last executing test programs: 10.540258399s ago: executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) 10.337074651s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) dup3(r2, r1, 0x0) dup3(r1, r0, 0x0) write$P9_RCREATE(r0, 0x0, 0x0) 10.141736601s ago: executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 10.026326709s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$SOCK_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 9.998725503s ago: executing program 0: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000240)="368ab082a11106459ccf9d21b0c983127424b1a96b0c7064", 0x0}, 0x20) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="6105"], 0x119) 9.790051976s ago: executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup2(r0, r1) ioctl$VHOST_VDPA_SET_CONFIG(r2, 0x4008af74, 0x0) 2.330898797s ago: executing program 1: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 1.977495982s ago: executing program 3: r0 = inotify_init() close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000004940)={0x14}, 0x14}}, 0x0) 1.800523689s ago: executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) dup2(r1, r2) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x77359400}) accept$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) accept$unix(r2, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) 1.549265429s ago: executing program 3: ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x10}, 0x10}}, 0x40) 1.430416707s ago: executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) write$binfmt_script(r0, 0x0, 0x0) 1.389925733s ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x10) 1.299540027s ago: executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 1.288347069s ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x22040, 0x2e) 1.273530632s ago: executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x14}, 0x14}}, 0x20040000) 1.199513733s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$inet6(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000100)={0xa, 0x0, 0x1, @rand_addr=' \x01\x00'}, 0x1c) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x5451, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCSIFBR(r2, 0x5421, &(0x7f0000000240)=@get={0x1, &(0x7f0000000380)=""/234, 0xfffffffffffffffa}) getpeername(r2, &(0x7f0000000840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000180)=0x80) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$packet(0x11, 0x0, 0x300) sendto(r5, &(0x7f0000007ac0), 0x0, 0x0, &(0x7f0000007b80)=@hci={0x1f, 0x0, 0x4}, 0x80) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @void}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r6 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00') mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0485510, &(0x7f0000000100)={0x2, 0x0, 0x2, 0xcf79, 0x0}) openat$cgroup_procs(r6, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4048}, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000008c80)={0xffffffffffffffff, 0x0, &(0x7f0000008c40)={0x0}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000008c0)={0x0, 'veth0_vlan\x00', {0x3}}) 1.170738117s ago: executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x1}, 0x18) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) write$FUSE_STATFS(r0, &(0x7f00000000c0)={0x60}, 0x60) 1.09201816s ago: executing program 2: r0 = open(&(0x7f0000001a40)='./file0\x00', 0x40840, 0x0) ioctl$TIOCSTI(r0, 0x5450, 0x0) 975.018518ms ago: executing program 2: r0 = creat(&(0x7f0000001c00)='./file0\x00', 0x0) r1 = eventfd(0x0) dup3(r0, r1, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 959.63262ms ago: executing program 1: r0 = socket(0x1d, 0x2, 0x6) socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x29, 0xff, 0x81, 0x4, 0x48, @local, @private1, 0x700, 0x7800, 0x9, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001600)={'syztnl1\x00', &(0x7f0000001580)={'ip6gre0\x00', 0x0, 0x2f, 0xc0, 0x3, 0x7c3, 0x40, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7, 0x40, 0x6db7325b, 0x8001}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000016c0)={'syztnl2\x00', &(0x7f0000001640)={'ip6gre0\x00', 0x0, 0x0, 0x7, 0xff, 0x9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, 0x0, 0x7, 0x3b6eb58d, 0x1}}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001900)={&(0x7f0000001980)={0x1d8, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x78, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa4, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40}, 0x90) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x94, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x4040040) close(0xffffffffffffffff) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000100)={@multicast1, @rand_addr, 0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000200)={'gre0\x00', r4, 0x700, 0x7880, 0x6, 0x21f1, {{0x4e, 0x4, 0x1, 0x4, 0xb9, 0x64, 0x8000, 0x2, 0x2f, 0x0, @multicast1, @remote, {[@timestamp_prespec={0x44, 0x0, 0xad, 0x3, 0x8, [{@broadcast, 0x4245}, {@remote, 0x101}, {@local, 0x9}, {@broadcast, 0x5}, {@broadcast, 0x8}]}, @end, @cipso={0x86, 0x2b, 0x3, [{0x7, 0x8, "f6af0a106723"}, {0x1, 0x10, "deb369e9a0ec961def299a8026c4"}, {0x0, 0xd, "a01ee746f0d15ff9748230"}]}, @timestamp_addr={0x44, 0x34, 0x24, 0x1, 0x3, [{@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x80000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@private=0xa010102, 0xff}, {@empty}, {@empty, 0x8f}]}, @cipso={0x86, 0x4d, 0x3, [{0x2, 0x7, "d3a54fa209"}, {0x0, 0x11, "bc6409bf528f750453456a1b72e0c6"}, {0x5, 0xa, "44612aeef2f2b472"}, {0x6, 0xe, "1719fa9ddccb7fc58e1c043e"}, {0x6, 0x2}, {0x1, 0x2}, {0x7, 0x5, "c35cdf"}, {0x0, 0x9, "9ea75fe70f1017"}, {0x6, 0x5, "afff02"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0x7a, [@dev={0xac, 0x14, 0x14, 0x38}, @multicast1, @private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x14}]}, @generic={0x86, 0xb, "2b4bae4323b36cca27"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r5, 0x3}, 0x18) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) 887.911342ms ago: executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x4040044) 809.779874ms ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@debug}]}, 0x45, 0x7ac, &(0x7f0000000f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000380), 0x101bf) 488.945464ms ago: executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x4, 0x0) 430.927172ms ago: executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000001100)="94", 0x1) tee(r0, r4, 0x81, 0x0) write$binfmt_elf64(r4, 0x0, 0x78) write(r2, 0x0, 0x0) 308.071882ms ago: executing program 2: r0 = io_uring_setup(0x177f, &(0x7f0000000340)) r1 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x33fe0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 200.917428ms ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0) 143.449977ms ago: executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14}, 0x14}}, 0x20000844) 88.123066ms ago: executing program 4: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netstat\x00') dup3(r0, r1, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) 62.25414ms ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8912, &(0x7f0000000040)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @multicast2}}) 0s ago: executing program 4: gettid() timer_create(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) getsockopt$inet_int(r0, 0x0, 0x30, 0x0, &(0x7f00000001c0)=0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.99' (ED25519) to the list of known hosts. 2024/06/01 20:45:41 fuzzer started 2024/06/01 20:45:41 dialing manager at 10.128.0.163:30016 [ 51.710189][ T3504] cgroup: Unknown subsys name 'net' [ 51.849388][ T3504] cgroup: Unknown subsys name 'rlimit' 2024/06/01 20:45:43 starting 5 executor processes [ 53.073635][ T3505] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.437225][ T3520] chnl_net:caif_netlink_parms(): no params data found [ 54.447337][ T3530] chnl_net:caif_netlink_parms(): no params data found [ 54.495580][ T3528] chnl_net:caif_netlink_parms(): no params data found [ 54.551576][ T3531] chnl_net:caif_netlink_parms(): no params data found [ 54.649968][ T3530] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.657708][ T3530] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.666139][ T3530] device bridge_slave_0 entered promiscuous mode [ 54.681234][ T3530] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.688309][ T3530] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.696729][ T3530] device bridge_slave_1 entered promiscuous mode [ 54.721776][ T3524] chnl_net:caif_netlink_parms(): no params data found [ 54.745799][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.753138][ T3520] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.761495][ T3520] device bridge_slave_0 entered promiscuous mode [ 54.796398][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.803631][ T3520] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.815711][ T3520] device bridge_slave_1 entered promiscuous mode [ 54.823005][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.830339][ T3528] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.838260][ T3528] device bridge_slave_0 entered promiscuous mode [ 54.861495][ T3530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.879416][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.887202][ T3528] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.896445][ T3528] device bridge_slave_1 entered promiscuous mode [ 54.911587][ T3531] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.918680][ T3531] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.926750][ T3531] device bridge_slave_0 entered promiscuous mode [ 54.937288][ T3530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.974267][ T3531] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.981502][ T3531] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.989315][ T3531] device bridge_slave_1 entered promiscuous mode [ 55.007425][ T3520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.031816][ T3528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.052160][ T3530] team0: Port device team_slave_0 added [ 55.059921][ T3520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.089356][ T3528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.108533][ T3530] team0: Port device team_slave_1 added [ 55.116107][ T3531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.136044][ T3531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.168507][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.175785][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.183862][ T3524] device bridge_slave_0 entered promiscuous mode [ 55.210486][ T3520] team0: Port device team_slave_0 added [ 55.225176][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.232701][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.241593][ T3524] device bridge_slave_1 entered promiscuous mode [ 55.259834][ T3528] team0: Port device team_slave_0 added [ 55.267010][ T3520] team0: Port device team_slave_1 added [ 55.274045][ T3530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.281193][ T3530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.307388][ T3530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.330721][ T3531] team0: Port device team_slave_0 added [ 55.345906][ T3528] team0: Port device team_slave_1 added [ 55.366513][ T3530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.373918][ T3530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.400024][ T3530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.413871][ T3524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.424703][ T3531] team0: Port device team_slave_1 added [ 55.459843][ T3524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.477269][ T3520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.484303][ T3520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.510855][ T3520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.524231][ T3520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.531795][ T3520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.558057][ T3520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.581677][ T3528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.588652][ T3528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.617978][ T3528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.638902][ T3531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.646142][ T3531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.672350][ T3531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.696358][ T3528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.703432][ T3528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.729608][ T3528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.748038][ T3531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.755346][ T3531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.781387][ T3531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.813129][ T3524] team0: Port device team_slave_0 added [ 55.834076][ T3530] device hsr_slave_0 entered promiscuous mode [ 55.841600][ T3530] device hsr_slave_1 entered promiscuous mode [ 55.850387][ T3524] team0: Port device team_slave_1 added [ 55.907836][ T3528] device hsr_slave_0 entered promiscuous mode [ 55.915069][ T3528] device hsr_slave_1 entered promiscuous mode [ 55.922024][ T3528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.930119][ T3528] Cannot create hsr debugfs directory [ 55.954945][ T3524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.962364][ T3524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.988526][ T3524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.004678][ T3520] device hsr_slave_0 entered promiscuous mode [ 56.011590][ T3520] device hsr_slave_1 entered promiscuous mode [ 56.018396][ T3520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.026339][ T3520] Cannot create hsr debugfs directory [ 56.035513][ T3531] device hsr_slave_0 entered promiscuous mode [ 56.042707][ T3531] device hsr_slave_1 entered promiscuous mode [ 56.049268][ T3531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.056961][ T3531] Cannot create hsr debugfs directory [ 56.071081][ T3524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.078049][ T3524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.080819][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 56.104436][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 56.111998][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 56.119715][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 56.123160][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 56.133030][ T3524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.278014][ T3524] device hsr_slave_0 entered promiscuous mode [ 56.285218][ T3524] device hsr_slave_1 entered promiscuous mode [ 56.292134][ T3524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.299850][ T3524] Cannot create hsr debugfs directory [ 56.538870][ T3530] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.555441][ T3530] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.566254][ T3530] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.576747][ T3530] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.628972][ T3528] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.638524][ T3528] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.658426][ T3528] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.683906][ T3528] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.750645][ T3520] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.761516][ T3520] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.772349][ T3520] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.799768][ T3520] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.839394][ T3530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.864092][ T3531] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.894696][ T3531] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.906148][ T3531] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.916385][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.925922][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.943289][ T3530] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.952370][ T3531] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.979821][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.988539][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.003449][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.010751][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.045245][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.053482][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.063835][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.072974][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.080110][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.088040][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.125960][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.135089][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.145598][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.154351][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.182027][ T3530] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.193876][ T3530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.211176][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.220697][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.229167][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.238058][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.247035][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.255548][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.265063][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.275659][ T3528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.305811][ T3524] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.337760][ T3528] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.347169][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.357249][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.366483][ T3524] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.376401][ T3524] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.399839][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.408547][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.417512][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.424652][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.432630][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.441778][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.450300][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.457348][ T3566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.466071][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.475021][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.483954][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.492758][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.510207][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.518264][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.535098][ T3524] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.552196][ T3520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.574645][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.591717][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.645246][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.656006][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.665432][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.675535][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.684995][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.693330][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.710247][ T3520] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.725458][ T3528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.737363][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.746095][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.757626][ T3531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.776473][ T3530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.788555][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.797960][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.813379][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.820530][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.832993][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.855990][ T3531] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.875212][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.890658][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.899057][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.906224][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.915793][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.925374][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.933790][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.991781][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.002111][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.012025][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.019121][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.027320][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.036070][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.045216][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.052340][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.060177][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.068859][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.079012][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.087835][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.095377][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.103212][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.112313][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.121089][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.129579][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.138517][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.148028][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.156446][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.159858][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 58.165487][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.177197][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 58.180578][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.193271][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.198148][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 58.216193][ T3520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.219815][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 58.246615][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 58.256188][ T3531] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.273512][ T3531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.300428][ T3528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.308293][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.318209][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.327313][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.336623][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.346485][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.355697][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.364891][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.373603][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.382220][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.390981][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.403916][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.412000][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.433248][ T3530] device veth0_vlan entered promiscuous mode [ 58.450799][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.459403][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.488527][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.505332][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.531041][ T3530] device veth1_vlan entered promiscuous mode [ 58.539118][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.593183][ T3524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.620221][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.629096][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.653343][ T3524] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.677136][ T3520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.688445][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.697202][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.705597][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.714925][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.725205][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.733137][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.749691][ T3528] device veth0_vlan entered promiscuous mode [ 58.776171][ T3531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.793399][ T3530] device veth0_macvtap entered promiscuous mode [ 58.801631][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.814299][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.822472][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.835287][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.844007][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.856745][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.865409][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.872492][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.885072][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.892613][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.903939][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.913456][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.925889][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.933030][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.941146][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.950082][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.959248][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.967658][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.984990][ T3528] device veth1_vlan entered promiscuous mode [ 59.003302][ T3530] device veth1_macvtap entered promiscuous mode [ 59.037021][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.045927][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.056180][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.064302][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.073870][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.105378][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.120548][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.131091][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.140526][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.149154][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.166484][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.176104][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.192109][ T3530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.219351][ T3524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.232030][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.252541][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.261922][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.271230][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.280368][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.289179][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.298193][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.311159][ T3530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.323508][ T3528] device veth0_macvtap entered promiscuous mode [ 59.337777][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.353247][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.366381][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.378034][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.388960][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.404923][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.413118][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.421311][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.430278][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.441453][ T3530] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.451682][ T3530] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.460945][ T3530] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.469779][ T3530] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.483432][ T3528] device veth1_macvtap entered promiscuous mode [ 59.492618][ T3531] device veth0_vlan entered promiscuous mode [ 59.532930][ T3528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.544436][ T3528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.556286][ T3528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.579295][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.590332][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.598696][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.608037][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.616900][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.626897][ T3531] device veth1_vlan entered promiscuous mode [ 59.637913][ T3520] device veth0_vlan entered promiscuous mode [ 59.647947][ T3528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.658855][ T3528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.671341][ T3528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.686481][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.695668][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.704630][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.713890][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.735189][ T3520] device veth1_vlan entered promiscuous mode [ 59.750713][ T3528] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.759443][ T3528] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.768794][ T3528] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.777912][ T3528] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.808441][ T3524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.830485][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.838010][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.907169][ T3531] device veth0_macvtap entered promiscuous mode [ 59.936929][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.946325][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.955914][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.965299][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.974725][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.998289][ T3520] device veth0_macvtap entered promiscuous mode [ 60.006895][ T3531] device veth1_macvtap entered promiscuous mode [ 60.038725][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.047418][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.056398][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.066065][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.090072][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.098529][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.112157][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.122552][ T3520] device veth1_macvtap entered promiscuous mode [ 60.131461][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.146191][ T3524] device veth0_vlan entered promiscuous mode [ 60.161052][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.170687][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.178558][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.186866][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.199033][ T3531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.209977][ T3531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.219906][ T3531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.230884][ T3531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.241612][ T1068] Bluetooth: hci3: command 0x040f tx timeout [ 60.247887][ T1068] Bluetooth: hci0: command 0x040f tx timeout [ 60.248425][ T3531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.254614][ T1068] Bluetooth: hci1: command 0x040f tx timeout [ 60.286048][ T3524] device veth1_vlan entered promiscuous mode [ 60.302989][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.317694][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.320279][ T1068] Bluetooth: hci4: command 0x040f tx timeout [ 60.327519][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.339109][ T1068] Bluetooth: hci2: command 0x040f tx timeout [ 60.343385][ T3531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.356924][ T3531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.366921][ T3531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.378051][ T3531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.389857][ T3531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.412509][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.429047][ T3520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.432201][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.449365][ T3520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.460417][ T3520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.471231][ T3520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.483075][ T3520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.493876][ T3520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.505655][ T3520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.514285][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.523119][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.532340][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.541362][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.549378][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.558145][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.601737][ T3531] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.611015][ T3531] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.622071][ T3531] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.631044][ T3531] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.650138][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.658191][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.669205][ T3520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.681542][ T3520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.691446][ T3520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.702386][ T3520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.712428][ T3520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.723355][ T3520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.734809][ T3520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.744710][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.754198][ T3520] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.758300][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.762991][ T3520] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.763047][ T3520] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.790271][ T3520] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.810426][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.820720][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.829985][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.838753][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.861485][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.892273][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.927348][ T3524] device veth0_macvtap entered promiscuous mode [ 60.983922][ T3524] device veth1_macvtap entered promiscuous mode [ 61.036353][ T3524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.076764][ T3524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.099798][ T3524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.114101][ T3524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.124885][ T3524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.135687][ T3524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.150610][ T3524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.165037][ T3524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.178232][ T3524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.215481][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.224647][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.233218][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.242329][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.253926][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.256177][ T3524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.263053][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.273406][ T3524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.296846][ T3524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.307621][ T3524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.317949][ T3524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.328899][ T3524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.340329][ T3524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.350959][ T3524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.363470][ T3524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.380184][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.388127][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.398826][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.425389][ T3524] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.434770][ T3524] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.445060][ T3524] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.454015][ T3524] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.486493][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.509231][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.529713][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.555295][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.566840][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.577816][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.617501][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.632500][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.655748][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.699208][ T3608] Zero length message leads to an empty skb [ 61.723358][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.770371][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.778084][ T3610] serio: Serial port pts1 [ 61.814090][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.814111][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.834173][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.853702][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.988882][ T3616] serio: Serial port pts2 [ 62.189661][ T1068] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 62.320975][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 62.327476][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 62.334014][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 62.401547][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 62.407871][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 62.440729][ T1068] usb 3-1: Using ep0 maxpacket: 8 [ 62.515355][ T3636] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 62.546415][ T3636] device syzkaller1 entered promiscuous mode [ 62.580662][ T1068] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.602491][ T1068] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 62.619751][ T1068] usb 3-1: config 1 has no interface number 1 [ 62.789355][ T3647] loop0: detected capacity change from 0 to 512 [ 62.796407][ T1068] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 62.806754][ T1068] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.815696][ T1068] usb 3-1: Product: syz [ 62.820273][ T1068] usb 3-1: Manufacturer: syz [ 62.824896][ T1068] usb 3-1: SerialNumber: syz [ 62.832516][ T3647] ======================================================= [ 62.832516][ T3647] WARNING: The mand mount option has been deprecated and [ 62.832516][ T3647] and is ignored by this kernel. Remove the mand [ 62.832516][ T3647] option from the mount to silence this warning. [ 62.832516][ T3647] ======================================================= [ 62.928215][ T3647] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 62.937391][ T3647] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 62.945759][ T3647] System zones: 0-1, 15-15, 18-18, 34-34 [ 62.953538][ T3647] EXT4-fs (loop0): orphan cleanup on readonly fs [ 62.966958][ T3647] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 62.977119][ T3647] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 62.992138][ T3647] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 62.999413][ T3647] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz-executor.0: bad orphan inode 16 [ 63.014299][ T3647] ext4_test_bit(bit=15, block=18) = 1 [ 63.020128][ T3647] is_bad_inode(inode)=0 [ 63.024443][ T3647] NEXT_ORPHAN(inode)=0 [ 63.028615][ T3647] max_ino=32 [ 63.034827][ T3647] i_nlink=2 [ 63.038165][ T3647] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 63.336073][ T3657] serio: Serial port pts0 [ 63.346112][ T3659] serio: Serial port pts2 [ 63.769104][ T13] usb 3-1: USB disconnect, device number 2 [ 64.078295][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 65.065535][ T3754] process 'syz-executor.3' launched './file0' with NULL argv: empty string added [ 65.069650][ T1068] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 65.334073][ T1068] usb 3-1: Using ep0 maxpacket: 8 [ 65.460007][ T1068] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.487263][ T1068] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 65.534362][ T1068] usb 3-1: config 1 has no interface number 1 [ 65.709951][ T1068] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 65.732079][ T1068] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.758547][ T1068] usb 3-1: Product: syz [ 65.767525][ T1068] usb 3-1: Manufacturer: syz [ 65.779443][ T1068] usb 3-1: SerialNumber: syz [ 66.734325][ T3566] usb 3-1: USB disconnect, device number 3 [ 66.818502][ T3828] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) [ 68.512071][ T3567] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 68.625692][ T3566] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.879980][ T3567] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 68.904628][ T3567] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 69.010846][ T3567] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.031679][ T3567] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 69.036138][ T3566] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 69.055499][ T3567] usb 2-1: SerialNumber: syz [ 69.080433][ T3566] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 69.099913][ T3897] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 69.103968][ T3566] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.177208][ T3566] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.199465][ T3566] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.249075][ T3566] usb 1-1: config 0 descriptor?? [ 69.309919][ T3904] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 69.324413][ T3897] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 69.533154][ T3943] loop3: detected capacity change from 0 to 512 [ 69.588383][ T3943] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.619813][ T3943] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.669216][ T3943] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=a002e018, mo2=0000] [ 69.679171][ T3943] EXT4-fs (loop3): failed to initialize system zone (-117) [ 69.700223][ T3943] EXT4-fs (loop3): mount failed [ 69.801977][ T3566] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 69.804829][ T3567] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 69.816970][ T3566] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 69.865505][ T3566] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 69.878961][ T3566] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 69.904989][ T3566] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 69.917941][ T3566] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 69.932676][ T3566] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 69.964367][ T3566] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 69.992602][ T3566] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.024390][ T3566] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.049371][ T3566] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.072099][ T3566] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.091139][ T3566] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.117261][ T3566] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.139665][ T3566] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.163785][ T3566] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 70.244830][ T3566] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 70.308151][ T3566] usb 1-1: USB disconnect, device number 2 [ 70.456025][ T3966] input: syz0 as /devices/virtual/input/input6 [ 70.699813][ T3982] usb usb2: usbfs: process 3982 (syz-executor.0) did not claim interface 7 before use [ 70.869206][ T26] audit: type=1804 audit(1717274761.156:2): pid=3988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1141989258/syzkaller.Gj8BVL/22/file0" dev="sda1" ino=1964 res=1 errno=0 [ 71.237831][ T1068] usb 2-1: USB disconnect, device number 2 [ 71.248461][ T1068] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 71.375810][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.389306][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.553489][ T4065] "syz-executor.0" (4065) uses obsolete ecb(arc4) skcipher [ 72.569389][ T4067] usb usb2: usbfs: process 4067 (syz-executor.1) did not claim interface 7 before use [ 73.086937][ T4099] loop1: detected capacity change from 0 to 128 [ 73.192198][ T4099] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 73.245397][ T4099] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.285234][ T4099] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 73.379743][ T4099] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 77.313352][ T4265] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 79.442585][ T3964] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.586567][ T3964] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.727891][ T3964] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.828952][ T3964] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.129617][ T4350] chnl_net:caif_netlink_parms(): no params data found [ 80.613303][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.631184][ T4350] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.667982][ T4350] device bridge_slave_0 entered promiscuous mode [ 80.741278][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.764025][ T4350] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.795394][ T4350] device bridge_slave_1 entered promiscuous mode [ 80.966473][ T4350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.032643][ T4350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.165335][ T4350] team0: Port device team_slave_0 added [ 81.209801][ T4350] team0: Port device team_slave_1 added [ 81.311994][ T4350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.337529][ T4350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.409371][ T4350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.439925][ T3569] Bluetooth: hci0: command 0x0409 tx timeout [ 81.482454][ T4350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.492758][ T4350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.544820][ T4350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.612748][ T1066] cfg80211: failed to load regulatory.db [ 81.669130][ T4350] device hsr_slave_0 entered promiscuous mode [ 81.704359][ T4350] device hsr_slave_1 entered promiscuous mode [ 81.731236][ T4350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.747694][ T4350] Cannot create hsr debugfs directory [ 82.182096][ T3964] device hsr_slave_0 left promiscuous mode [ 82.196186][ T3964] device hsr_slave_1 left promiscuous mode [ 82.233136][ T3964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.271465][ T3964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.312858][ T3964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.338011][ T3964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.386148][ T3964] device bridge_slave_1 left promiscuous mode [ 82.403475][ T3964] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.465993][ T3964] device bridge_slave_0 left promiscuous mode [ 82.480533][ T3964] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.608061][ T3964] device veth1_macvtap left promiscuous mode [ 82.620723][ T3964] device veth0_macvtap left promiscuous mode [ 82.650335][ T3964] device veth1_vlan left promiscuous mode [ 82.663617][ T3964] device veth0_vlan left promiscuous mode [ 83.455789][ T3964] team0 (unregistering): Port device team_slave_1 removed [ 83.489835][ T3964] team0 (unregistering): Port device team_slave_0 removed [ 83.518857][ T3964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.521731][ T3567] Bluetooth: hci0: command 0x041b tx timeout [ 83.562679][ T3964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.694040][ T3964] bond0 (unregistering): Released all slaves [ 84.595889][ T4350] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.649242][ T4350] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.688390][ T4350] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.750786][ T4350] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.947743][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 85.180212][ T4350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.262441][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.277320][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.320423][ T4350] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.364612][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.387819][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.420528][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.427696][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.467073][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.478619][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.497970][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.521451][ T3246] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.528686][ T3246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.590829][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.600028][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 85.635821][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.650629][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.691377][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.731063][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.739208][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.763693][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.784402][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.815654][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.834322][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.853173][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.878448][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.328658][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.355055][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.396003][ T4350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.144053][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.161343][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.240363][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.254588][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.289982][ T4350] device veth0_vlan entered promiscuous mode [ 87.306058][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.317618][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.348450][ T4350] device veth1_vlan entered promiscuous mode [ 87.476171][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.492370][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.536636][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.595071][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.624459][ T4350] device veth0_macvtap entered promiscuous mode [ 87.667300][ T4350] device veth1_macvtap entered promiscuous mode [ 87.679730][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 87.798517][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.873162][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.906362][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.956310][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.993634][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.064516][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.111099][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.157140][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.231242][ T4350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.298242][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.314854][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.378206][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.423765][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.453108][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.515158][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.545265][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.579855][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.618536][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.674631][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.721458][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.761234][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.808012][ T4350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.841668][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.870440][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.921386][ T4350] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.967640][ T4350] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.014230][ T4350] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.059589][ T4350] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.367339][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.409616][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.419869][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.557504][ T3734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.591973][ T3734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.628042][ T4777] serio: Serial port pts0 [ 89.643544][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.189840][ T3563] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 90.267393][ T4828] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 90.300574][ T4827] serio: Serial port pts0 [ 90.612386][ T3563] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 92.103489][ T4938] loop0: detected capacity change from 0 to 1024 [ 92.159615][ T4938] EXT4-fs (loop0): Ignoring removed orlov option [ 92.167060][ T4938] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 92.189035][ T4938] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 92.201275][ T4938] EXT4-fs (loop0): invalid journal inode [ 92.207198][ T4938] EXT4-fs (loop0): can't get journal size [ 92.218599][ T4938] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,norecovery,orlov,nolazytime,,errors=continue. Quota mode: writeback. [ 92.408806][ T4949] loop0: detected capacity change from 0 to 1024 [ 92.454391][ T4949] EXT4-fs (loop0): Ignoring removed nobh option [ 92.480921][ T4949] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.548304][ T4949] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,dioread_nolock,usrjquota=,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 92.569711][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.046598][ T3563] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.080981][ T3563] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.107076][ T4984] loop1: detected capacity change from 0 to 1024 [ 93.169836][ T3563] usb 2-1: can't set config #1, error -71 [ 93.190994][ T3563] usb 2-1: USB disconnect, device number 3 [ 93.206014][ T4984] EXT4-fs (loop1): Ignoring removed orlov option [ 93.233541][ T4984] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 93.237320][ T4994] loop0: detected capacity change from 0 to 128 [ 93.298874][ T4984] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 93.317996][ T4984] EXT4-fs (loop1): invalid journal inode [ 93.324256][ T4994] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 93.326648][ T4984] EXT4-fs (loop1): can't get journal size [ 93.354112][ T4994] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.412232][ T4984] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000004,norecovery,orlov,nogrpid,,errors=continue. Quota mode: writeback. [ 93.530470][ T4994] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 93.586724][ T4994] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz-executor.0: checksumming directory block 0 [ 94.986988][ T5098] serio: Serial port pts0 [ 96.797102][ T5187] serio: Serial port pts0 [ 97.119452][ T5210] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. [ 98.456132][ T5269] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 98.849061][ T5282] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. [ 99.400434][ T5311] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. [ 99.873387][ T5332] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.100661][ T5399] syz-executor.4 (pid 5399) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 101.553286][ T5418] loop1: detected capacity change from 0 to 128 [ 101.591311][ T5418] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 101.672629][ T5418] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.718370][ T5418] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 101.751568][ T5418] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 102.003516][ T5438] can: request_module (can-proto-0) failed. [ 102.160836][ T3563] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.646265][ T5466] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure [ 102.900046][ T3563] usb 1-1: New USB device found, idVendor=12d1, idProduct=92b4, bcdDevice=c5.83 [ 102.909137][ T3563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.956646][ T3563] usb 1-1: Product: syz [ 102.961487][ T3563] usb 1-1: Manufacturer: syz [ 102.966229][ T3563] usb 1-1: SerialNumber: syz [ 102.974955][ T3563] usb 1-1: config 0 descriptor?? [ 103.027389][ T3563] option 1-1:0.0: GSM modem (1-port) converter detected [ 103.046789][ T5476] serio: Serial port pts0 [ 103.236174][ T3563] usb 1-1: USB disconnect, device number 3 [ 103.243836][ T3563] option 1-1:0.0: device disconnected [ 103.995940][ T5535] loop3: detected capacity change from 0 to 512 [ 104.101573][ T5535] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 104.130074][ T5535] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 104.155885][ T5535] EXT4-fs (loop3): 1 truncate cleaned up [ 104.162427][ T5535] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.181814][ T5535] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 109.843763][ T5801] "syz-executor.3" (5801) uses obsolete ecb(arc4) skcipher [ 110.915580][ T5856] loop1: detected capacity change from 0 to 512 [ 111.091734][ T5856] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 111.117867][ T5856] System zones: 1-12 [ 111.185016][ T5856] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz-executor.1: invalid block [ 111.235324][ T5856] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 1) [ 111.252529][ T5856] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 361: padding at end of block bitmap is not set [ 111.279665][ T5856] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6184: Corrupt filesystem [ 111.303911][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 111.321341][ T5856] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz-executor.1: attempt to clear invalid blocks 33619980 len 1 [ 111.357408][ T5856] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 0) [ 111.412220][ T5856] EXT4-fs (loop1): 1 truncate cleaned up [ 111.421113][ T5856] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,max_dir_size_kb=0x0000000000000400,,errors=continue. Quota mode: none. [ 111.488409][ T5856] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz-executor.1: Directory hole found for htree index block [ 111.708948][ T5899] loop2: detected capacity change from 0 to 512 [ 111.849887][ T5899] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 111.869696][ T5899] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 111.903413][ T5899] EXT4-fs (loop2): 1 truncate cleaned up [ 111.904463][ T5905] serio: Serial port pts0 [ 111.915033][ T5899] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.021778][ T5899] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 114.647785][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.243561][ T6029] sctp: failed to load transform for md5: -2 [ 116.032544][ T6083] "syz-executor.0" (6083) uses obsolete ecb(arc4) skcipher [ 116.126651][ T6090] loop1: detected capacity change from 0 to 512 [ 116.215535][ T6090] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 116.226171][ T6090] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 116.237119][ T6090] EXT4-fs (loop1): 1 truncate cleaned up [ 116.254394][ T6090] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.275802][ T6090] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 116.329782][ T3568] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.739951][ T3568] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.757752][ T3568] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.768402][ T3568] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 116.784396][ T3568] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.807820][ T3568] usb 3-1: config 0 descriptor?? [ 117.310594][ T3568] hid (null): bogus close delimiter [ 117.533820][ T3568] usb 3-1: language id specifier not provided by device, defaulting to English [ 118.203507][ T6217] loop4: detected capacity change from 0 to 512 [ 118.226854][ T3568] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #100: -71 [ 118.243598][ T3568] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 118.259746][ T3568] uclogic 0003:256C:006D.0002: failed probing pen v1 parameters: -71 [ 118.277745][ T3568] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 118.310819][ T3568] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 118.358071][ T3568] usb 3-1: USB disconnect, device number 4 [ 118.391193][ T6217] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.410064][ T6217] ext4 filesystem being mounted at /root/syzkaller-testdir4086858525/syzkaller.bltHkF/158/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 118.465473][ T6217] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor.4: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 118.516435][ T6217] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 12: comm syz-executor.4: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 118.609377][ T6236] EXT4-fs error (device loop4): ext4_do_update_inode:5160: inode #2: comm syz-executor.4: corrupted inode contents [ 118.624496][ T26] audit: type=1804 audit(1717274808.916:3): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1428147433/syzkaller.muYzOX/183/file0" dev="sda1" ino=1964 res=1 errno=0 [ 118.689961][ T6236] EXT4-fs error (device loop4): ext4_dirty_inode:5993: inode #2: comm syz-executor.4: mark_inode_dirty error [ 118.760344][ T6236] EXT4-fs error (device loop4): ext4_do_update_inode:5160: inode #2: comm syz-executor.4: corrupted inode contents [ 118.800192][ T6236] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz-executor.4: mark_inode_dirty error [ 118.867328][ T6217] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor.4: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 118.976545][ T6217] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 14: comm syz-executor.4: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 119.028433][ T6217] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 15: comm syz-executor.4: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 120.406120][ T6352] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 120.969634][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 121.209895][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 121.329882][ T23] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 121.338271][ T23] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 121.389702][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 121.398695][ T23] usb 3-1: config 1 has no interface number 0 [ 121.419586][ T23] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.429364][ T23] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 121.503220][ T23] usb 3-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 121.554729][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.836435][ T23] usb 3-1: USB disconnect, device number 5 [ 122.564376][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.949927][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.969683][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.012701][ T23] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 123.032022][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.085255][ T23] usb 4-1: config 0 descriptor?? [ 123.590209][ T23] hid (null): bogus close delimiter [ 123.809844][ T23] usb 4-1: language id specifier not provided by device, defaulting to English [ 124.222323][ T6546] loop0: detected capacity change from 0 to 1024 [ 124.255646][ T6548] loop4: detected capacity change from 0 to 512 [ 124.285339][ T6546] EXT4-fs (loop0): Ignoring removed orlov option [ 124.295924][ T6546] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 124.308448][ T6546] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 124.322487][ T6546] EXT4-fs (loop0): invalid journal inode [ 124.328523][ T6546] EXT4-fs (loop0): can't get journal size [ 124.338282][ T6548] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 124.350219][ T6546] EXT4-fs (loop0): mounted filesystem without journal. Opts: data=writeback,norecovery,orlov,data_err=abort,max_dir_size_kb=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 124.368725][ T6548] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 124.395914][ T6548] System zones: 0-1, 15-15, 18-18, 34-34 [ 124.429217][ T6548] EXT4-fs (loop4): orphan cleanup on readonly fs [ 124.439869][ T6548] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 124.455738][ T6548] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 124.473744][ T6548] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 124.488054][ T6548] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz-executor.4: bad orphan inode 16 [ 124.499197][ T6548] ext4_test_bit(bit=15, block=18) = 1 [ 124.512321][ T23] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71 [ 124.527368][ T6548] is_bad_inode(inode)=0 [ 124.543259][ T23] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 124.556239][ T6548] NEXT_ORPHAN(inode)=0 [ 124.567317][ T6548] max_ino=32 [ 124.583276][ T23] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71 [ 124.594252][ T6548] i_nlink=2 [ 124.601668][ T6548] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 124.634922][ T23] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 124.675014][ T23] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 124.688425][ T6548] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 124.714207][ T23] usb 4-1: USB disconnect, device number 2 [ 125.819647][ T3568] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 126.067306][ T6635] loop1: detected capacity change from 0 to 2048 [ 126.132962][ T6635] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 126.149952][ T6635] EXT4-fs (loop1): Ignoring removed nobh option [ 126.188439][ T6635] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,errors=remount-ro,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,minixdf,nobh,. Quota mode: none. [ 126.214449][ T6635] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz-executor.1: bg 0: block 2: invalid block bitmap [ 126.229736][ T3568] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.240804][ T3568] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.250681][ T3568] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 126.260151][ T3568] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.272230][ T3568] usb 1-1: config 0 descriptor?? [ 126.277954][ T6635] EXT4-fs (loop1): Remounting filesystem read-only [ 126.753722][ T3568] hid (null): bogus close delimiter [ 126.985701][ T3568] usb 1-1: language id specifier not provided by device, defaulting to English [ 127.028070][ T6676] sctp: [Deprecated]: syz-executor.2 (pid 6676) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.028070][ T6676] Use struct sctp_sack_info instead [ 127.670360][ T3568] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #100: -71 [ 127.696783][ T3568] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 127.722718][ T3568] uclogic 0003:256C:006D.0004: failed probing pen v1 parameters: -71 [ 127.744759][ T3568] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 127.766270][ T3568] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 127.792983][ T3568] usb 1-1: USB disconnect, device number 4 [ 128.243219][ T6750] loop1: detected capacity change from 0 to 512 [ 128.358654][ T6750] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 128.375414][ T6750] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 128.396768][ T6750] System zones: 0-1, 15-15, 18-18, 34-34 [ 128.406100][ T6750] EXT4-fs (loop1): orphan cleanup on readonly fs [ 128.418250][ T6750] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 128.428503][ T6750] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 128.444907][ T6750] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 128.453948][ T6750] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz-executor.1: bad orphan inode 16 [ 128.472591][ T6750] ext4_test_bit(bit=15, block=18) = 1 [ 128.478082][ T6750] is_bad_inode(inode)=0 [ 128.487872][ T6750] NEXT_ORPHAN(inode)=0 [ 128.497037][ T6750] max_ino=32 [ 128.503032][ T6750] i_nlink=2 [ 128.506238][ T6750] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.537469][ T6750] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 128.878125][ T6783] loop1: detected capacity change from 0 to 1024 [ 128.974796][ T6792] hsr0 speed is unknown, defaulting to 1000 [ 128.999912][ T6792] hsr0 speed is unknown, defaulting to 1000 [ 129.112615][ T6792] hsr0 speed is unknown, defaulting to 1000 [ 129.185510][ T6783] EXT4-fs (loop1): Test dummy encryption mode enabled [ 129.189299][ T6792] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 129.201161][ T6783] EXT4-fs (loop1): Ignoring removed orlov option [ 129.224219][ T6792] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 129.238302][ T6783] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 129.346293][ T6792] hsr0 speed is unknown, defaulting to 1000 [ 129.365855][ T6792] hsr0 speed is unknown, defaulting to 1000 [ 129.374362][ T6792] hsr0 speed is unknown, defaulting to 1000 [ 129.387699][ T6792] hsr0 speed is unknown, defaulting to 1000 [ 129.418411][ T6792] hsr0 speed is unknown, defaulting to 1000 [ 129.493859][ T6783] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 129.839855][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 130.093268][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 130.224189][ T23] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 130.419869][ T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 130.439696][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.457503][ T23] usb 5-1: Product: syz [ 130.465323][ T23] usb 5-1: Manufacturer: syz [ 130.474648][ T23] usb 5-1: SerialNumber: syz [ 130.707260][ T6866] loop3: detected capacity change from 0 to 2048 [ 130.733818][ T23] usb 5-1: USB disconnect, device number 2 [ 130.812119][ T6866] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,nogrpid,i_version,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 130.871461][ T6866] ext4 filesystem being mounted at /root/syzkaller-testdir91490580/syzkaller.IkAgkD/275/bus supports timestamps until 2038 (0x7fffffff) [ 131.010404][ T6866] loop_set_status: loop3 () has still dirty pages (nrpages=3) [ 131.114933][ T6886] siw: device registration error -23 [ 131.156579][ T3524] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor.3: path /root/syzkaller-testdir91490580/syzkaller.IkAgkD/275/bus: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 131.202122][ T3524] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #16: comm syz-executor.3: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 131.250152][ T3524] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #16: comm syz-executor.3: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 131.663436][ T3964] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.810457][ T3964] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.961479][ T3964] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.074734][ T6927] loop0: detected capacity change from 0 to 1024 [ 132.113468][ T6927] EXT4-fs (loop0): Test dummy encryption mode enabled [ 132.122249][ T3964] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.136394][ T6927] EXT4-fs (loop0): Ignoring removed orlov option [ 132.250226][ T6927] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 132.397133][ T6935] hsr0 speed is unknown, defaulting to 1000 [ 132.811964][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.818386][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.192943][ T6935] chnl_net:caif_netlink_parms(): no