last executing test programs: 4.028011536s ago: executing program 3 (id=1116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$ttys(0xc, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5efcb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x2}, 0x18) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r3) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) 3.608056181s ago: executing program 2 (id=1121): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 3.119136323s ago: executing program 3 (id=1122): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 2.81121605s ago: executing program 1 (id=1125): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1, 0x0, 0xfffffffffffffd96}}], 0x2, 0x16da) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r2, 0x80080400) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xb, &(0x7f0000000000)=0x1000, 0x4) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x10) getsockopt$inet_int(r4, 0x10d, 0xf, &(0x7f0000000000), &(0x7f0000000280)=0x4) 2.772858563s ago: executing program 3 (id=1126): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 2.528020394s ago: executing program 1 (id=1128): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth1_to_bridge\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10}}) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000f1401002abd70f0fadbdf2508000100000000000800450073726c04"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@remote, @empty, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=@expire={0x274, 0x18, 0x8, 0x70bd2d, 0x25dfdbfb, {{{@in=@private=0xa010102, @in6=@mcast1, 0x4e24, 0xf, 0x4e21, 0x9, 0x2, 0x0, 0xa0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x4d3, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x3, 0x4, 0x9, 0xb, 0x6, 0x922f, 0x9, 0xa6}, {0x8000, 0x0, 0x4, 0x6921}, {0xe, 0x7, 0x8}, 0x70bd25, 0x3501, 0x2, 0x2, 0xe6, 0x2}, 0x5}, [@srcaddr={0x14, 0xd, @in6=@empty}, @replay_thresh={0x8, 0xb, 0xc8}, @algo_aead={0x7a, 0x12, {{'rfc4309(morus1280-sse2)\x00'}, 0x170, 0x40, "3e45b0e78000caaaa7ae36b5d7077bdb173ae49d39e9b2924f7f0cb73207ca00bee8c5cf6f493ad9dd3662ff348c"}}, @sa={0xe4, 0x6, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2, 0x4e20, 0x79, 0x4e23, 0x2, 0xa, 0x0, 0xa0, 0x0, r2, 0xee00}, {@in=@multicast1, 0x4d4, 0x2b}, @in6=@private2, {0xf9e5, 0x8, 0x0, 0x40000000000, 0x6, 0xccf, 0xfea, 0x662}, {0x7fffffff, 0xa, 0x2, 0xce03}, {0x2, 0x3}, 0x70bd2b, 0x3507, 0x2, 0x1, 0xee, 0x98}}]}, 0x274}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0xffffffffffffffff, &(0x7f00000002c0), &(0x7f00000002c0), 0xd9, r4}, 0x38) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRESDEC], 0xfc}}, 0x0) 2.478780048s ago: executing program 2 (id=1129): socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000300)) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000006c0)={r4, 0x200}, &(0x7f0000000700)=0x8) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x38}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r5) unshare(0x22020600) sendmsg$NL80211_CMD_SET_BSS(r7, 0x0, 0x4000040) sendmmsg$inet(r1, &(0x7f0000005ac0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @local}}}], 0x20}}], 0x1, 0x0) 2.408520044s ago: executing program 1 (id=1130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x3c, r1, 0x5, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x8, {0x1, 0xfffe, 0x6, 0xb}}}, @NL80211_ATTR_KEYS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) 2.284088304s ago: executing program 1 (id=1132): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x4e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xc, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}}}}}}}, 0x0) 2.182372053s ago: executing program 1 (id=1133): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f00000500000000000000", @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001800ffff00000000000000000a0020000000000900000000040008800800170005000000"], 0x28}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0x37, 0x0}, 0x0) 2.112941849s ago: executing program 2 (id=1134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000090600010015"], 0x1c}}, 0x0) 1.077176397s ago: executing program 0 (id=1135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x44040) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}], 0x1, 0x20000840) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[], 0x1000f) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0xc000) 1.076022997s ago: executing program 2 (id=1136): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) dup(0xffffffffffffffff) 1.024686822s ago: executing program 4 (id=1137): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x24048082) 1.017781573s ago: executing program 3 (id=1138): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='H', 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 826.954989ms ago: executing program 1 (id=1139): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 807.1084ms ago: executing program 4 (id=1140): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r2) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r2, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) 680.485021ms ago: executing program 3 (id=1141): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 680.191722ms ago: executing program 0 (id=1142): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}], 0x1, 0x0) 679.909392ms ago: executing program 4 (id=1143): connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) unshare(0x6020400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty=0x2000000}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 438.376882ms ago: executing program 0 (id=1144): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r2) sendmmsg$inet(r0, &(0x7f0000005ac0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @local}}}], 0x20}}], 0x1, 0x0) 423.563514ms ago: executing program 3 (id=1145): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x804498, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,uni_xlate=1,shortname=mixed,rodir,shortname=lower,utf8=0,uni_xlate=1,dos1xfloppy,check=strict,uni_xlate=1,shortname=win95,iocharset=iso8859-15,codepage=855,shortname=lower,nonumtail=0,nonumtail=0,uni_xlate=0,uni_xlate=0,iocharset=iso8859-6,shortname=lower,nnonumtail=1,shortname=win95,rodir,utf8=0,nnonumtail=1,shortname=lower,shortname=mixed,iocharset=ascii,appraise,uid>', @ANYRESDEC=0x0, @ANYBLOB="0200"], 0x6, 0x2d3, &(0x7f0000000a40)="$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") r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x20e2c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') 364.492549ms ago: executing program 4 (id=1146): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000080000000000008000300", @ANYRES32, @ANYBLOB="1c005a8018000180140005000800010003007edd"], 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff08021100000105"], 0x398}}, 0x0) 312.705713ms ago: executing program 0 (id=1147): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) 300.385324ms ago: executing program 4 (id=1148): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 220.400521ms ago: executing program 0 (id=1149): syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2}}}}}}, 0x0) 219.753881ms ago: executing program 4 (id=1150): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f00000500000000000000", @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001800ffff00000000000000000a0020000000000900000000040008800800170005000000"], 0x28}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0x37, 0x0}, 0x0) 121.952329ms ago: executing program 0 (id=1151): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x24048082) 120.710889ms ago: executing program 2 (id=1152): socket(0x15, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) 0s ago: executing program 2 (id=1153): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b21, &(0x7f0000000040)) kernel console output (not intermixed with test programs): d encryption level 5 [ 359.865094][ T5900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 359.867558][ T5900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 359.871223][ T5900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 359.873778][ T5900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 359.895071][ T6185] device veth0_vlan entered promiscuous mode [ 359.912451][ T6185] device veth1_vlan entered promiscuous mode [ 359.959389][ T6185] device veth0_macvtap entered promiscuous mode [ 359.985308][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 359.987806][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 359.991050][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 359.998891][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 360.011015][ T6185] device veth1_macvtap entered promiscuous mode [ 360.016616][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 360.024920][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 360.082020][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.090200][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.092522][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.120878][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.123218][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.150875][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.153455][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.155818][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.158116][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.171729][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.175206][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.177757][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.204234][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.206841][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.209981][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.553275][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.760761][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.777975][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.960137][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.962679][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.965237][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.967701][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.996379][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.998791][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.010249][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.012913][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.015372][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.017774][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.033650][ T6358] loop2: detected capacity change from 0 to 2048 [ 361.060073][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.062780][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.065264][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.067677][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.080103][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.093551][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.100314][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 361.106243][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 361.120763][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 361.142222][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 361.148612][ T6185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.160303][ T6185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.162881][ T6185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.164840][ T6185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.219525][ T6358] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 361.440345][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.442324][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.447025][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 361.521768][ T346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.524567][ T346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.529192][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 361.932833][ T6371] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 362.053623][ T6375] loop2: detected capacity change from 0 to 256 [ 363.306252][ T6381] loop1: detected capacity change from 0 to 256 [ 363.335160][ T6385] loop0: detected capacity change from 0 to 512 [ 363.514831][ T6385] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 363.550185][ T4067] Bluetooth: hci2: command 0x0406 tx timeout [ 363.689995][ T6394] loop3: detected capacity change from 0 to 512 [ 363.707507][ T6385] EXT4-fs (loop0): 1 orphan inode deleted [ 363.708955][ T6385] EXT4-fs (loop0): 1 truncate cleaned up [ 363.712198][ T6385] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,max_dir_size_kb=0x0000000000000004,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000010000,max_dir_size_kb=0x000000000000ffff,errors=remount-ro,init_itable=0x0000000000000008,journal_dev=0x000000007fffff. Quota mode: none. [ 363.808391][ T6395] netlink: 'syz.1.531': attribute type 25 has an invalid length. [ 364.679871][ T6394] EXT4-fs (loop3): Unsupported encryption level 5 [ 366.396454][ T6409] loop0: detected capacity change from 0 to 2048 [ 366.450922][ T6409] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 367.004968][ T6418] loop4: detected capacity change from 0 to 256 [ 367.184223][ T6422] loop1: detected capacity change from 0 to 512 [ 367.382571][ T6422] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 367.518839][ T4067] hid-generic 0001:0000:0004.0004: hidraw0: HID v0.08 Device [syz1] on syz1 [ 370.442858][ T6454] loop3: detected capacity change from 0 to 1024 [ 370.504704][ T6454] EXT4-fs (loop3): Test dummy encryption mode enabled [ 370.506978][ T6454] EXT4-fs (loop3): Ignoring removed orlov option [ 370.520494][ T6454] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 372.836173][ T6469] loop2: detected capacity change from 0 to 2048 [ 372.865608][ T6471] loop4: detected capacity change from 0 to 128 [ 372.900685][ T6469] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 372.931053][ T6461] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 372.941394][ T6457] kernel profiling enabled (shift: 17) [ 373.030330][ T6058] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 373.430499][ T6058] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.433007][ T6058] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.435526][ T6058] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 373.441374][ T6058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.459559][ T6058] usb 1-1: config 0 descriptor?? [ 374.010670][ T6058] hid (null): bogus close delimiter [ 374.025501][ T6491] loop1: detected capacity change from 0 to 512 [ 374.860451][ T6058] usb 1-1: string descriptor 0 read error: -22 [ 374.883926][ T6491] EXT4-fs (loop1): Unsupported encryption level 5 [ 374.932277][ T6496] udc-core: couldn't find an available UDC or it's busy [ 374.934112][ T6496] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 374.940481][ T6058] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 374.946315][ T6479] loop3: detected capacity change from 0 to 40427 [ 374.951362][ T6497] udc-core: couldn't find an available UDC or it's busy [ 374.959843][ T6497] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 374.981084][ T26] audit: type=1326 audit(375.933:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.2.562" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa010c9a8 code=0x0 [ 375.129700][ T6479] F2FS-fs (loop3): invalid crc value [ 375.149703][ T4177] usb 1-1: USB disconnect, device number 11 [ 375.178472][ T6479] F2FS-fs (loop3): Found nat_bits in checkpoint [ 375.205972][ T6479] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 375.218266][ T6479] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 375.346453][ T6185] attempt to access beyond end of device [ 375.346453][ T6185] loop3: rw=2049, want=45112, limit=40427 [ 375.782393][ T6511] input: syz0 as /devices/virtual/input/input5 [ 376.464195][ T6512] xt_CT: You must specify a L4 protocol and not use inversions on it [ 376.883372][ T6515] ptrace attach of "./syz-executor exec"[6081] was attempted by "./syz-executor exec"[6515] [ 376.887837][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.889577][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.971615][ T6518] loop0: detected capacity change from 0 to 256 [ 377.067989][ T6518] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 378.835870][ T6526] loop1: detected capacity change from 0 to 2048 [ 379.724857][ T6526] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 379.927517][ T6536] udc-core: couldn't find an available UDC or it's busy [ 379.933183][ T6536] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 380.076257][ T6539] input: syz0 as /devices/virtual/input/input6 [ 380.175204][ T6541] loop3: detected capacity change from 0 to 512 [ 380.260423][ T6541] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 380.312185][ T6541] EXT4-fs (loop3): 1 truncate cleaned up [ 380.313765][ T6541] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 383.692956][ T6556] udc-core: couldn't find an available UDC or it's busy [ 383.694999][ T6556] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 385.121634][ T6574] udc-core: couldn't find an available UDC or it's busy [ 385.123654][ T6574] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 385.470531][ T5328] Bluetooth: hci1: command 0x1003 tx timeout [ 385.472262][ T4023] Bluetooth: hci1: sending frame failed (-49) [ 387.817068][ T5328] Bluetooth: hci1: command 0x1001 tx timeout [ 387.818628][ T4023] Bluetooth: hci1: sending frame failed (-49) [ 388.185982][ T6593] loop4: detected capacity change from 0 to 256 [ 388.511409][ T136] device hsr_slave_0 left promiscuous mode [ 389.424614][ T136] device hsr_slave_1 left promiscuous mode [ 389.502536][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.504524][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.508519][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.516547][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.519117][ T136] device bridge_slave_1 left promiscuous mode [ 389.530224][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.573217][ T136] device bridge_slave_0 left promiscuous mode [ 389.574747][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.618821][ T136] device hsr_slave_0 left promiscuous mode [ 389.688851][ T136] device hsr_slave_1 left promiscuous mode [ 389.760401][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.762381][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.781932][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.783952][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.787450][ T136] device bridge_slave_1 left promiscuous mode [ 389.789107][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.852512][ T136] device bridge_slave_0 left promiscuous mode [ 389.854606][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.893401][ T4177] Bluetooth: hci1: command 0x1009 tx timeout [ 389.907681][ T136] device hsr_slave_0 left promiscuous mode [ 389.983145][ T136] device hsr_slave_1 left promiscuous mode [ 390.027713][ T6601] loop2: detected capacity change from 0 to 128 [ 390.164393][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.166543][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.172059][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.173938][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.188648][ T136] device bridge_slave_1 left promiscuous mode [ 390.194014][ T6601] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 390.200323][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.204739][ T6601] FAT-fs (loop2): Filesystem has been set read-only [ 390.213518][ T6605] loop1: detected capacity change from 0 to 512 [ 390.251285][ T136] device bridge_slave_0 left promiscuous mode [ 390.252788][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.276495][ T6605] EXT4-fs (loop1): Unsupported encryption level 5 [ 390.296718][ T136] device hsr_slave_0 left promiscuous mode [ 390.330957][ T136] device hsr_slave_1 left promiscuous mode [ 390.410355][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.412294][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.415082][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.418182][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.425966][ T136] device bridge_slave_1 left promiscuous mode [ 390.429783][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.471999][ T136] device bridge_slave_0 left promiscuous mode [ 390.473750][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.740503][ T136] device veth1_macvtap left promiscuous mode [ 390.742290][ T136] device veth0_macvtap left promiscuous mode [ 390.743945][ T136] device veth1_vlan left promiscuous mode [ 390.745681][ T136] device veth0_vlan left promiscuous mode [ 390.787454][ T5952] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 390.860478][ T136] device veth1_macvtap left promiscuous mode [ 390.862278][ T136] device veth0_macvtap left promiscuous mode [ 390.864027][ T136] device veth1_vlan left promiscuous mode [ 390.865828][ T136] device veth0_vlan left promiscuous mode [ 390.990643][ T136] device veth1_macvtap left promiscuous mode [ 390.992376][ T136] device veth0_macvtap left promiscuous mode [ 390.994135][ T136] device veth1_vlan left promiscuous mode [ 390.995828][ T136] device veth0_vlan left promiscuous mode [ 391.120330][ T136] device veth1_macvtap left promiscuous mode [ 391.122123][ T136] device veth0_macvtap left promiscuous mode [ 391.123834][ T136] device veth1_vlan left promiscuous mode [ 391.125739][ T136] device veth0_vlan left promiscuous mode [ 391.205529][ T6617] loop1: detected capacity change from 0 to 512 [ 391.244774][ T6617] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 391.288947][ T6617] EXT4-fs (loop1): failed to initialize system zone (-117) [ 391.291210][ T6617] EXT4-fs (loop1): mount failed [ 391.389989][ T6623] binder: 6622:6623 tried to acquire reference to desc 0, got 1 instead [ 391.393957][ T6623] binder: 6622:6623 got transaction with invalid parent offset or type [ 391.396401][ T6623] binder: 6622:6623 transaction failed 29201/-22, size 80-24 line 3286 [ 391.399602][ T4177] binder: undelivered TRANSACTION_ERROR: 29201 [ 392.270178][ T5328] Bluetooth: hci6: command 0x0409 tx timeout [ 392.606167][ T136] team0 (unregistering): Port device team_slave_1 removed [ 392.619079][ T136] team0 (unregistering): Port device team_slave_0 removed [ 392.631302][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.688849][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.830712][ T4177] Bluetooth: hci7: command 0x0409 tx timeout [ 392.838793][ T136] bond0 (unregistering): Released all slaves [ 393.060221][ T136] team0 (unregistering): Port device team_slave_1 removed [ 393.069785][ T136] team0 (unregistering): Port device team_slave_0 removed [ 393.082069][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.148354][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.308472][ T136] bond0 (unregistering): Released all slaves [ 393.513566][ T136] team0 (unregistering): Port device team_slave_1 removed [ 393.544898][ T136] team0 (unregistering): Port device team_slave_0 removed [ 393.571521][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.648468][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.817064][ T136] bond0 (unregistering): Released all slaves [ 394.018399][ T136] team0 (unregistering): Port device team_slave_1 removed [ 394.027624][ T136] team0 (unregistering): Port device team_slave_0 removed [ 394.040928][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.079419][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.260512][ T136] bond0 (unregistering): Released all slaves [ 394.350170][ T25] Bluetooth: hci6: command 0x041b tx timeout [ 394.370311][ T6614] netlink: 16 bytes leftover after parsing attributes in process `syz.2.594'. [ 394.684937][ T6640] loop4: detected capacity change from 0 to 512 [ 394.712978][ T6640] EXT4-fs (loop4): Unsupported encryption level 5 [ 395.038173][ T6606] chnl_net:caif_netlink_parms(): no params data found [ 395.063945][ T6611] chnl_net:caif_netlink_parms(): no params data found [ 395.096526][ T6648] loop2: detected capacity change from 0 to 2048 [ 395.177834][ T25] Bluetooth: hci7: command 0x041b tx timeout [ 395.219495][ T6606] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.221712][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.224228][ T6606] device bridge_slave_0 entered promiscuous mode [ 395.238396][ T6606] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.242063][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.244622][ T6606] device bridge_slave_1 entered promiscuous mode [ 395.262628][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.265540][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.270186][ T6648] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 395.270327][ T6611] device bridge_slave_0 entered promiscuous mode [ 395.277339][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.279285][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.282847][ T6611] device bridge_slave_1 entered promiscuous mode [ 395.420848][ T6659] udc-core: couldn't find an available UDC or it's busy [ 395.422817][ T6659] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 395.466706][ T6606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.485177][ T6606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.545582][ T6606] team0: Port device team_slave_0 added [ 395.560978][ T6606] team0: Port device team_slave_1 added [ 395.588009][ T6611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.532538][ T6611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.551103][ T13] Bluetooth: hci6: command 0x040f tx timeout [ 396.567021][ T6606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.568861][ T6606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.579515][ T6606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.619404][ T6606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.642027][ T6606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.689529][ T6606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.767946][ T6611] team0: Port device team_slave_0 added [ 396.771784][ T6611] team0: Port device team_slave_1 added [ 396.982761][ T6606] device hsr_slave_0 entered promiscuous mode [ 397.020874][ T6606] device hsr_slave_1 entered promiscuous mode [ 397.060971][ T6606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.062928][ T6606] Cannot create hsr debugfs directory [ 397.065214][ T6611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.067078][ T6611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.083805][ T6611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.097574][ T6669] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 397.159913][ T6611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.162041][ T6611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.168138][ T6611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.230386][ T5531] Bluetooth: hci7: command 0x040f tx timeout [ 397.631258][ T6611] device hsr_slave_0 entered promiscuous mode [ 398.622954][ T7] Bluetooth: hci6: command 0x0419 tx timeout [ 398.715176][ T6611] device hsr_slave_1 entered promiscuous mode [ 399.104144][ T6611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.106077][ T6611] Cannot create hsr debugfs directory [ 400.105435][ T13] Bluetooth: hci7: command 0x0419 tx timeout [ 400.153774][ T6606] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.434842][ T6606] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.478981][ T6695] loop4: detected capacity change from 0 to 256 [ 400.533080][ T6695] exfat: Unknown parameter '$' [ 400.614348][ T6606] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.736330][ T6606] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.957217][ T6611] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.085074][ T6699] udc-core: couldn't find an available UDC or it's busy [ 401.087097][ T6611] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.089453][ T6699] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 401.190724][ T6611] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.239569][ T6611] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.491515][ T6606] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 401.562328][ T6606] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 401.669893][ T6606] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 401.712118][ T6606] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 402.739317][ T6611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 402.804106][ T6611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 402.819206][ T6708] loop1: detected capacity change from 0 to 512 [ 402.838556][ T6611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 402.872818][ T6708] EXT4-fs (loop1): Unsupported encryption level 5 [ 402.902360][ T6611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 403.156572][ T6606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.205312][ T6611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.208539][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 403.218539][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 403.244354][ T6606] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.249284][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 403.260754][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 403.271051][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.272769][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.289603][ T6611] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.323970][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 403.326594][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 403.329114][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 403.344332][ T6710] xt_TCPMSS: Only works on TCP SYN packets [ 403.391637][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 403.394815][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 403.397030][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.398792][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.417015][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 403.433604][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 403.436581][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 403.439280][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 403.442655][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.444654][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.450849][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 403.453626][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 403.465272][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.466999][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.469123][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 403.504526][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 403.506974][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 403.523446][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 403.526189][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 403.533575][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 403.549739][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 403.561402][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 403.564112][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 403.566642][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 403.569381][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 403.594043][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 403.596660][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 403.606705][ T6611] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 403.609455][ T6611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 403.627581][ T6606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 403.642807][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 403.646320][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 403.649064][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 403.656901][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 403.664235][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 403.672070][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 403.681177][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 403.689442][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 403.697144][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 403.729505][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 404.289364][ T6606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.293191][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 404.295405][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 404.347746][ T6611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.420989][ T6606] device veth0_vlan entered promiscuous mode [ 404.445165][ T6606] device veth1_vlan entered promiscuous mode [ 404.531548][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 404.533705][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 404.536008][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 404.538880][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 404.551052][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 404.569507][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 405.508145][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 405.531767][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 405.557633][ T6606] device veth0_macvtap entered promiscuous mode [ 405.564392][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 405.568877][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 405.576916][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 405.586151][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 405.594184][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 405.621454][ T6606] device veth1_macvtap entered promiscuous mode [ 405.661083][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.663684][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.665997][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.668552][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.743452][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.745992][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.748477][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.763232][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.765692][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.768198][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.781648][ T6606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.797558][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.801045][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.803242][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.816211][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.818845][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.838314][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.852780][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.855302][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.888300][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.894738][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.914538][ T6606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.931249][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 405.934289][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 405.937009][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 405.944232][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 406.506148][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 406.509176][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 406.531179][ T6606] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.533318][ T6606] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.535474][ T6606] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.537676][ T6606] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.580877][ T6611] device veth0_vlan entered promiscuous mode [ 406.619342][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 406.623889][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 406.634523][ T6611] device veth1_vlan entered promiscuous mode [ 406.813330][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 406.815914][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 406.909958][ T6145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.913956][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 406.916763][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 406.925391][ T6145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.929531][ T6292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.931913][ T6292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.939788][ T6611] device veth0_macvtap entered promiscuous mode [ 406.950632][ T5900] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 406.952986][ T5900] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 406.955345][ T5900] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 406.970666][ T6611] device veth1_macvtap entered promiscuous mode [ 407.033977][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.053286][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.055950][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.078908][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.082200][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.090327][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.098644][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.120342][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.129570][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.142540][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.152827][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.164884][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.178666][ T6611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.202876][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.209596][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.215611][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.258873][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.272377][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.275358][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.306937][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.330065][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.500925][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.508075][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.512893][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.787232][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.811664][ T6611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.851860][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 408.855784][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 408.858876][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.871426][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 408.883335][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.161845][ T6611] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.173789][ T6611] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.187788][ T6611] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.198689][ T6611] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.332257][ T6145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.335073][ T6145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.339121][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 409.382510][ T6145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.384738][ T6145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.393090][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 410.079562][ T6756] loop1: detected capacity change from 0 to 2048 [ 410.108432][ T6752] sch_fq: defrate 0 ignored. [ 410.205003][ T6756] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 411.654131][ T6771] loop2: detected capacity change from 0 to 512 [ 411.671857][ T6772] udc-core: couldn't find an available UDC or it's busy [ 411.673540][ T6772] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 411.689238][ T6771] EXT4-fs (loop2): Unsupported encryption level 5 [ 413.593852][ T6788] udc-core: couldn't find an available UDC or it's busy [ 413.600597][ T6788] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 413.857438][ T26] audit: type=1326 audit(414.803:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b7ce9a8 code=0x7ffc0000 [ 414.824728][ T26] audit: type=1326 audit(415.773:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff8b7ce9a8 code=0x7ffc0000 [ 414.860095][ T26] audit: type=1326 audit(415.783:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b7ce9a8 code=0x7ffc0000 [ 414.900091][ T26] audit: type=1326 audit(415.783:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=23 compat=0 ip=0xffff8b7ce9a8 code=0x7ffc0000 [ 414.944192][ T26] audit: type=1326 audit(415.783:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b7ce9a8 code=0x7ffc0000 [ 414.974595][ T26] audit: type=1326 audit(415.783:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=205 compat=0 ip=0xffff8b7ce9a8 code=0x7ffc0000 [ 414.979804][ T26] audit: type=1326 audit(415.783:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b7ce9a8 code=0x7ffc0000 [ 415.022137][ T6798] loop0: detected capacity change from 0 to 512 [ 415.201174][ T6804] loop4: detected capacity change from 0 to 256 [ 415.921035][ T6798] EXT4-fs (loop0): Ignoring removed bh option [ 416.017700][ T6798] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #12: comm syz.0.637: inline data xattr refers to an external xattr inode [ 416.023371][ T6798] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.637: couldn't read orphan inode 12 (err -117) [ 416.026705][ T6798] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000000409e,nodiscard,,errors=continue. Quota mode: writeback. [ 417.163753][ T26] audit: type=1326 audit(417.473:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb43179a8 code=0x7ffc0000 [ 417.281177][ T26] audit: type=1326 audit(417.473:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb43179a8 code=0x7ffc0000 [ 417.286251][ T26] audit: type=1326 audit(417.713:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=266 compat=0 ip=0xffffb43179a8 code=0x7ffc0000 [ 419.078312][ T6829] loop0: detected capacity change from 0 to 1024 [ 419.169667][ T6829] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 420.592545][ T6836] EXT4-fs (nvme0n1p2): resizing filesystem from 262144 to 262144 blocks [ 420.774652][ T6841] udc-core: couldn't find an available UDC or it's busy [ 420.787598][ T6841] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 420.798722][ T6839] loop0: detected capacity change from 0 to 2048 [ 420.980931][ T6839] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 422.364223][ T6850] loop0: detected capacity change from 0 to 256 [ 422.408673][ T6850] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3962bc8b, utbl_chksum : 0xe619d30d) [ 423.144201][ T6859] loop1: detected capacity change from 0 to 512 [ 423.211436][ T6861] loop2: detected capacity change from 0 to 256 [ 423.241549][ T6863] loop4: detected capacity change from 0 to 512 [ 423.319189][ T6859] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #16: comm syz.1.652: iget: bad extended attribute block 128 [ 423.323246][ T6859] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.652: couldn't read orphan inode 16 (err -117) [ 423.337015][ T6859] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 423.364545][ T6859] EXT4-fs error (device loop1): ext4_lookup:1856: inode #16: comm syz.1.652: iget: bad extended attribute block 128 [ 423.678472][ T6863] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 423.709031][ T6863] EXT4-fs (loop4): 1 truncate cleaned up [ 423.710961][ T6863] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,jqfmt=vfsold,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 424.018922][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 424.758693][ T6888] udc-core: couldn't find an available UDC or it's busy [ 424.788003][ T6888] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 425.019510][ T6894] loop2: detected capacity change from 0 to 512 [ 425.958670][ T6894] EXT4-fs (loop2): Unsupported encryption level 5 [ 428.714882][ T6919] loop4: detected capacity change from 0 to 16 [ 429.123395][ T6919] erofs: (device loop4): mounted with root inode @ nid 36. [ 429.128689][ T6917] erofs: (device loop4): z_erofs_fill_inode_lazy: unknown compression format 1 for nid 36, please upgrade kernel [ 429.131882][ T6917] erofs: (device loop4): z_erofs_readpage: failed to read, err [-95] [ 429.346346][ T136] device hsr_slave_0 left promiscuous mode [ 429.376069][ T6923] loop4: detected capacity change from 0 to 256 [ 429.391978][ T136] device hsr_slave_1 left promiscuous mode [ 429.485725][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.487599][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.500907][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.502810][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.526671][ T136] device bridge_slave_1 left promiscuous mode [ 429.528346][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.489053][ T136] device bridge_slave_0 left promiscuous mode [ 430.501272][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 430.503753][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.636874][ T6927] loop4: detected capacity change from 0 to 256 [ 430.688198][ T136] device hsr_slave_0 left promiscuous mode [ 430.760878][ T136] device hsr_slave_1 left promiscuous mode [ 430.846505][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.848443][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.852654][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.854405][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.868337][ T136] device bridge_slave_1 left promiscuous mode [ 430.869979][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.943478][ T136] device bridge_slave_0 left promiscuous mode [ 430.945367][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.530444][ T136] device veth1_macvtap left promiscuous mode [ 431.531740][ T6932] loop2: detected capacity change from 0 to 512 [ 431.532057][ T136] device veth0_macvtap left promiscuous mode [ 431.536267][ T136] device veth1_vlan left promiscuous mode [ 431.537924][ T136] device veth0_vlan left promiscuous mode [ 431.581289][ T6932] EXT4-fs (loop2): Unsupported encryption level 5 [ 431.730462][ T136] device veth1_macvtap left promiscuous mode [ 431.732180][ T136] device veth0_macvtap left promiscuous mode [ 431.733664][ T136] device veth1_vlan left promiscuous mode [ 431.735052][ T136] device veth0_vlan left promiscuous mode [ 431.778780][ T6932] loop2: detected capacity change from 0 to 512 [ 432.171918][ T6932] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 433.868753][ T6957] loop1: detected capacity change from 0 to 512 [ 434.227048][ T6957] EXT4-fs (loop1): Unsupported encryption level 5 [ 435.815506][ T6966] loop3: detected capacity change from 0 to 256 [ 436.270149][ T4072] Bluetooth: hci0: command 0x1003 tx timeout [ 436.271857][ T144] Bluetooth: hci0: sending frame failed (-49) [ 436.299455][ T136] team0 (unregistering): Port device team_slave_1 removed [ 436.339906][ T136] team0 (unregistering): Port device team_slave_0 removed [ 436.384274][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.448952][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.720489][ T136] bond0 (unregistering): Released all slaves [ 437.971205][ T6977] loop3: detected capacity change from 0 to 256 [ 438.211391][ T136] team0 (unregistering): Port device team_slave_1 removed [ 438.228479][ T136] team0 (unregistering): Port device team_slave_0 removed [ 438.258965][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.330517][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.332397][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.365221][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.374321][ T6981] loop1: detected capacity change from 0 to 512 [ 438.548723][ T6981] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 438.551147][ T6981] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 438.553419][ T6981] System zones: 0-1, 15-15, 18-18, 34-34 [ 438.555678][ T6981] EXT4-fs (loop1): orphan cleanup on readonly fs [ 438.567244][ T6981] __quota_error: 8 callbacks suppressed [ 438.567255][ T6981] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 438.578806][ T6981] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 438.593145][ T6981] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 438.598081][ T6981] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.682: bad orphan inode 16 [ 438.607351][ T6981] ext4_test_bit(bit=15, block=18) = 1 [ 438.613028][ T6981] is_bad_inode(inode)=0 [ 438.616387][ T6981] NEXT_ORPHAN(inode)=0 [ 438.617523][ T6981] max_ino=32 [ 438.618255][ T6981] i_nlink=2 [ 438.626678][ T6981] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 438.664832][ T5328] Bluetooth: hci0: command 0x1001 tx timeout [ 438.668694][ T144] Bluetooth: hci0: sending frame failed (-49) [ 438.876965][ T136] bond0 (unregistering): Released all slaves [ 439.126634][ T6994] udc-core: couldn't find an available UDC or it's busy [ 439.128580][ T6994] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 439.181270][ T6988] device pim6reg1 entered promiscuous mode [ 440.487489][ T7002] loop3: detected capacity change from 0 to 1024 [ 440.592897][ T7002] EXT4-fs (loop3): error: journal path ./file0 is not a block device [ 440.612745][ T7006] loop4: detected capacity change from 0 to 256 [ 440.839350][ T5328] Bluetooth: hci0: command 0x1009 tx timeout [ 441.593951][ T7013] loop4: detected capacity change from 0 to 1024 [ 441.674432][ T7016] loop3: detected capacity change from 0 to 512 [ 441.694420][ T7013] EXT4-fs (loop4): Test dummy encryption mode enabled [ 441.696136][ T7013] EXT4-fs (loop4): Ignoring removed orlov option [ 441.708018][ T7016] EXT4-fs (loop3): Unsupported encryption level 5 [ 441.745603][ T7013] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 442.927223][ T7025] loop1: detected capacity change from 0 to 256 [ 442.975278][ T7026] loop2: detected capacity change from 0 to 1024 [ 443.086897][ T7026] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 443.089172][ T7026] EXT4-fs (loop2): Ignoring removed nobh option [ 443.100250][ T7026] EXT4-fs (loop2): Unrecognized mount option "context=user_u" or missing value [ 443.383313][ T7026] loop2: detected capacity change from 0 to 512 [ 443.394950][ T7026] EXT4-fs (loop2): Test dummy encryption mode enabled [ 443.396801][ T7026] EXT4-fs (loop2): Ignoring removed oldalloc option [ 443.398459][ T7026] EXT4-fs (loop2): Test dummy encryption mode enabled [ 443.492675][ T7026] EXT4-fs error (device loop2): __ext4_iget:4872: inode #11: block 1: comm syz.2.694: invalid block [ 443.504174][ T7026] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.694: couldn't read orphan inode 11 (err -117) [ 443.541040][ T7026] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,acl,test_dummy_encryption,resgid=0x0000000000000000,jqfmt=vfsv0,oldalloc,inode_readahead_blks=0x0000000000010000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 443.566175][ T7031] chnl_net:caif_netlink_parms(): no params data found [ 443.785686][ T7026] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 443.802017][ T7050] loop1: detected capacity change from 0 to 2048 [ 443.830928][ T7046] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.694: Directory hole found for htree leaf block 0 [ 443.875252][ T7031] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.877012][ T7031] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.879778][ T7031] device bridge_slave_0 entered promiscuous mode [ 443.930870][ T7031] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.932731][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.947402][ T7050] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 443.968487][ T7031] device bridge_slave_1 entered promiscuous mode [ 444.029729][ T7050] EXT4-fs error (device loop1): ext4_free_inode:355: comm syz.1.700: bit already cleared for inode 15 [ 444.062595][ T7034] loop4: detected capacity change from 0 to 40427 [ 444.104119][ T7034] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 444.106006][ T7034] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 444.125799][ T7031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.126447][ T7034] F2FS-fs (loop4): invalid crc value [ 444.132738][ T7034] F2FS-fs (loop4): Found nat_bits in checkpoint [ 444.160605][ T7031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.179690][ T7034] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 444.181807][ T7034] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 444.217533][ T7067] loop1: detected capacity change from 0 to 512 [ 444.302084][ T7063] loop3: detected capacity change from 0 to 8192 [ 444.335642][ T7067] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 444.365251][ T7063] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 444.376647][ T7067] EXT4-fs (loop1): 1 truncate cleaned up [ 444.379245][ T7067] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 445.407994][ T7031] team0: Port device team_slave_0 added [ 445.482073][ T4069] Bluetooth: hci3: command 0x0406 tx timeout [ 445.960593][ T5328] Bluetooth: hci1: command 0x0409 tx timeout [ 446.143689][ T7082] loop2: detected capacity change from 0 to 512 [ 446.195246][ T7031] team0: Port device team_slave_1 added [ 446.234701][ T7084] FAT-fs (loop3): error, clusters badly computed (214 != 18) [ 446.236761][ T7084] FAT-fs (loop3): Filesystem has been set read-only [ 446.238482][ T7084] FAT-fs (loop3): error, clusters badly computed (215 != 19) [ 446.243533][ T7031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.250277][ T7031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.277270][ T7063] FAT-fs (loop3): error, clusters badly computed (311 != 309) [ 446.279348][ T7063] FAT-fs (loop3): error, clusters badly computed (312 != 310) [ 446.297444][ T7031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.301113][ T7063] FAT-fs (loop3): error, clusters badly computed (313 != 311) [ 446.303311][ T7084] FAT-fs (loop3): error, clusters badly computed (219 != 20) [ 446.318062][ T7063] FAT-fs (loop3): error, clusters badly computed (315 != 312) [ 446.320665][ T7031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.322404][ T7031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.336576][ T7084] FAT-fs (loop3): error, clusters badly computed (221 != 21) [ 446.338626][ T7084] FAT-fs (loop3): error, clusters badly computed (222 != 22) [ 446.352874][ T7063] FAT-fs (loop3): error, clusters badly computed (318 != 313) [ 446.360459][ T7031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.373057][ T7084] FAT-fs (loop3): error, clusters badly computed (224 != 23) [ 446.386489][ T7063] FAT-fs (loop3): error, clusters badly computed (320 != 314) [ 446.398407][ T7084] FAT-fs (loop3): error, clusters badly computed (226 != 24) [ 446.435704][ T7063] FAT-fs (loop3): error, clusters badly computed (322 != 315) [ 446.454598][ T7084] FAT-fs (loop3): error, clusters badly computed (228 != 25) [ 446.456571][ T7084] FAT-fs (loop3): error, clusters badly computed (229 != 26) [ 446.458496][ T7084] FAT-fs (loop3): error, clusters badly computed (230 != 27) [ 446.460515][ T7084] FAT-fs (loop3): error, clusters badly computed (231 != 28) [ 446.462367][ T7084] FAT-fs (loop3): error, clusters badly computed (232 != 29) [ 446.464401][ T7084] FAT-fs (loop3): error, clusters badly computed (233 != 30) [ 446.466375][ T7084] FAT-fs (loop3): error, clusters badly computed (234 != 31) [ 446.480259][ T7063] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1052) [ 446.517419][ T7082] EXT4-fs (loop2): Unsupported encryption level 5 [ 447.882089][ T7031] device hsr_slave_0 entered promiscuous mode [ 448.030339][ T5328] Bluetooth: hci1: command 0x041b tx timeout [ 448.140706][ T7031] device hsr_slave_1 entered promiscuous mode [ 448.394069][ T7091] loop1: detected capacity change from 0 to 256 [ 448.415813][ T7092] loop4: detected capacity change from 0 to 2048 [ 450.431057][ T7092] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 450.498115][ T6058] Bluetooth: hci1: command 0x040f tx timeout [ 451.218606][ T7031] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.303053][ T7031] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.413560][ T7031] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.452979][ T7113] udc-core: couldn't find an available UDC or it's busy [ 451.459230][ T7113] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 451.474395][ T7031] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.540378][ T7103] loop2: detected capacity change from 0 to 40427 [ 451.594466][ T7103] F2FS-fs (loop2): Invalid segment/section count (24 != 24 * 3) [ 451.596572][ T7103] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 451.603323][ T7103] F2FS-fs (loop2): invalid crc value [ 451.617857][ T7103] F2FS-fs (loop2): Found nat_bits in checkpoint [ 451.660634][ T7103] F2FS-fs (loop2): Start checkpoint disabled! [ 451.684263][ T7103] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 451.686010][ T7103] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 451.769700][ T7031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 451.812528][ T7031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 451.846762][ T6464] attempt to access beyond end of device [ 451.846762][ T6464] loop2: rw=1, want=77960, limit=40427 [ 451.871512][ T6464] attempt to access beyond end of device [ 451.871512][ T6464] loop2: rw=2049, want=40976, limit=40427 [ 451.963379][ T7031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 452.063193][ T7031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 452.169204][ T7124] loop3: detected capacity change from 0 to 1024 [ 452.217032][ T7123] loop1: detected capacity change from 0 to 1024 [ 452.228532][ T7124] EXT4-fs (loop3): Ignoring removed oldalloc option [ 452.285620][ T7124] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 452.416486][ T7123] loop1: detected capacity change from 0 to 512 [ 452.457452][ T7123] udc-core: couldn't find an available UDC or it's busy [ 452.475965][ T7123] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 452.517946][ T4123] Bluetooth: hci1: command 0x0419 tx timeout [ 452.604668][ T7031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.653350][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 452.655741][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 452.691502][ T7031] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.697171][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 452.699913][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 452.703280][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.704989][ T4176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.712820][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 452.728549][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 452.752792][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 452.760940][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.762862][ T4176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.770866][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 452.796552][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 452.799450][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 452.815722][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 452.821723][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 452.822516][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 452.831529][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 452.843413][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 452.852001][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 452.852614][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 452.853171][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 452.857003][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 453.086612][ T7142] loop1: detected capacity change from 0 to 512 [ 453.122576][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 453.122718][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 453.139021][ T7031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.181256][ T7142] EXT4-fs (loop1): Unsupported encryption level 5 [ 453.182401][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 453.182900][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 453.206456][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 453.206996][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 453.207680][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 453.208128][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 453.229086][ T7031] device veth0_vlan entered promiscuous mode [ 453.264653][ T7031] device veth1_vlan entered promiscuous mode [ 453.352167][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 453.352779][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 453.353369][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 453.353917][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 453.392709][ T7031] device veth0_macvtap entered promiscuous mode [ 453.833339][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 454.026198][ T7031] device veth1_macvtap entered promiscuous mode [ 454.124098][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.126789][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.129207][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.175187][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.177576][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.180252][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.182689][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.185490][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.187867][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.191844][ T7146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.720'. [ 454.195016][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.199031][ T7031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.216783][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.219347][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.221999][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.228297][ T7148] loop1: detected capacity change from 0 to 256 [ 454.230105][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.232338][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.234847][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.237539][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.240227][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.242755][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.245452][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.249146][ T7031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.251602][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 454.254145][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 454.256820][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 454.282346][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 454.292667][ T7031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.294889][ T7031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.296985][ T7031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.299102][ T7031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.315080][ T7146] device pim6reg1 entered promiscuous mode [ 454.679513][ T7151] udc-core: couldn't find an available UDC or it's busy [ 454.689974][ T4176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.698816][ T4176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.708298][ T7151] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 454.720451][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 454.781415][ T7153] loop2: detected capacity change from 0 to 2048 [ 454.821009][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.824357][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.863910][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 455.770777][ T7153] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 456.101107][ T6058] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 456.340204][ T6058] usb 1-1: Using ep0 maxpacket: 16 [ 456.460474][ T6058] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.463194][ T6058] usb 1-1: config 0 interface 0 has no altsetting 0 [ 456.464829][ T6058] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 456.467066][ T6058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.505884][ T6058] usb 1-1: config 0 descriptor?? [ 456.756806][ T7165] loop3: detected capacity change from 0 to 1024 [ 456.789405][ T7165] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 457.735734][ T6058] kye 0003:0458:0138.0006: unknown main item tag 0x0 [ 457.737419][ T6058] kye 0003:0458:0138.0006: unknown main item tag 0x0 [ 457.739000][ T6058] kye 0003:0458:0138.0006: unknown main item tag 0x0 [ 457.750179][ T6058] kye 0003:0458:0138.0006: unknown main item tag 0x0 [ 457.751904][ T6058] kye 0003:0458:0138.0006: unknown main item tag 0x0 [ 457.753473][ T6058] kye 0003:0458:0138.0006: unknown main item tag 0x0 [ 457.755057][ T6058] kye 0003:0458:0138.0006: unknown main item tag 0x0 [ 457.756672][ T6058] kye 0003:0458:0138.0006: unknown main item tag 0x0 [ 457.758246][ T6058] kye 0003:0458:0138.0006: unknown main item tag 0x0 [ 457.759859][ T6058] kye 0003:0458:0138.0006: unknown main item tag 0x0 [ 457.767113][ T6058] kye 0003:0458:0138.0006: report_id 0 is invalid [ 457.792333][ T6058] kye 0003:0458:0138.0006: item 0 1 1 8 parsing failed [ 457.794675][ T6058] kye 0003:0458:0138.0006: parse failed [ 457.798263][ T6058] kye: probe of 0003:0458:0138.0006 failed with error -22 [ 457.820429][ T6058] usb 1-1: USB disconnect, device number 12 [ 457.834725][ T7180] loop1: detected capacity change from 0 to 256 [ 458.973501][ T7191] loop3: detected capacity change from 0 to 256 [ 459.303077][ T7195] loop0: detected capacity change from 0 to 2048 [ 459.636837][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 459.677383][ T7201] device macsec0 entered promiscuous mode [ 460.465964][ T7195] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 460.545715][ T7200] loop3: detected capacity change from 0 to 2048 [ 460.785057][ T7200] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 464.725840][ T7230] udc-core: couldn't find an available UDC or it's busy [ 464.729821][ T7230] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 465.057584][ T7239] loop0: detected capacity change from 0 to 256 [ 465.876234][ T7247] udc-core: couldn't find an available UDC or it's busy [ 465.877804][ T7247] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 466.177220][ T7251] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 466.185711][ T7254] loop0: detected capacity change from 0 to 2048 [ 467.191327][ T7263] loop1: detected capacity change from 0 to 2048 [ 467.224460][ T7254] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 467.303612][ T136] device hsr_slave_0 left promiscuous mode [ 467.330607][ T136] device hsr_slave_1 left promiscuous mode [ 467.335580][ T7263] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 467.424590][ T7270] loop4: detected capacity change from 0 to 512 [ 467.540382][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.542183][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.549084][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.554254][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.562754][ T7270] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,noload,noblock_validity,,errors=continue. Quota mode: none. [ 467.572623][ T136] device bridge_slave_1 left promiscuous mode [ 467.574307][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.422747][ T4123] Bluetooth: hci0: command 0x1003 tx timeout [ 468.424510][ T144] Bluetooth: hci0: sending frame failed (-49) [ 468.460841][ T136] device bridge_slave_0 left promiscuous mode [ 468.462615][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.260683][ T136] device veth1_macvtap left promiscuous mode [ 469.262360][ T136] device veth0_macvtap left promiscuous mode [ 469.263825][ T136] device veth1_vlan left promiscuous mode [ 469.265348][ T136] device veth0_vlan left promiscuous mode [ 470.601200][ T6058] Bluetooth: hci0: command 0x1001 tx timeout [ 470.956810][ T144] Bluetooth: hci0: sending frame failed (-49) [ 471.298524][ T136] team0 (unregistering): Port device team_slave_1 removed [ 471.315687][ T136] team0 (unregistering): Port device team_slave_0 removed [ 471.334532][ T7291] loop0: detected capacity change from 0 to 256 [ 471.352636][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.407664][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.738042][ T136] bond0 (unregistering): Released all slaves [ 471.837831][ T7276] device veth1_macvtap left promiscuous mode [ 472.990199][ T6058] Bluetooth: hci0: command 0x1009 tx timeout [ 473.241236][ T7312] device pim6reg1 entered promiscuous mode [ 474.049358][ T7318] loop0: detected capacity change from 0 to 2048 [ 475.220944][ T7318] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 476.187696][ T7332] loop1: detected capacity change from 0 to 256 [ 477.274050][ T7335] chnl_net:caif_netlink_parms(): no params data found [ 477.407912][ T7335] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.412150][ T7335] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.416805][ T7335] device bridge_slave_0 entered promiscuous mode [ 477.437038][ T7335] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.440464][ T7335] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.450610][ T7335] device bridge_slave_1 entered promiscuous mode [ 477.506607][ T7335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.558965][ T7335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.718616][ T7335] team0: Port device team_slave_0 added [ 477.722573][ T7335] team0: Port device team_slave_1 added [ 477.726582][ T7356] loop4: detected capacity change from 0 to 256 [ 477.769711][ T7335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.778602][ T7335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.798863][ T7335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.803558][ T7335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.805314][ T7335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.832394][ T7335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.063022][ T7335] device hsr_slave_0 entered promiscuous mode [ 479.002644][ T4069] Bluetooth: hci5: command 0x0409 tx timeout [ 479.020700][ T7335] device hsr_slave_1 entered promiscuous mode [ 479.090834][ T7335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.092658][ T7335] Cannot create hsr debugfs directory [ 479.674011][ T7335] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.957157][ T7354] loop2: detected capacity change from 0 to 40427 [ 480.018635][ T7354] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 480.047752][ T7354] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 480.077107][ T7335] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.212923][ T7335] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.281796][ T7354] F2FS-fs (loop2): Found nat_bits in checkpoint [ 480.337440][ T7335] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.361174][ T7354] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 480.363040][ T7354] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 480.485276][ T7377] loop1: detected capacity change from 0 to 2048 [ 480.640741][ T7377] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 480.827141][ T7335] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 481.648285][ T7335] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 481.741605][ T4069] Bluetooth: hci5: command 0x041b tx timeout [ 481.762518][ T7335] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 481.819436][ T7335] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 482.294159][ T7335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.318906][ T7391] loop2: detected capacity change from 0 to 512 [ 482.361999][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 482.364497][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 482.373879][ T7391] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 482.397188][ T7335] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.424200][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 482.426855][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 482.429218][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.431004][ T4271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.471847][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 482.474467][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 482.487294][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 482.508094][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.509981][ T4271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.577834][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 482.591186][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 483.178703][ T7397] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.780: Directory hole found for htree leaf block 0 [ 483.204944][ T7335] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 483.238108][ T7335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 483.407600][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 483.411104][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 483.413642][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 483.416312][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 483.451908][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 483.459157][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 483.490991][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 483.496296][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 483.502445][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 483.508649][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 483.761744][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 483.763813][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 483.790229][ T4067] Bluetooth: hci5: command 0x040f tx timeout [ 483.802904][ T7335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.872431][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 483.875314][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 483.968942][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 483.972131][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 483.975345][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 483.988136][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 484.026905][ T7335] device veth0_vlan entered promiscuous mode [ 484.050753][ T7335] device veth1_vlan entered promiscuous mode [ 484.157287][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 484.161717][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 484.164445][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 484.176859][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 484.208686][ T7335] device veth0_macvtap entered promiscuous mode [ 484.229998][ T7335] device veth1_macvtap entered promiscuous mode [ 484.385330][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.388368][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.392202][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.417764][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.420015][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.442533][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.450379][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.452979][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.466409][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.497022][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.514077][ T7335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.684671][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 484.687283][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 484.692039][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 484.694657][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 484.707869][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.710602][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.713031][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.715587][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.744823][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.748161][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.761810][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.764482][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.768115][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.610872][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.615127][ T7335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.660197][ T4067] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 485.768719][ T7335] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.771371][ T7335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.775869][ T7335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.783975][ T7335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.797461][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 485.801693][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 485.870435][ T5531] Bluetooth: hci5: command 0x0419 tx timeout [ 485.921449][ T4067] usb 1-1: Using ep0 maxpacket: 16 [ 486.858604][ T7422] loop1: detected capacity change from 0 to 256 [ 486.865761][ T136] device hsr_slave_0 left promiscuous mode [ 486.870792][ T4067] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.897208][ T136] device hsr_slave_1 left promiscuous mode [ 487.061446][ T4067] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 487.063811][ T4067] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.065803][ T4067] usb 1-1: Product: syz [ 487.066821][ T4067] usb 1-1: Manufacturer: syz [ 487.068316][ T4067] usb 1-1: SerialNumber: syz [ 487.087102][ T4067] usb 1-1: config 0 descriptor?? [ 487.130213][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.132380][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.136160][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.140805][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.152679][ T136] device bridge_slave_1 left promiscuous mode [ 487.161089][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.201506][ T136] device bridge_slave_0 left promiscuous mode [ 487.203275][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.600420][ T4067] usb 1-1: Found UVC 0.00 device syz (045e:0721) [ 487.603094][ T4067] usb 1-1: No valid video chain found. [ 487.691797][ T7430] loop4: detected capacity change from 0 to 2048 [ 487.720536][ T136] device veth1_macvtap left promiscuous mode [ 487.722139][ T136] device veth0_macvtap left promiscuous mode [ 487.723718][ T136] device veth1_vlan left promiscuous mode [ 487.725175][ T136] device veth0_vlan left promiscuous mode [ 487.751326][ T7430] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 487.833489][ T4065] usb 1-1: USB disconnect, device number 13 [ 489.064884][ T7442] loop0: detected capacity change from 0 to 512 [ 489.280551][ T7442] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 490.556938][ T136] team0 (unregistering): Port device team_slave_1 removed [ 490.597960][ T136] team0 (unregistering): Port device team_slave_0 removed [ 490.631990][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.201538][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.264708][ T7459] loop0: detected capacity change from 0 to 512 [ 491.287966][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'. [ 491.296279][ T7459] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 491.297930][ T7459] EXT4-fs (loop0): mount failed [ 492.327925][ T136] bond0 (unregistering): Released all slaves [ 492.576896][ T5267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.579117][ T5267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.621660][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 492.638090][ T4176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.650426][ T4176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.655056][ T5900] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 494.984135][ T7491] loop0: detected capacity change from 0 to 128 [ 496.656584][ T7493] loop2: detected capacity change from 0 to 2048 [ 496.680369][ T7498] loop1: detected capacity change from 0 to 256 [ 496.967797][ T7493] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 499.761639][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.765945][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.378792][ T7534] udc-core: couldn't find an available UDC or it's busy [ 500.389625][ T7534] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 501.647928][ T7541] loop1: detected capacity change from 0 to 512 [ 501.707390][ T7541] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 501.737118][ T7541] EXT4-fs error (device loop1): __ext4_iget:4872: inode #11: block 1: comm syz.1.817: invalid block [ 501.746739][ T7543] loop4: detected capacity change from 0 to 256 [ 501.748578][ T7541] EXT4-fs (loop1): Remounting filesystem read-only [ 501.751393][ T7541] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.817: couldn't read orphan inode 11 (err -117) [ 501.757786][ T7541] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 502.123716][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'. [ 503.836032][ T7555] loop1: detected capacity change from 0 to 1024 [ 503.854788][ T7555] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 503.857248][ T7555] EXT4-fs (loop1): Ignoring removed nobh option [ 503.858789][ T7555] EXT4-fs (loop1): Unrecognized mount option "context=user_u" or missing value [ 505.201246][ T7555] udc-core: couldn't find an available UDC or it's busy [ 506.150239][ T7555] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 506.282350][ T7572] loop4: detected capacity change from 0 to 512 [ 507.008616][ T7572] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 508.046368][ T7594] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.827: Directory hole found for htree leaf block 0 [ 508.143841][ T7575] chnl_net:caif_netlink_parms(): no params data found [ 508.444995][ T7600] loop4: detected capacity change from 0 to 256 [ 508.446922][ T4069] Bluetooth: hci0: command 0x0409 tx timeout [ 509.456725][ T7575] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.458493][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.469857][ T7575] device bridge_slave_0 entered promiscuous mode [ 509.496172][ T7575] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.516482][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.540336][ T7575] device bridge_slave_1 entered promiscuous mode [ 509.651616][ T7575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.663040][ T7575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.783796][ T7575] team0: Port device team_slave_0 added [ 509.804459][ T7575] team0: Port device team_slave_1 added [ 510.712723][ T5531] Bluetooth: hci0: command 0x041b tx timeout [ 510.802073][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.804004][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.872406][ T7575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.901109][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.902864][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.970337][ T7575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.192511][ T7575] device hsr_slave_0 entered promiscuous mode [ 511.250925][ T7575] device hsr_slave_1 entered promiscuous mode [ 511.290326][ T7575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.292358][ T7575] Cannot create hsr debugfs directory [ 511.303574][ T7623] udc-core: couldn't find an available UDC or it's busy [ 511.305460][ T7623] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 511.602869][ T136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.716300][ T136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.767409][ T136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.827986][ T136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.930793][ T7625] loop1: detected capacity change from 0 to 512 [ 511.979250][ T7625] EXT4-fs (loop1): Test dummy encryption mode enabled [ 512.013487][ T7625] EXT4-fs error (device loop1): ext4_fill_super:4840: inode #2: comm syz.1.838: casefold flag without casefold feature [ 512.018037][ T7625] EXT4-fs (loop1): get root inode failed [ 512.019488][ T7625] EXT4-fs (loop1): mount failed [ 512.107533][ T7630] loop0: detected capacity change from 0 to 256 [ 513.329602][ T5531] Bluetooth: hci0: command 0x040f tx timeout [ 514.017327][ T7575] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 514.052456][ T7575] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 514.104934][ T7575] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 514.135608][ T7658] loop3: detected capacity change from 0 to 256 [ 514.143369][ T7575] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 514.170990][ T7625] loop1: detected capacity change from 0 to 40427 [ 514.275644][ T7625] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 514.277610][ T7625] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 514.592745][ T7625] F2FS-fs (loop1): Found nat_bits in checkpoint [ 515.590963][ T7575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.609739][ T4066] Bluetooth: hci0: command 0x0419 tx timeout [ 515.643518][ T7680] loop4: detected capacity change from 0 to 512 [ 515.649351][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 515.652571][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 515.672028][ T7575] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.678912][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 515.694929][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 515.711180][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.713100][ T4176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.730437][ T7680] EXT4-fs (loop4): Test dummy encryption mode enabled [ 515.771999][ T7680] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.845: inline data xattr refers to an external xattr inode [ 515.776053][ T7680] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.845: couldn't read orphan inode 12 (err -117) [ 515.784047][ T7680] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,usrjquota=,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,user_xattr,,errors=continue. Quota mode: writeback. [ 515.877520][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 515.880969][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 515.883733][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 