuous mode [ 131.549364][ T5069] device veth1_macvtap entered promiscuous mode [ 131.577786][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.588440][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.599614][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.618568][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.631515][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.642021][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.655368][ T5069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.663397][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 131.672281][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.680788][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.689382][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.699377][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.713252][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.726747][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.737323][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.747609][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.759855][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.770908][ T5069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.801740][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.810785][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.828583][ T5069] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.846154][ T5069] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.854852][ T5069] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.881819][ T5069] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.913871][ T5069] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 131.935565][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.936920][ T5069] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 131.954496][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.997943][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.019160][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.036135][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.043598][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.627434][ T3561] Bluetooth: hci2: command tx timeout [ 132.633185][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.639489][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.256080][ T3559] Bluetooth: hci3: command tx timeout