params data found [ 133.646210][ T6935] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.665669][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.714008][ T6935] device bridge_slave_0 entered promiscuous mode [ 133.753924][ T6935] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.777812][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.804092][ T6935] device bridge_slave_1 entered promiscuous mode [ 133.812141][ T6998] loop4: detected capacity change from 0 to 512 [ 133.939336][ T6935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.972467][ T6998] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 133.981763][ T6998] EXT4-fs (loop4): 1 truncate cleaned up [ 133.993379][ T6998] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noblock_validity,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 134.031770][ T6935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.099851][ T3964] device hsr_slave_0 left promiscuous mode [ 134.107571][ T3964] device hsr_slave_1 left promiscuous mode [ 134.176454][ T3964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.186528][ T3964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.215991][ T3964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.241221][ T3964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.294397][ T3964] device bridge_slave_1 left promiscuous mode [ 134.349699][ T3964] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.361849][ T3964] device bridge_slave_0 left promiscuous mode [ 134.368109][ T3964] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.399646][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 134.456924][ T3964] device veth1_macvtap left promiscuous mode [ 134.472350][ T3964] device veth0_macvtap left promiscuous mode [ 134.509754][ T3964] device veth1_vlan left promiscuous mode [ 134.521408][ T3964] device veth0_vlan left promiscuous mode [ 135.457838][ T3964] team0 (unregistering): Port device team_slave_1 removed [ 135.533818][ T3964] team0 (unregistering): Port device team_slave_0 removed [ 135.602612][ T3964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.665115][ T9] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xa1 [ 135.701427][ T3964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.944255][ T3964] bond0 (unregistering): Released all slaves [ 136.108256][ T6935] team0: Port device team_slave_0 added [ 136.142237][ T6935] team0: Port device team_slave_1 added [ 136.242896][ T6935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.262349][ T6935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.325813][ T6935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.349141][ T6935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.372878][ T6935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.473744][ T6935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.485216][ T3569] Bluetooth: hci1: command 0x041b tx timeout [ 136.561948][ T3734] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xa1 [ 136.634153][ T6935] device hsr_slave_0 entered promiscuous mode [ 136.736008][ T6935] device hsr_slave_1 entered promiscuous mode [ 136.750643][ T6935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.777897][ T6935] Cannot create hsr debugfs directory [ 137.495694][ T9] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xa1 [ 137.781139][ T7157] hsr0 speed is unknown, defaulting to 1000 [ 138.561475][ T3567] Bluetooth: hci1: command 0x040f tx timeout [ 138.719230][ T7157] chnl_net:caif_netlink_parms(): no params data found [ 138.766014][ T6935] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 138.932556][ T6935] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 139.013227][ T6935] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 139.184982][ T6935] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 139.281992][ T7157] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.308829][ T7157] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.337204][ T7157] device bridge_slave_0 entered promiscuous mode [ 139.367938][ T7157] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.383820][ T7157] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.406315][ T7157] device bridge_slave_1 entered promiscuous mode [ 139.535415][ T7157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.613486][ T7157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.679880][ T1068] Bluetooth: hci3: command 0x0409 tx timeout [ 139.749131][ T7157] team0: Port device team_slave_0 added [ 139.786385][ T7157] team0: Port device team_slave_1 added [ 139.936408][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.958355][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.061062][ T7157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.124090][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.155193][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.250023][ T7157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.283743][ T6935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.411405][ T7157] device hsr_slave_0 entered promiscuous mode [ 140.411544][ T155] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xa1 [ 140.434106][ T7157] device hsr_slave_1 entered promiscuous mode [ 140.484216][ T7157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.505676][ T7157] Cannot create hsr debugfs directory [ 140.558307][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.595361][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.663552][ T6935] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.670783][ T3567] Bluetooth: hci1: command 0x0419 tx timeout [ 140.742457][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.768732][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.791799][ T21] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.798969][ T21] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.854141][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.883836][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.915244][ T21] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.922423][ T21] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.029878][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.040526][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.080422][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.103613][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.155790][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.266558][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.284485][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.307877][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.335321][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.370106][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.400125][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.430581][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.468151][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.759705][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 141.864694][ T7157] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.976344][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.993711][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.045590][ T6935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.122983][ T7157] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.230426][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.239412][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.323140][ T7157] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.416526][ T7385] serio: Serial port pts0 [ 142.443972][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.468364][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.513383][ T7157] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.573047][ T6935] device veth0_vlan entered promiscuous mode [ 142.582435][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.601216][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.645597][ T6935] device veth1_vlan entered promiscuous mode [ 142.739874][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.785987][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.824025][ T6935] device veth0_macvtap entered promiscuous mode [ 142.942804][ T6935] device veth1_macvtap entered promiscuous mode [ 143.056347][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.100018][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.123180][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.166090][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.188557][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.232114][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.266200][ T7436] loop4: detected capacity change from 0 to 128 [ 143.279245][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.290420][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.314138][ T6935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.326752][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.341474][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.350621][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.357328][ T7436] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 143.360730][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.402298][ T7436] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.422069][ T7436] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.4: No space for directory leaf checksum. Please run e2fsck -D. [ 143.442098][ T7436] EXT4-fs error (device loop4): __ext4_find_entry:1695: inode #2: comm syz-executor.4: checksumming directory block 0 [ 143.467420][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.487334][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.498045][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.508869][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.519238][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.530537][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.540654][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.553258][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.568478][ T6935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.580509][ T7157] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 143.593289][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.639879][ T7443] serio: Serial port pts0 [ 143.646452][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.670299][ T7157] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 143.681651][ T7157] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 143.693151][ T7157] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 143.713618][ T6935] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.725149][ T6935] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.734568][ T6935] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.744520][ T6935] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.840062][ T3567] Bluetooth: hci3: command 0x040f tx timeout [ 143.981410][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.022987][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.079297][ T7157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.088275][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.115172][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.129057][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.139016][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.140483][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.155452][ T7157] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.201576][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.218738][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.230062][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.244167][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.251333][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.270522][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.278543][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.345776][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.373780][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.380921][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.422145][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.513513][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.533436][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.571795][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.601864][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.626875][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.716961][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.727329][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.744863][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.764320][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.770076][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 