515.891489][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.893328][ T4176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.911108][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 515.968570][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 515.971730][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 515.977198][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 515.987999][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 515.998267][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 516.009429][ T7575] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 516.020209][ T7575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 516.029182][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 516.031848][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 516.039761][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 516.045249][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 516.054452][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 516.143451][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 516.287021][ T136] device hsr_slave_0 left promiscuous mode [ 516.360333][ T136] device hsr_slave_1 left promiscuous mode [ 516.470175][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.472114][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.475410][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.478060][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.488789][ T136] device bridge_slave_1 left promiscuous mode [ 516.496536][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.561349][ T136] device bridge_slave_0 left promiscuous mode [ 516.563017][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.730288][ T136] device veth1_macvtap left promiscuous mode [ 516.731702][ T136] device veth0_macvtap left promiscuous mode [ 516.733338][ T136] device veth1_vlan left promiscuous mode [ 516.734707][ T136] device veth0_vlan left promiscuous mode [ 518.793737][ T136] team0 (unregistering): Port device team_slave_1 removed [ 518.828530][ T136] team0 (unregistering): Port device team_slave_0 removed [ 518.846800][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.911107][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.128644][ T136] bond0 (unregistering): Released all slaves [ 519.485951][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 519.498578][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 519.506013][ T7575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.607557][ T7575] device veth0_vlan entered promiscuous mode [ 519.639075][ T7575] device veth1_vlan entered promiscuous mode [ 519.668122][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 519.670967][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 519.674098][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 519.678472][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 519.698734][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 519.704845][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 519.735214][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 519.737570][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 519.745922][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 519.760464][ T6058] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 520.652261][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 520.691024][ T7575] device veth0_macvtap entered promiscuous mode [ 520.697105][ T7575] device veth1_macvtap entered promiscuous mode [ 520.720723][ T7719] udc-core: couldn't find an available UDC or it's busy [ 520.722438][ T7719] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 520.730704][ T6058] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 520.733633][ T6058] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 520.736296][ T6058] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.738847][ T6058] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 520.755575][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.758062][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.760829][ T6058] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 520.763054][ T6058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.769317][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.783902][ T6058] usb 1-1: config 0 descriptor?? [ 520.785626][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.795164][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.797820][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.815434][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.817917][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.835656][ T7575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.838419][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 520.841756][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 520.855179][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.857535][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.859850][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.877111][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.879652][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.894939][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.897517][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.899914][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.930564][ T7575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.932550][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 520.935242][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 520.961005][ T7575] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.963280][ T7575] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.965523][ T7575] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.967640][ T7575] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.079500][ T5900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.081966][ T5900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.086470][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 521.166553][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.168912][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.178031][ T5900] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 521.262349][ T6058] hid-rmi 0003:17EF:6085.0007: unknown main item tag 0x0 [ 521.264270][ T6058] hid-rmi 0003:17EF:6085.0007: unknown main item tag 0x0 [ 521.266025][ T6058] hid-rmi 0003:17EF:6085.0007: item fetching failed at offset 2/5 [ 521.268392][ T6058] hid-rmi 0003:17EF:6085.0007: parse failed [ 521.296493][ T6058] hid-rmi: probe of 0003:17EF:6085.0007 failed with error -22 [ 521.620377][ T6058] usb 1-1: USB disconnect, device number 14 [ 522.131672][ T7733] loop0: detected capacity change from 0 to 256 [ 522.547948][ T7740] udc-core: couldn't find an available UDC or it's busy [ 522.587252][ T7740] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 525.038948][ T7760] netlink: 17861 bytes leftover after parsing attributes in process `syz.4.868'. [ 529.058473][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'. [ 529.060959][ T7799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.067367][ T7799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.082786][ T7799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.084988][ T7799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.927827][ T4069] Bluetooth: hci0: command 0x0405 tx timeout [ 529.961590][ T7816] udc-core: couldn't find an available UDC or it's busy [ 529.963491][ T7816] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 531.499212][ T7823] binder: 7822:7823 ioctl c018620c 20000240 returned -22 [ 532.795286][ T13] Bluetooth: hci0: command 0x0407 tx timeout [ 532.798385][ T7842] loop2: detected capacity change from 0 to 256 [ 532.910254][ T7849] EXT4-fs (nvme0n1p2): resizing filesystem from 262144 to 262144 blocks [ 535.681380][ T7865] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 537.335440][ T7894] udc-core: couldn't find an available UDC or it's busy [ 537.352369][ T7894] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 538.988023][ T7917] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 538.990099][ T7917] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 538.998551][ T7917] vhci_hcd vhci_hcd.0: Device attached [ 539.019479][ T7918] vhci_hcd: connection closed [ 539.033485][ T4669] vhci_hcd: stop threads [ 539.036654][ T4669] vhci_hcd: release socket [ 539.051122][ T4669] vhci_hcd: disconnect device [ 539.220236][ T13] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 539.303399][ T7926] loop1: detected capacity change from 0 to 128 [ 540.293239][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 540.445293][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 17 [ 540.447966][ T13] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 540.450939][ T13] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 540.465912][ T7926] ufs: You didn't specify the type of your ufs filesystem [ 540.465912][ T7926] [ 540.465912][ T7926] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 540.465912][ T7926] [ 540.465912][ T7926] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 540.901743][ T7926] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 541.059215][ T7942] loop4: detected capacity change from 0 to 256 [ 541.185313][ T7942] exfat: Unknown parameter 'keep_last_dots' [ 541.233673][ T7944] loop3: detected capacity change from 0 to 256 [ 541.300412][ T13] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 541.302478][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.304392][ T13] usb 1-1: Product: syz [ 541.305337][ T13] usb 1-1: Manufacturer: syz [ 541.306395][ T13] usb 1-1: SerialNumber: syz [ 541.755564][ T7952] loop2: detected capacity change from 0 to 128 [ 543.426899][ T13] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 543.447166][ T13] usb 1-1: USB disconnect, device number 15 [ 543.618757][ T13] usblp0: removed [ 546.128397][ T7981] loop3: detected capacity change from 0 to 512 [ 547.169619][ T7981] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 548.434684][ T8003] loop1: detected capacity change from 0 to 256 [ 548.804134][ T8005] loop3: detected capacity change from 0 to 2048 [ 549.649584][ T8005] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 549.656111][ T8005] UDF-fs: Scanning with blocksize 512 failed [ 549.759218][ T8005] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 550.155586][ T8024] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 550.384544][ T8031] loop3: detected capacity change from 0 to 256 [ 551.578832][ T8045] tipc: Started in network mode [ 551.580866][ T8045] tipc: Node identity ce57bf5f2f56, cluster identity 4711 [ 551.651688][ T8045] tipc: Enabled bearer , priority 10 [ 552.677082][ T7] tipc: Node number set to 3774988127 [ 552.774802][ T8055] loop0: detected capacity change from 0 to 256 [ 554.130478][ T8084] loop0: detected capacity change from 0 to 256 [ 557.024696][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.972'. [ 557.026809][ T8106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.028693][ T8106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.061039][ T8106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.066192][ T8106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.802739][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 557.837379][ T8112] device macsec0 entered promiscuous mode [ 558.831676][ T8120] loop3: detected capacity change from 0 to 512 [ 558.931366][ T8120] EXT4-fs (loop3): orphan cleanup on readonly fs [ 558.932896][ T8120] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #4: comm syz.3.976: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 558.948678][ T8120] EXT4-fs error (device loop3): ext4_quota_enable:6390: comm syz.3.976: Bad quota inode: 4, type: 1 [ 558.959123][ T8120] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 558.975893][ T8120] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 558.977722][ T8120] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 559.002582][ T8120] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 560.180157][ T8120] EXT4-fs warning (device loop3): ext4_multi_mount_protect:340: MMP startup interrupted, failing mount [ 560.180157][ T8120] [ 561.152003][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.153654][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.298839][ T8160] loop2: detected capacity change from 0 to 256 [ 562.330436][ T8163] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 565.151894][ T8185] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.994'. [ 566.445624][ T8214] loop2: detected capacity change from 0 to 256 [ 566.469600][ T8213] loop0: detected capacity change from 0 to 512 [ 566.710993][ T8213] EXT4-fs (loop0): Ignoring removed bh option [ 569.109704][ T4123] Bluetooth: hci1: command 0x0406 tx timeout [ 569.150610][ T8213] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #12: comm syz.0.1004: inline data xattr refers to an external xattr inode [ 569.159340][ T8213] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1004: couldn't read orphan inode 12 (err -117) [ 569.188198][ T8213] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000000409e,nodiscard,,errors=continue. Quota mode: writeback. [ 569.438827][ T8230] loop4: detected capacity change from 0 to 2 [ 569.724468][ T26] audit: type=1326 audit(571.550:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.0.1004" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa34f29a8 code=0x7ffc0000 [ 570.116593][ T26] audit: type=1326 audit(571.550:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.0.1004" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa34f29a8 code=0x7ffc0000 [ 570.164120][ T26] audit: type=1326 audit(571.640:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.0.1004" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=266 compat=0 ip=0xffffa34f29a8 code=0x7ffc0000 [ 570.209532][ T26] audit: type=1326 audit(571.640:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.0.1004" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa34f29a8 code=0x7ffc0000 [ 570.315776][ T26] audit: type=1326 audit(571.640:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.0.1004" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa34f29a8 code=0x7ffc0000 [ 570.514132][ T8241] loop0: detected capacity change from 0 to 256 [ 570.699868][ T8251] 9pnet: Insufficient options for proto=fd [ 571.660459][ T4033] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 571.663758][ T4033] CPU: 0 PID: 4033 Comm: kworker/u5:5 Not tainted 5.15.167-syzkaller #0 [ 571.665847][ T4033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 571.668539][ T4033] Workqueue: hci5 hci_rx_work [ 571.669823][ T4033] Call trace: [ 571.670706][ T4033] dump_backtrace+0x0/0x530 [ 571.671892][ T4033] show_stack+0x2c/0x3c [ 571.673079][ T4033] dump_stack_lvl+0x108/0x170 [ 571.674123][ T4033] dump_stack+0x1c/0x58 [ 571.675118][ T4033] sysfs_create_dir_ns+0x278/0x318 [ 571.676346][ T4033] kobject_add_internal+0x384/0x8f0 [ 571.677651][ T4033] kobject_add+0x14c/0x21c [ 571.678938][ T4033] device_add+0x400/0xef4 [ 571.680084][ T4033] hci_conn_add_sysfs+0xc4/0x1cc [ 571.681411][ T4033] le_conn_complete_evt+0x954/0x1228 [ 571.682732][ T4033] hci_le_meta_evt+0xa50/0x31c0 [ 571.683954][ T4033] hci_event_packet+0xd34/0x12b4 [ 571.685202][ T4033] hci_rx_work+0x1c0/0x7c4 [ 571.686331][ T4033] process_one_work+0x790/0x11b8 [ 571.687585][ T4033] worker_thread+0x910/0x1034 [ 571.688798][ T4033] kthread+0x37c/0x45c [ 571.689864][ T4033] ret_from_fork+0x10/0x20 [ 571.701062][ T4033] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 571.704723][ T4033] Bluetooth: hci5: failed to register connection device [ 572.925121][ T8273] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1024'. [ 572.927400][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1024'. [ 573.530292][ T8287] loop2: detected capacity change from 0 to 256 [ 573.720911][ T4069] Bluetooth: hci5: command 0x2016 tx timeout [ 573.985148][ T8292] udc-core: couldn't find an available UDC or it's busy [ 573.989221][ T8292] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 574.557223][ T8299] udc-core: couldn't find an available UDC or it's busy [ 574.569214][ T8299] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 574.811433][ T8308] loop2: detected capacity change from 0 to 4096 [ 574.832351][ T8310] loop3: detected capacity change from 0 to 512 [ 574.839719][ T8310] EXT4-fs (loop3): orphan cleanup on readonly fs [ 574.841999][ T8310] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #4: comm syz.3.1038: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 574.860227][ T8310] EXT4-fs error (device loop3): ext4_quota_enable:6390: comm syz.3.1038: Bad quota inode: 4, type: 1 [ 574.865061][ T8310] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 574.869000][ T8310] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 574.872350][ T8310] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 574.893926][ T8310] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 574.912773][ T8308] EXT2-fs (loop2): error: couldn't mount because of unsupported optional features (142c0) [ 574.945629][ T8314] EXT4-fs error (device loop3): ext4_lookup:1860: inode #2: comm syz.3.1038: deleted inode referenced: 12 [ 575.399353][ T8321] loop1: detected capacity change from 0 to 2048 [ 575.533731][ T8321] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 575.889163][ T8310] EXT4-fs warning (device loop3): ext4_multi_mount_protect:340: MMP startup interrupted, failing mount [ 575.889163][ T8310] [ 576.691570][ T8339] loop4: detected capacity change from 0 to 256 [ 576.968349][ T8350] loop1: detected capacity change from 0 to 512 [ 576.997691][ T8350] EXT4-fs (loop1): Ignoring removed bh option [ 576.999301][ T8350] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 577.006421][ T8350] EXT4-fs (loop1): bad geometry: block count 2304 exceeds size of device (256 blocks) [ 577.597065][ T26] audit: type=1326 audit(579.540:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa34f29a8 code=0x7ffc0000 [ 577.617068][ T26] audit: type=1326 audit(579.560:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffa34f29a8 code=0x7ffc0000 [ 577.636677][ T26] audit: type=1326 audit(579.570:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa34f29a8 code=0x7ffc0000 [ 577.673100][ T26] audit: type=1326 audit(579.570:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa34f0f44 code=0x7ffc0000 [ 577.697737][ T26] audit: type=1326 audit(579.570:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa34f24d0 code=0x7ffc0000 [ 577.714503][ T26] audit: type=1326 audit(579.570:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa34f24d0 code=0x7ffc0000 [ 577.734286][ T26] audit: type=1326 audit(579.580:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa34f24d0 code=0x7ffc0000 [ 577.753016][ T26] audit: type=1326 audit(579.580:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa34f24d0 code=0x7ffc0000 [ 577.890322][ T13] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 577.910577][ T26] audit: type=1326 audit(579.860:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa34f24d0 code=0x7ffc0000 [ 577.930903][ T26] audit: type=1326 audit(579.880:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa34f24d0 code=0x7ffc0000 [ 577.958728][ T8370] loop4: detected capacity change from 0 to 2048 [ 578.081433][ T8370] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 579.093353][ T4177] Bluetooth: hci5: command 0x0406 tx timeout [ 579.200839][ T13] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 579.203137][ T13] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 579.205277][ T13] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 579.207509][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.540288][ T13] usb 1-1: string descriptor 0 read error: -71 [ 579.542789][ T13] usb 1-1: USB disconnect, device number 16 [ 579.658846][ T8388] udc-core: couldn't find an available UDC or it's busy [ 579.660963][ T8388] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 580.067806][ T8399] loop0: detected capacity change from 0 to 256 [ 580.124688][ T8404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1070'. [ 580.301165][ T8404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 580.388081][ T8411] loop2: detected capacity change from 0 to 2048 [ 580.511969][ T8416] syz.1.1074 uses obsolete (PF_INET,SOCK_PACKET) [ 580.551510][ T8411] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 582.323256][ T4066] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 582.326945][ T4066] Bluetooth: hci3: Injecting HCI hardware error event [ 582.370406][ T4033] Bluetooth: hci3: hardware error 0x00 [ 583.238012][ T8467] Zero length message leads to an empty skb [ 584.584077][ T8480] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1091'. [ 584.781509][ T8495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1098'. [ 585.996656][ T8518] loop0: detected capacity change from 0 to 256 [ 586.213611][ T8524] netlink: 'syz.4.1109': attribute type 10 has an invalid length. [ 586.215615][ T8524] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1109'. [ 586.231203][ T8524] bridge0: port 3(dummy0) entered blocking state [ 586.232868][ T8524] bridge0: port 3(dummy0) entered disabled state [ 586.240372][ T8524] device dummy0 entered promiscuous mode [ 586.242249][ T8524] bridge0: port 3(dummy0) entered blocking state [ 586.243896][ T8524] bridge0: port 3(dummy0) entered forwarding state [ 586.295311][ T8528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1111'. [ 587.258259][ T8561] loop2: detected capacity change from 0 to 2048 [ 587.493963][ T8561] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 587.684887][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 587.861854][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 588.031404][ T8581] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1128'. [ 588.283195][ T8592] netlink: 'syz.4.1131': attribute type 1 has an invalid length. [ 588.398667][ T8597] 8021q: adding VLAN 0 to HW filter on device bond2 [ 588.434845][ T8597] bond1: (slave bond2): making interface the new active one [ 588.448536][ T8597] bond1: (slave bond2): Enslaving as an active interface with an up link [ 589.773217][ T8617] loop1: detected capacity change from 0 to 2048 [ 589.858401][ T8617] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 590.152453][ T8634] loop3: detected capacity change from 0 to 256 [ 590.179028][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1146'. [ 591.429576][ T8649] ------------[ cut here ]------------ [ 591.430959][ T8649] WARNING: CPU: 1 PID: 8649 at net/wireless/core.h:220 __cfg80211_wext_giwrate+0x3e4/0x48c [ 591.433426][ T8649] Modules linked in: [ 591.434369][ T8649] CPU: 1 PID: 8649 Comm: syz.2.1153 Not tainted 5.15.167-syzkaller #0 [ 591.436372][ T8649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 591.439016][ T8649] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 591.441067][ T8649] pc : __cfg80211_wext_giwrate+0x3e4/0x48c [ 591.442635][ T8649] lr : __cfg80211_wext_giwrate+0x3e4/0x48c [ 591.444087][ T8649] sp : ffff8000203177a0 [ 591.445151][ T8649] x29: ffff800020317970 x28: 1ffff00002958069 x27: ffff800020317b00 [ 591.447237][ T8649] x26: 0000000000000000 x25: ffff0000cdabe000 x24: ffff0000cdaa4000 [ 591.449304][ T8649] x23: ffff800020317920 x22: ffff0000cdabe5c0 x21: dfff800000000000 [ 591.451439][ T8649] x20: 1fffe00019b54800 x19: ffff700004062efc x18: 0000000000000000 [ 591.453493][ T8649] x17: 0000000000000002 x16: ffff8000084c5eb8 x15: 0000000000008b0f [ 591.455448][ T8649] x14: ffff0000ce669b40 x13: 0000000000ff0100 x12: 0000000000040000 [ 591.457448][ T8649] x11: 0000000000000ce7 x10: ffff800021c59000 x9 : 0000000000000ce8 [ 591.459474][ T8649] x8 : ffff8000113e8714 x7 : 0000000000000000 x6 : 000000000000003f [ 591.461395][ T8649] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff8000113e8428 [ 591.463442][ T8649] x2 : 0000000000000006 x1 : 0000000000000000 x0 : 0000000000000000 [ 591.465517][ T8649] Call trace: [ 591.466377][ T8649] __cfg80211_wext_giwrate+0x3e4/0x48c [ 591.467772][ T8649] ioctl_standard_call+0xe8/0x264 [ 591.469045][ T8649] wext_ioctl_dispatch+0x16c/0x3ec [ 591.470331][ T8649] wext_handle_ioctl+0x224/0x448 [ 591.471567][ T8649] sock_ioctl+0x140/0x8ac [ 591.472652][ T8649] __arm64_sys_ioctl+0x14c/0x1c8 [ 591.473839][ T8649] invoke_syscall+0x98/0x2b8 [ 591.475005][ T8649] el0_svc_common+0x138/0x258 [ 591.476143][ T8649] do_el0_svc+0x58/0x14c [ 591.477235][ T8649] el0_svc+0x7c/0x1f0 [ 591.478290][ T8649] el0t_64_sync_handler+0x84/0xe4 [ 591.479557][ T8649] el0t_64_sync+0x1a0/0x1a4 [ 591.480674][ T8649] irq event stamp: 3734 [ 591.481678][ T8649] hardirqs last enabled at (3733): [] kasan_quarantine_put+0xdc/0x204 [ 591.484291][ T8649] hardirqs last disabled at (3734): [] el1_dbg+0x24/0x80 [ 591.486412][ T8649] softirqs last enabled at (3714): [] local_bh_enable+0x10/0x34 [ 591.488697][ T8649] softirqs last disabled at (3712): [] local_bh_disable+0x10/0x34 [ 591.491107][ T8649] ---[ end trace 31cb04adf28646db ]--- SYZFAIL: failed to send rpc fd=3 want=8448 sent=0 n=-1 (errno 32: Broken pipe) [ 591.601018][ T8649] ------------[ cut here ]------------ [ 591.602862][ T8649] WARNING: CPU: 0 PID: 8649 at net/wireless/core.h:228 __cfg80211_wext_giwrate+0x3f0/0x48c [ 591.605306][ T8649] Modules linked in: [ 591.606303][ T8649] CPU: 0 PID: 8649 Comm: syz.2.1153 Tainted: G W 5.15.167-syzkaller #0 [ 591.608740][ T8649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 591.611196][ T8649] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 591.613160][ T8649] pc : __cfg80211_wext_giwrate+0x3f0/0x48c [ 591.614610][ T8649] lr : __cfg80211_wext_giwrate+0x3f0/0x48c [ 591.616193][ T8649] sp : ffff8000203177a0 [ 591.617215][ T8649] x29: ffff800020317970 x28: ffff800020317800 x27: 0000000000000000 [ 591.619274][ T8649] x26: 00000000ffffffa1 x25: ffff0000cdabe000 x24: 0000000000000000 [ 591.621335][ T8649] x23: ffff800020317920 x22: ffff0000cdabe5c0 x21: dfff800000000000 [ 591.623472][ T8649] x20: 1fffe00019b54800 x19: ffff700004062efc x18: ffff8000203172a0 [ 591.625607][ T8649] x17: 0000000000000002 x16: ffff8000084c5eb8 x15: 0000000000000002 [ 591.627640][ T8649] x14: 00000000daac7411 x13: dfff800000000000 x12: 0000000000040000 [ 591.629703][ T8649] x11: 000000000001f084 x10: ffff800021c59000 x9 : 000000000001f085 [ 591.631785][ T8649] x8 : ffff8000113e8720 x7 : 0000000000000000 x6 : 0000000000000000 [ 591.633950][ T8649] x5 : ffff800017962788 x4 : 0000000000000008 x3 : ffff8000082e1cb8 [ 591.635952][ T8649] x2 : ffff0000ce669b40 x1 : 0000000000000000 x0 : 0000000000000000 [ 591.638109][ T8649] Call trace: [ 591.638974][ T8649] __cfg80211_wext_giwrate+0x3f0/0x48c [ 591.640369][ T8649] ioctl_standard_call+0xe8/0x264 [ 591.641628][ T8649] wext_ioctl_dispatch+0x16c/0x3ec [ 591.642955][ T8649] wext_handle_ioctl+0x224/0x448 [ 591.644266][ T8649] sock_ioctl+0x140/0x8ac [ 591.645306][ T8649] __arm64_sys_ioctl+0x14c/0x1c8 [ 591.646650][ T8649] invoke_syscall+0x98/0x2b8 [ 591.647816][ T8649] el0_svc_common+0x138/0x258 [ 591.649056][ T8649] do_el0_svc+0x58/0x14c [ 591.650191][ T8649] el0_svc+0x7c/0x1f0 [ 591.651245][ T8649] el0t_64_sync_handler+0x84/0xe4 [ 591.652493][ T8649] el0t_64_sync+0x1a0/0x1a4 [ 591.653644][ T8649] irq event stamp: 3784 [ 591.654689][ T8649] hardirqs last enabled at (3783): [] exit_to_kernel_mode+0x100/0x178 [ 591.657265][ T8649] hardirqs last disabled at (3784): [] el1_dbg+0x24/0x80 [ 591.659424][ T8649] softirqs last enabled at (3768): [] handle_softirqs+0xb88/0xdbc [ 591.661872][ T8649] softirqs last disabled at (3737): [] __irq_exit_rcu+0x268/0x4d8 [ 591.664197][ T8649] ---[ end trace 31cb04adf28646dc ]--- [ 595.412021][ T4271] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.459822][ T4271] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.517544][ T4271] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.577893][ T4271] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.742886][ T4271] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.777135][ T4271] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.848513][ T4271] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.900494][ T4271] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.070623][ T4271] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.113907][ T4271] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.156618][ T4271] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.207158][ T4271] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.362644][ T4271] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.411523][ T4271] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.465430][ T4271] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.511678][ T4271] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.941399][ T4271] tipc: Disabling bearer [ 596.942993][ T4271] tipc: Left network mode [ 601.328043][ T4271] device hsr_slave_0 left promiscuous mode [ 601.360346][ T4271] device hsr_slave_1 left promiscuous mode