144.786379][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.804588][ T7157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.856635][ T3964] device hsr_slave_0 left promiscuous mode [ 144.882352][ T3964] device hsr_slave_1 left promiscuous mode [ 144.917549][ T3964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.934226][ T3964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.966228][ T3964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.984297][ T3964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.007812][ T3964] device bridge_slave_1 left promiscuous mode [ 145.047697][ T3964] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.085686][ T3964] device bridge_slave_0 left promiscuous mode [ 145.122854][ T3964] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.247084][ T3964] device veth1_macvtap left promiscuous mode [ 145.261291][ T3964] device veth0_macvtap left promiscuous mode [ 145.276897][ T3964] device veth1_vlan left promiscuous mode [ 145.311006][ T3964] device veth0_vlan left promiscuous mode [ 145.752081][ T7541] loop2: detected capacity change from 0 to 2048 [ 145.797658][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 145.863363][ T7541] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 145.883319][ T7541] System zones: 0-7 [ 145.902576][ T7541] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 145.919937][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 145.966824][ T7541] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set [ 146.029127][ T7541] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 146.047811][ T7541] EXT4-fs (loop2): This should not happen!! Data will be lost [ 146.047811][ T7541] [ 146.057851][ T7541] EXT4-fs (loop2): Total free blocks count 0 [ 146.065087][ T7541] EXT4-fs (loop2): Free/Dirty block details [ 146.081322][ T7541] EXT4-fs (loop2): free_blocks=0 [ 146.086615][ T7541] EXT4-fs (loop2): dirty_blocks=48 [ 146.092207][ T7541] EXT4-fs (loop2): Block reservation details [ 146.098379][ T7541] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 146.217286][ T3964] team0 (unregistering): Port device team_slave_1 removed [ 146.286564][ T3964] team0 (unregistering): Port device team_slave_0 removed [ 146.331139][ T3964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.376257][ T3964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.545204][ T3964] bond0 (unregistering): Released all slaves [ 146.644957][ T3246] hsr0 speed is unknown, defaulting to 1000 [ 146.668533][ T3246] ================================================================== [ 146.676992][ T3246] BUG: KASAN: use-after-free in siw_query_port+0x342/0x430 [ 146.684247][ T3246] Read of size 4 at addr ffff888077d880d8 by task kworker/0:3/3246 [ 146.692193][ T3246] [ 146.694542][ T3246] CPU: 0 PID: 3246 Comm: kworker/0:3 Not tainted 5.15.160-syzkaller #0 [ 146.702810][ T3246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 146.712902][ T3246] Workqueue: infiniband ib_cache_event_task [ 146.718834][ T3246] Call Trace: [ 146.722142][ T3246] [ 146.725094][ T3246] dump_stack_lvl+0x1e3/0x2d0 [ 146.729804][ T3246] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 146.735476][ T3246] ? _printk+0xd1/0x120 [ 146.739665][ T3246] ? __wake_up_klogd+0xcc/0x100 [ 146.744548][ T3246] ? panic+0x860/0x860 [ 146.749196][ T3246] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 146.754684][ T3246] print_address_description+0x63/0x3b0 [ 146.760299][ T3246] ? siw_query_port+0x342/0x430 [ 146.765169][ T3246] kasan_report+0x16b/0x1c0 [ 146.769678][ T3246] ? siw_query_port+0x342/0x430 [ 146.774559][ T3246] siw_query_port+0x342/0x430 [ 146.779260][ T3246] ? ib_query_port+0x5cd/0x770 [ 146.784052][ T3246] ib_cache_update+0x1a8/0xaf0 [ 146.788862][ T3246] ? ib_cache_setup_one+0x5a0/0x5a0 [ 146.794088][ T3246] ? read_lock_is_recursive+0x10/0x10 [ 146.799572][ T3246] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 146.805591][ T3246] ? print_irqtrace_events+0x210/0x210 [ 146.811081][ T3246] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 146.817010][ T3246] ib_cache_event_task+0xef/0x1e0 [ 146.822166][ T3246] process_one_work+0x8a1/0x10c0 [ 146.827143][ T3246] ? worker_detach_from_pool+0x260/0x260 [ 146.832809][ T3246] ? _raw_spin_lock_irqsave+0x120/0x120 [ 146.838390][ T3246] ? kthread_data+0x4e/0xc0 [ 146.842918][ T3246] ? wq_worker_running+0x97/0x170 [ 146.847969][ T3246] worker_thread+0xaca/0x1280 [ 146.852704][ T3246] kthread+0x3f6/0x4f0 [ 146.856798][ T3246] ? rcu_lock_release+0x20/0x20 [ 146.861672][ T3246] ? kthread_blkcg+0xd0/0xd0 [ 146.866291][ T3246] ret_from_fork+0x1f/0x30 [ 146.870757][ T3246] [ 146.873785][ T3246] [ 146.876115][ T3246] Allocated by task 3530: [ 146.880448][ T3246] ____kasan_kmalloc+0xba/0xf0 [ 146.885233][ T3246] __kmalloc_node+0x199/0x390 [ 146.889935][ T3246] kvmalloc_node+0x80/0x140 [ 146.894471][ T3246] alloc_netdev_mqs+0x85/0xc10 [ 146.899261][ T3246] rtnl_create_link+0x2e9/0x9c0 [ 146.904138][ T3246] rtnl_newlink+0x13d2/0x2070 [ 146.908841][ T3246] rtnetlink_rcv_msg+0x993/0xee0 [ 146.913804][ T3246] netlink_rcv_skb+0x1cf/0x410 [ 146.918590][ T3246] netlink_unicast+0x7b6/0x980 [ 146.923553][ T3246] netlink_sendmsg+0xa30/0xd60 [ 146.928346][ T3246] __sys_sendto+0x564/0x720 [ 146.932921][ T3246] __x64_sys_sendto+0xda/0xf0 [ 146.937629][ T3246] do_syscall_64+0x3b/0xb0 [ 146.942075][ T3246] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.948004][ T3246] [ 146.950343][ T3246] Freed by task 3964: [ 146.954331][ T3246] kasan_set_track+0x4b/0x80 [ 146.958946][ T3246] kasan_set_free_info+0x1f/0x40 [ 146.963910][ T3246] ____kasan_slab_free+0xd8/0x120 [ 146.968980][ T3246] slab_free_freelist_hook+0xdd/0x160 [ 146.974382][ T3246] kfree+0xf1/0x270 [ 146.978215][ T3246] device_release+0x91/0x1c0 [ 146.982828][ T3246] kobject_put+0x224/0x460 [ 146.987266][ T3246] netdev_run_todo+0xaaf/0xc40 [ 146.992053][ T3246] default_device_exit_batch+0x395/0x3f0 [ 146.997713][ T3246] cleanup_net+0x763/0xb60 [ 147.002156][ T3246] process_one_work+0x8a1/0x10c0 [ 147.007118][ T3246] worker_thread+0xaca/0x1280 [ 147.011818][ T3246] kthread+0x3f6/0x4f0 [ 147.015907][ T3246] ret_from_fork+0x1f/0x30 [ 147.020382][ T3246] [ 147.022714][ T3246] The buggy address belongs to the object at ffff888077d88000 [ 147.022714][ T3246] which belongs to the cache kmalloc-cg-4k of size 4096 [ 147.037048][ T3246] The buggy address is located 216 bytes inside of [ 147.037048][ T3246] 4096-byte region [ffff888077d88000, ffff888077d89000) [ 147.050443][ T3246] The buggy address belongs to the page: [ 147.056196][ T3246] page:ffffea0001df6200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77d88 [ 147.066400][ T3246] head:ffffea0001df6200 order:3 compound_mapcount:0 compound_pincount:0 [ 147.074729][ T3246] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 147.082750][ T3246] raw: 00fff00000010200 0000000000000000 0000000200000001 ffff888011c4c280 [ 147.091358][ T3246] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 147.099956][ T3246] page dumped because: kasan: bad access detected [ 147.106390][ T3246] page_owner tracks the page as allocated [ 147.112129][ T3246] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2961, ts 27736804024, free_ts 27441356102 [ 147.131254][ T3246] get_page_from_freelist+0x322a/0x33c0 [ 147.136831][ T3246] __alloc_pages+0x272/0x700 [ 147.141447][ T3246] new_slab+0xbb/0x4b0 [ 147.145542][ T3246] ___slab_alloc+0x6f6/0xe10 [ 147.150157][ T3246] __kmalloc_node+0x1fa/0x390 [ 147.154859][ T3246] kvmalloc_node+0x80/0x140 [ 147.159382][ T3246] seq_read_iter+0x1fe/0xd10 [ 147.163970][ T3246] vfs_read+0xa9f/0xe10 [ 147.168127][ T3246] ksys_read+0x1a2/0x2c0 [ 147.172370][ T3246] do_syscall_64+0x3b/0xb0 [ 147.176807][ T3246] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.182897][ T3246] page last free stack trace: [ 147.187579][ T3246] free_unref_page_prepare+0xc34/0xcf0 [ 147.193066][ T3246] free_unref_page+0x95/0x2d0 [ 147.197767][ T3246] __unfreeze_partials+0x1b7/0x210 [ 147.202902][ T3246] put_cpu_partial+0x132/0x1a0 [ 147.207694][ T3246] ___cache_free+0xe3/0x100 [ 147.212227][ T3246] qlist_free_all+0x36/0x90 [ 147.216932][ T3246] kasan_quarantine_reduce+0x162/0x180 [ 147.222410][ T3246] __kasan_slab_alloc+0x2f/0xc0 [ 147.227281][ T3246] slab_post_alloc_hook+0x53/0x380 [ 147.232414][ T3246] kmem_cache_alloc+0xf3/0x280 [ 147.237199][ T3246] getname_flags+0xb8/0x4e0 [ 147.241726][ T3246] user_path_at_empty+0x2a/0x180 [ 147.246687][ T3246] vfs_statx+0x106/0x3b0 [ 147.250951][ T3246] __x64_sys_newfstatat+0x12c/0x1b0 [ 147.256172][ T3246] do_syscall_64+0x3b/0xb0 [ 147.260614][ T3246] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.266524][ T3246] [ 147.268862][ T3246] Memory state around the buggy address: [ 147.274510][ T3246] ffff888077d87f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 147.280774][ T7157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.282583][ T3246] ffff888077d88000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.282627][ T3246] >ffff888077d88080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.282638][ T3246] ^ [ 147.299762][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.305510][ T3246] ffff888077d88100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.305526][ T3246] ffff888077d88180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.305537][ T3246] ================================================================== [ 147.305546][ T3246] Disabling lock debugging due to kernel taint [ 147.316472][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.355243][ T3246] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 147.364918][ T3246] CPU: 0 PID: 3246 Comm: kworker/0:3 Tainted: G B 5.15.160-syzkaller #0 [ 147.374684][ T3246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 147.384760][ T3246] Workqueue: infiniband ib_cache_event_task [ 147.390688][ T3246] Call Trace: [ 147.393978][ T3246] [ 147.396943][ T3246] dump_stack_lvl+0x1e3/0x2d0 [ 147.401668][ T3246] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 147.407323][ T3246] ? panic+0x860/0x860 [ 147.411422][ T3246] ? preempt_schedule_common+0xa6/0xd0 [ 147.417082][ T3246] ? preempt_schedule+0xd9/0xe0 [ 147.421967][ T3246] panic+0x318/0x860 [ 147.425891][ T3246] ? check_panic_on_warn+0x1d/0xa0 [ 147.431068][ T3246] ? fb_is_primary_device+0xd0/0xd0 [ 147.436295][ T3246] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 147.442299][ T3246] ? _raw_spin_unlock+0x40/0x40 [ 147.447169][ T3246] ? print_memory_metadata+0xe2/0x140 [ 147.452545][ T3246] check_panic_on_warn+0x7e/0xa0 [ 147.457484][ T3246] ? siw_query_port+0x342/0x430 [ 147.462331][ T3246] end_report+0x6d/0xf0 [ 147.466482][ T3246] kasan_report+0x18e/0x1c0 [ 147.470983][ T3246] ? siw_query_port+0x342/0x430 [ 147.475829][ T3246] siw_query_port+0x342/0x430 [ 147.480499][ T3246] ? ib_query_port+0x5cd/0x770 [ 147.485257][ T3246] ib_cache_update+0x1a8/0xaf0 [ 147.490021][ T3246] ? ib_cache_setup_one+0x5a0/0x5a0 [ 147.495651][ T3246] ? read_lock_is_recursive+0x10/0x10 [ 147.501019][ T3246] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 147.507002][ T3246] ? print_irqtrace_events+0x210/0x210 [ 147.512454][ T3246] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 147.518348][ T3246] ib_cache_event_task+0xef/0x1e0 [ 147.523466][ T3246] process_one_work+0x8a1/0x10c0 [ 147.528405][ T3246] ? worker_detach_from_pool+0x260/0x260 [ 147.534032][ T3246] ? _raw_spin_lock_irqsave+0x120/0x120 [ 147.539578][ T3246] ? kthread_data+0x4e/0xc0 [ 147.544089][ T3246] ? wq_worker_running+0x97/0x170 [ 147.549110][ T3246] worker_thread+0xaca/0x1280 [ 147.553794][ T3246] kthread+0x3f6/0x4f0 [ 147.557876][ T3246] ? rcu_lock_release+0x20/0x20 [ 147.562725][ T3246] ? kthread_blkcg+0xd0/0xd0 [ 147.567306][ T3246] ret_from_fork+0x1f/0x30 [ 147.571725][ T3246] [ 147.574827][ T3246] Kernel Offset: disabled [ 147.579150][ T3246] Rebooting in 86400 seconds..